Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
File: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft (raw, json)
Hash identifier: HjYMk3zhms5khmlnqaPEIeZoAR+xRm5o0Zz2wtPYlY8=
Subject key identifier: EC:79:9E:B0:FC:25:DC:CA:B2:7B:4F:A9:FA:6C:D3:7D:38:72:D7:70
Authority key identifier: FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
Certificate issuer: /CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Certificate serial: 0198D4E0B8B727A56740EC0507B113332428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:02:33 +0000
Manifest this update: Sat 23 Aug 2025 03:02:33 +0000
Manifest next update: Sun 24 Aug 2025 03:02:33 +0000
Files and hashes: 1: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl (hash: pkxxUVzLr4iNiKds6cT+CIwepbRTtc1ANDRn0wTIFgQ=)
2: _H5ZwiyO85Qb1mh6oLMaDC1D8k4.roa (hash: WktPSy7l9BrHoKHlFfEwjyZbcRyoTKbpIr7ITj6OKq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:b8:b7:27:a5:67:40:ec:05:07:b1:13:33:24:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Validity
Not Before: Aug 23 03:02:33 2025 GMT
Not After : Aug 24 03:02:33 2025 GMT
Subject: CN=ec799eb0fc25dccab27b4fa9fa6cd37d3872d770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ab:84:78:2f:b8:19:8e:bd:3a:db:cd:34:9f:
3e:6a:ee:bb:f4:a5:22:52:8c:61:6b:b3:be:74:64:
69:21:c7:42:16:ac:02:2f:f3:33:e0:a2:f3:81:aa:
a2:73:93:27:bd:cf:cc:95:43:30:b9:a1:51:c0:c2:
9d:fc:84:94:36:7f:b0:80:9e:84:ed:a7:44:8d:99:
10:ec:5d:be:87:fd:f7:35:df:09:26:a0:f5:79:03:
cf:6e:b4:0f:d7:f9:42:2f:ba:77:32:a8:c7:d6:7e:
74:37:a1:d5:01:87:26:e5:da:97:b0:b1:8c:84:8a:
33:c4:09:40:96:c9:c3:a3:aa:e5:5e:c3:b5:57:48:
b8:ea:a1:2c:1b:f3:8f:72:9e:d2:b0:40:51:d7:57:
a9:96:aa:a9:ba:44:4c:08:b2:be:d1:ee:71:d7:b2:
f3:2b:02:c1:44:45:3e:87:cf:82:45:1a:8d:93:64:
e0:a5:6d:b7:d0:38:ac:0f:a1:f4:72:39:34:21:b2:
43:0f:af:aa:06:96:14:cb:78:08:89:25:7a:c9:c7:
c5:42:48:ef:44:2b:7f:81:bd:5a:c0:33:5a:94:8b:
a7:78:ab:39:26:bb:0e:62:ec:4a:97:9a:10:fd:93:
eb:50:6c:8e:cd:ad:84:5d:e3:88:f6:b1:71:0e:8f:
29:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:79:9E:B0:FC:25:DC:CA:B2:7B:4F:A9:FA:6C:D3:7D:38:72:D7:70
X509v3 Authority Key Identifier:
keyid:FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:22:fb:29:dc:e0:e0:44:60:4d:91:4c:bb:fc:67:a7:47:29:
b6:13:60:38:66:1d:fa:b4:c5:85:30:66:ea:3d:c4:c9:35:15:
57:48:16:1e:f7:58:40:b7:1f:a6:58:c5:16:5f:77:92:f8:39:
66:42:2f:95:51:5f:12:9b:06:2d:33:6a:76:ff:7b:bc:90:82:
11:b7:8c:c3:e3:7e:01:23:2b:27:07:3b:15:1c:31:e4:6a:1f:
d6:21:54:f3:46:a2:43:ca:34:a0:d6:7a:1b:29:c7:83:8b:d8:
b9:bd:14:38:75:f1:ed:24:2d:cf:d5:98:88:f4:67:d8:71:38:
7c:48:03:a4:b1:57:cf:20:c1:89:9d:f8:f7:85:9c:10:e4:56:
78:ab:4f:4b:73:d9:78:58:35:31:a7:e2:dc:f1:5d:72:d2:e8:
a9:29:71:34:e8:d9:dd:9d:14:37:b5:1d:bc:a7:5d:56:1c:0d:
8f:65:6c:39:d0:0a:95:91:67:9e:7d:06:40:5a:8e:f2:e6:f0:
75:89:6f:50:61:90:c9:d5:04:e2:c1:57:3d:4c:44:e6:e9:de:
f4:13:bc:21:c2:ac:29:31:7d:a9:d3:ae:c3:84:ed:f4:50:a9:
d7:63:a3:3b:8b:70:93:77:ed:32:dc:3f:08:87:dd:ba:73:4c:
2f:50:c8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:40 2025 by rpki-client