
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
File: 1-z2QpIni1JxWTgijovNEX7LI1AQ.mft (raw, json)
Hash identifier: VNDjMm/OA7QUbF3EFam+4KoRlll/M8HOyCBjB2Umdys=
Subject key identifier: C8:4A:E4:5E:08:5A:A7:04:BE:A8:16:B7:1A:02:7F:4A:CB:BD:DD:4C
Authority key identifier: FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04
Certificate issuer: /CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
Certificate serial: 0198D5158887A62E3D1D689BD7731E999440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
Manifest number: 10E1
Signing time: Sat 23 Aug 2025 04:00:14 +0000
Manifest this update: Sat 23 Aug 2025 04:00:14 +0000
Manifest next update: Sun 24 Aug 2025 04:00:14 +0000
Files and hashes: 1: 1-z2QpIni1JxWTgijovNEX7LI1AQ.crl (hash: vaXdj3JBdpSDJE01mJgC+dn/oQ50YxnnpfytyjSsjbY=)
2: D-kvzPrAwGbNDxb_KzLw4lsFxes.roa (hash: JU5Ry1WiWCRnSvWFUZ6oaKSDfbBv9sPRmk3mHwJb9y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:88:87:a6:2e:3d:1d:68:9b:d7:73:1e:99:94:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
Validity
Not Before: Aug 23 04:00:14 2025 GMT
Not After : Aug 24 04:00:14 2025 GMT
Subject: CN=c84ae45e085aa704bea816b71a027f4acbbddd4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f6:b3:46:9d:8d:d0:45:d8:2b:be:01:bc:f7:
0b:3b:b0:cf:9e:f3:c5:2d:f4:d7:61:77:71:6f:aa:
cb:2f:eb:a0:2d:f0:d4:81:64:80:84:bc:e4:99:33:
4a:24:72:12:e9:b8:a4:52:0e:c1:f2:d6:4a:c3:ba:
2a:0d:b5:a8:ad:dd:d2:87:24:5b:b5:cd:60:76:b2:
52:6e:f7:b0:e5:33:16:ac:c8:9d:ac:0e:83:03:37:
9b:1e:f3:49:25:99:59:cb:b5:c1:f3:04:3c:c2:cb:
0e:76:71:4d:26:ac:95:e8:ae:6d:be:fe:ec:9c:d4:
19:1d:65:ea:d9:9b:f2:60:95:14:43:9c:61:63:e0:
f6:e9:ae:aa:9a:c6:28:db:0b:f5:05:ce:d6:25:c7:
a7:e4:59:cd:49:e1:b7:34:87:a9:fc:e6:b1:50:b2:
6d:cf:c9:72:42:33:06:31:87:85:34:a2:bd:d6:9c:
d9:f5:87:e7:26:69:1a:ec:80:d8:6a:77:08:ae:7c:
44:a4:5b:eb:b1:88:05:aa:b1:e7:9e:58:8d:08:cf:
41:8b:1b:54:96:b6:bd:f1:0d:54:ff:3c:2b:2b:bb:
1a:09:53:f7:ff:23:ee:71:e7:7d:eb:ff:43:b5:a0:
ac:3b:7f:31:7f:d1:91:9f:8e:9d:95:11:52:c6:74:
05:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4A:E4:5E:08:5A:A7:04:BE:A8:16:B7:1A:02:7F:4A:CB:BD:DD:4C
X509v3 Authority Key Identifier:
keyid:FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:91:ec:ec:60:9e:dd:4f:b9:4b:4c:66:db:f2:47:da:7b:fc:
96:0a:78:dd:95:99:0f:da:d6:31:15:df:7f:69:23:85:b1:9c:
b7:76:34:af:29:22:4d:ed:4a:79:b4:cd:8d:70:00:e3:9e:18:
96:e2:63:f5:eb:3f:71:95:9f:5a:38:81:a1:49:65:91:3a:85:
c1:ae:fc:ba:d0:fc:0a:72:3a:3e:97:11:bd:56:db:a7:46:20:
e6:87:ff:50:6f:f5:ae:8b:15:cb:1b:99:e9:b6:2e:4a:41:dc:
6f:8f:4d:a2:d4:1a:08:fc:75:8f:9a:46:af:65:96:bd:10:fe:
f4:7c:27:ff:ed:08:83:53:53:fc:59:ee:1d:1b:4d:6d:0d:db:
bd:6f:b4:d7:a4:71:f1:c5:9a:60:13:5d:95:45:d1:2c:de:a1:
81:62:0e:dd:40:39:c4:d2:90:08:79:38:1d:1f:9d:a2:79:d2:
4b:7c:fd:c6:8a:73:5b:ed:3f:48:d3:de:77:a1:45:e4:07:2b:
54:e5:a0:d7:44:7b:c5:8a:8c:cd:a6:a4:17:e1:58:7b:bb:b9:
c0:ed:fb:ea:b9:0d:c5:c6:f1:df:2c:36:e3:6a:b9:8b:72:0b:
b3:fc:af:7f:a2:5b:31:f5:b8:e4:fd:0e:64:af:b1:db:1a:5f:
54:e8:31:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:01:52 2025 by rpki-client