Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
File: 1P97rGRNWVZyLl4YOiL7FFXnVUY.mft (raw, json)
Hash identifier: SbhkUxByuvyramTrltZFtiQMMQZQWd+nxLCEu0g10hs=
Subject key identifier: B2:B6:16:56:46:CC:6C:A4:F9:7B:F2:94:74:87:FC:57:81:23:96:CE
Authority key identifier: D4:FF:7B:AC:64:4D:59:56:72:2E:5E:18:3A:22:FB:14:55:E7:55:46
Certificate issuer: /CN=d4ff7bac644d5956722e5e183a22fb1455e75546
Certificate serial: 0198D4E0BC853748E1ECA9A5FB3AE00B1596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
Manifest number: 02D5
Signing time: Sat 23 Aug 2025 03:02:34 +0000
Manifest this update: Sat 23 Aug 2025 03:02:34 +0000
Manifest next update: Sun 24 Aug 2025 03:02:34 +0000
Files and hashes: 1: 1P97rGRNWVZyLl4YOiL7FFXnVUY.crl (hash: tcIXPmsQV0UX7DOUWEFzPtfdWSqvAcWAvsbKSO4ssTI=)
2: BBrcZolorsy-tffprBkzb6kzxjw.roa (hash: LubTLYd6O/FVL7Y6tbf5xWEWtjZWCQG4GmiGhTzuDxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:bc:85:37:48:e1:ec:a9:a5:fb:3a:e0:0b:15:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff7bac644d5956722e5e183a22fb1455e75546
Validity
Not Before: Aug 23 03:02:34 2025 GMT
Not After : Aug 24 03:02:34 2025 GMT
Subject: CN=b2b6165646cc6ca4f97bf2947487fc57812396ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:69:43:ce:3e:97:bc:f5:66:7b:5c:99:48:5d:
fc:33:a6:f4:24:04:06:ca:b6:47:4d:89:e2:f7:57:
5a:d9:c5:09:c7:ee:5a:68:35:93:4b:f0:91:e8:ae:
63:d9:c0:42:b9:c3:74:bc:82:65:ef:34:6c:27:f0:
22:bc:17:be:f4:a0:76:e0:f0:62:9a:ed:9e:94:9b:
94:61:38:4d:3e:be:39:ad:a7:ea:c6:cb:3a:98:fa:
84:f9:cd:dd:5e:5c:0f:eb:23:68:8b:68:68:8a:80:
16:94:76:c5:a5:f7:39:47:e1:82:e5:2d:86:a6:9a:
a2:48:00:e8:3e:d5:c9:cf:d1:19:ba:10:11:a1:63:
dd:5e:74:5e:8a:fb:2f:67:42:57:a2:6b:fa:8d:ac:
0a:86:71:d6:18:23:6c:72:e7:d4:be:3c:87:9f:64:
ac:ad:51:a0:fa:7d:ea:9f:65:c5:96:cc:1c:1f:5c:
81:1e:51:3a:78:6a:dd:bb:41:82:78:44:f4:93:0e:
c6:fa:79:e8:64:26:cd:a2:a7:f0:82:e6:91:e7:b6:
0f:73:b1:23:b7:12:50:27:f8:14:bd:97:42:63:33:
8b:b0:0c:9e:6e:df:1a:3e:0b:7c:3b:04:f9:0e:72:
a4:fe:c7:f7:90:68:2b:7b:b1:a1:97:be:92:24:90:
ff:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B6:16:56:46:CC:6C:A4:F9:7B:F2:94:74:87:FC:57:81:23:96:CE
X509v3 Authority Key Identifier:
keyid:D4:FF:7B:AC:64:4D:59:56:72:2E:5E:18:3A:22:FB:14:55:E7:55:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:24:b0:d4:3a:7b:94:a8:06:50:7d:65:74:ad:14:94:08:7d:
8d:fc:69:54:58:7a:38:11:07:38:7e:93:05:01:29:a2:cc:08:
33:f1:87:40:0c:31:f4:6b:5b:8d:7a:dc:91:99:08:9f:86:7e:
85:b0:26:cb:0c:eb:b7:44:3a:77:7a:db:e8:31:c5:ba:fe:b4:
04:35:f1:90:5f:db:b0:bc:28:28:e1:3b:5d:b5:bb:22:e0:12:
49:94:b1:53:b6:db:d6:45:81:ae:fb:6a:2b:e6:ac:a4:5b:16:
c1:4d:07:01:b1:cf:c5:8a:56:fb:37:09:ec:e5:ee:66:64:d3:
1a:56:1b:ec:a9:b2:30:d8:a4:c4:2a:a3:ba:52:77:77:56:1f:
34:5d:3b:ff:7a:97:61:6b:a6:a7:22:27:26:d8:2a:2b:fc:1f:
c1:80:fe:76:4a:16:d4:a6:20:b3:99:57:11:8e:05:2b:e9:b4:
92:c7:07:08:35:83:fa:7a:37:5f:17:0c:1a:ef:13:09:f7:83:
ea:da:da:aa:49:74:56:b4:f0:32:eb:b3:ac:f4:68:9a:51:79:
2f:86:a0:8a:55:21:63:c4:40:92:c3:ed:29:06:18:5e:20:ad:
33:95:13:5f:65:de:04:23:13:8b:70:c8:72:c8:6e:5f:d6:4d:
94:a2:23:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:09:57 2025 by rpki-client