Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
File: 1bFX6mgu908PHvZ_oekWDRfNLpM.mft (raw, json)
Hash identifier: ZvB/AJMJ/tOqIasqLQdl/etkCwq1jaXpReCUVmlF55M=
Subject key identifier: 4A:41:32:11:8F:38:F8:87:AE:E7:DE:67:C5:07:2F:AB:DF:E0:00:DB
Authority key identifier: D5:B1:57:EA:68:2E:F7:4F:0F:1E:F6:7F:A1:E9:16:0D:17:CD:2E:93
Certificate issuer: /CN=d5b157ea682ef74f0f1ef67fa1e9160d17cd2e93
Certificate serial: 0198D660CD804F9106FF4921ACF7666D10A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 10:02:04 +0000
Manifest this update: Sat 23 Aug 2025 10:02:04 +0000
Manifest next update: Sun 24 Aug 2025 10:02:04 +0000
Files and hashes: 1: 1bFX6mgu908PHvZ_oekWDRfNLpM.crl (hash: ZPK/etfjkDOfvkGgvJrnuOmvif3KsZMRT1ptfuUgu7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:cd:80:4f:91:06:ff:49:21:ac:f7:66:6d:10:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b157ea682ef74f0f1ef67fa1e9160d17cd2e93
Validity
Not Before: Aug 23 10:02:04 2025 GMT
Not After : Aug 24 10:02:04 2025 GMT
Subject: CN=4a4132118f38f887aee7de67c5072fabdfe000db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:75:72:99:93:0a:ff:7e:a3:96:b0:f0:db:fc:
6c:e9:c0:68:6c:31:9b:f7:1b:70:df:23:a7:2a:26:
d3:1c:f7:19:00:c3:18:c3:ad:3c:ff:f6:63:b4:aa:
88:48:71:00:48:5f:f5:a2:43:f2:c4:30:89:8e:b8:
8d:c1:8b:48:2f:68:a8:62:7f:59:09:b1:c2:db:62:
71:e1:af:23:f1:6f:e6:4d:14:aa:37:f2:dd:ac:9c:
a1:2d:3a:9e:ed:36:6f:49:dc:bb:f0:84:6b:88:f6:
d3:11:99:52:32:fb:d6:ee:ac:15:11:3a:01:a4:20:
92:57:6a:bf:12:18:29:49:3b:90:08:dc:d4:08:35:
e5:f1:df:3a:1e:62:f4:75:4c:92:ee:7e:1c:4d:2e:
40:45:8e:d4:1e:14:9e:77:33:de:7d:72:07:23:51:
7c:19:0f:7b:df:c2:a9:3e:4b:55:66:31:2d:95:2c:
60:1c:b1:e5:b5:13:da:49:87:d8:59:73:45:b1:9f:
39:4e:d8:05:ca:46:27:86:40:2e:4f:d1:d1:02:db:
44:98:01:06:8a:03:bf:1c:23:b3:b1:04:3d:94:95:
0d:ee:45:91:79:a2:14:35:55:3a:fb:47:56:71:67:
ba:46:ed:73:5d:72:75:c5:83:9a:eb:63:e3:9c:34:
7b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:41:32:11:8F:38:F8:87:AE:E7:DE:67:C5:07:2F:AB:DF:E0:00:DB
X509v3 Authority Key Identifier:
keyid:D5:B1:57:EA:68:2E:F7:4F:0F:1E:F6:7F:A1:E9:16:0D:17:CD:2E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:65:e6:17:87:09:19:d4:da:d1:bb:80:ed:c8:2f:73:90:8f:
20:8e:5b:9d:b8:7c:7e:f7:63:10:bd:b9:70:ef:9d:63:f1:17:
d0:4b:43:d9:45:c2:91:ff:c0:5e:ed:59:97:89:fa:da:87:4b:
b1:72:e3:de:b9:c9:72:4b:a6:53:49:90:e7:19:68:8a:85:2b:
60:df:b8:d7:67:9a:bf:0d:03:f8:05:a2:ff:5d:35:e1:32:29:
40:3e:30:d5:32:6c:23:ba:2f:b3:88:b0:5a:83:28:2d:81:d4:
3e:d7:a1:d6:0e:b8:60:e1:7f:e0:80:ad:4e:a2:8b:7e:26:48:
77:2b:19:0b:fe:85:64:85:49:28:34:3a:cc:5d:9d:f9:ee:c3:
a2:a7:df:89:6b:72:85:9b:d7:a8:7a:fa:27:6b:08:49:78:ac:
e3:02:56:22:4a:3c:30:36:00:24:6d:97:59:70:74:b6:ff:4a:
d6:35:b9:fa:85:b4:c9:f6:19:d4:d8:6e:39:ae:a5:b0:7e:10:
65:d2:2f:1d:65:65:5a:46:56:6f:10:95:39:e0:56:d0:85:f6:
83:86:fe:56:76:5d:4d:bb:60:cc:81:92:f1:22:81:74:2e:5e:
fa:28:50:e9:fe:16:43:f5:67:dd:f3:a8:34:ba:e3:a2:12:ea:
f1:5f:87:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:52:04 2025 by rpki-client