Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
File: 1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft (raw, json)
Hash identifier: m5b7j0t+9G0M8VTP4m+A7A5KWbhII+zd//J5EKi+Cm0=
Subject key identifier: 10:8B:F9:FB:44:A4:8C:DC:A5:AE:79:A1:C7:D8:8E:61:63:B8:11:6E
Authority key identifier: FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0
Certificate issuer: /CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0
Certificate serial: 0198D515AC0C40D285B135264738780402BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
Manifest number: 0A96
Signing time: Sat 23 Aug 2025 04:00:23 +0000
Manifest this update: Sat 23 Aug 2025 04:00:23 +0000
Manifest next update: Sun 24 Aug 2025 04:00:23 +0000
Files and hashes: 1: 1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl (hash: /k+E5rh6J28oLvyn0eS4Kqcz/9KSMA7AD/hmE0L91sY=)
2: LPmwSEr2cec7eKNG65DFfjhgZlg.roa (hash: 2uSr4hxNi+F1N3JsqPYCLDQN2e8AEP4YyYoo3iXqMBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:ac:0c:40:d2:85:b1:35:26:47:38:78:04:02:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0
Validity
Not Before: Aug 23 04:00:23 2025 GMT
Not After : Aug 24 04:00:23 2025 GMT
Subject: CN=108bf9fb44a48cdca5ae79a1c7d88e6163b8116e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7b:bd:b3:a1:da:7e:5f:f8:e9:53:c4:c0:6c:
7c:2a:7b:a1:37:79:bc:46:21:37:32:b7:34:05:1c:
8a:52:68:a7:92:6c:3c:73:9d:e1:a6:b5:69:ec:7b:
cb:6a:51:70:cf:da:af:44:6f:64:5f:27:76:18:fb:
85:90:ab:c5:02:0e:21:d5:43:90:91:29:1d:e3:a5:
5f:af:f1:02:3a:e1:8e:d5:8c:7a:c7:bd:98:7f:f7:
01:11:fe:f7:ab:3b:75:c1:2f:e6:3c:5c:97:a7:61:
f8:62:06:1e:a9:45:a8:cd:9d:28:5b:a1:95:f9:3e:
20:83:bd:4d:c8:10:da:a5:3f:75:6d:66:09:25:fc:
c2:5f:a4:b3:21:21:b9:3a:a0:b7:5b:7d:47:a8:5c:
2c:b5:fd:e1:ce:57:40:5c:0e:82:ce:f4:8e:7f:73:
c2:30:bc:36:b2:f9:c4:2f:79:73:1f:6d:bf:0b:d5:
a6:ae:49:70:6a:d6:6d:a3:db:cc:2b:db:77:f6:de:
95:b3:2d:cb:3d:1b:bf:53:a0:42:3c:54:7f:65:cb:
99:55:2e:c8:c3:1f:36:44:1b:31:3c:dc:39:11:67:
1a:a6:2c:71:1b:71:bf:ab:83:77:e5:c1:98:01:01:
8e:5f:a7:c4:6e:9f:f3:5e:cb:ac:d7:ad:48:1e:19:
39:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8B:F9:FB:44:A4:8C:DC:A5:AE:79:A1:C7:D8:8E:61:63:B8:11:6E
X509v3 Authority Key Identifier:
keyid:FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:fc:d1:40:6a:31:9a:6d:14:e3:c7:df:c3:13:88:d0:d8:f9:
01:0d:a1:ed:0f:7e:7a:e7:f2:28:1f:bd:c3:67:ee:5e:2c:17:
fe:5a:f0:ff:dd:b3:48:ae:2f:54:e2:6a:7f:19:35:a1:45:d5:
fd:26:66:00:54:bc:68:ac:8a:4a:0e:49:8a:ef:f2:62:2d:1c:
ac:6e:12:d5:97:1b:96:dd:02:2b:b7:d6:cf:4c:9f:f0:9c:2d:
72:90:0b:aa:36:b8:aa:ad:b7:5a:e8:4a:31:0e:ef:9e:11:31:
38:36:64:11:9f:ea:6d:c6:eb:27:31:b4:2b:64:18:43:c7:ca:
b6:09:c2:4b:a0:91:a6:0a:23:51:80:d6:1f:cb:72:3d:2a:46:
59:0a:0e:93:37:20:d9:55:bb:3f:5c:f3:5c:c6:0d:98:7e:e4:
8c:0f:ce:b5:2c:27:1c:98:26:12:49:98:a2:ee:7e:2d:99:0e:
b7:21:40:63:24:9a:54:e9:78:e8:b6:3b:0d:17:5a:e9:d7:bf:
c5:33:3f:c6:94:fa:ab:2e:01:1f:f5:4b:4a:d9:9c:03:3c:ea:
12:22:aa:5d:95:9e:b1:e3:6b:8f:4a:37:45:a4:b1:d9:33:e4:
36:eb:5f:5e:88:52:c6:f8:df:6a:e4:72:2c:36:99:2b:18:bd:
eb:2d:e9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:26:06 2025 by rpki-client