Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
File: 1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft (raw, json)
Hash identifier: Yn+YaTmGooyyweDf9yvMUlNO9UNUlSz9A4ALGECjlOk=
Subject key identifier: B9:B6:5E:74:BE:15:89:C2:7E:CB:F2:42:06:B3:5C:05:DC:F0:3D:E5
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 0198D5BC2A9E931520117BFA65DADAC60197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
Manifest number: 1675
Signing time: Sat 23 Aug 2025 07:02:15 +0000
Manifest this update: Sat 23 Aug 2025 07:02:15 +0000
Manifest next update: Sun 24 Aug 2025 07:02:15 +0000
Files and hashes: 1: 1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl (hash: iAeHdx3bjvV8glgO5+o1W+9wcsnc0G6x7yCJsZ/xoVk=)
2: 6bP2Hbq7B8FfgSpm-g0RjnRG09M.roa (hash: dhy3foa2kdGd9tWYMEzVZ1K79M1Cxv3oKtbrCE9/V7s=)
3: 9rPnc621PCZSzvwMRaLBWF8yQec.roa (hash: aB0fVKMxCD/z6BkZVG11TiYmDJy+6wMvki78RDMmYco=)
4: DdbBxkSpqv27jL5VCitevUUKtGo.roa (hash: W2qQ5Ka9ZbfjONO7pHLlOm1UmxsrTkoa9epsQmZhKZM=)
5: bE8Ho3jzn5ez3wNgEgsfXEX5CVE.roa (hash: eJjvEgOEH8QmE+x4otf72HZmDOo9rzbz4V41257+u/g=)
6: gpzNMZcwo35-oTXOI3kYk3hJ2t8.roa (hash: ngODPWQb3vvd7XrB/GBFFEdeU0LiXPVPYCwgvVTHlW8=)
7: nx9moqlHgSMsf9HgtOFQ0KmEqlE.roa (hash: WzE9rCGNMfQ+mIxm9E1YIp9r6V0lkGRucRNG6aY0mCs=)
8: rIf0kB8Rc3IRATRBayI1xPvP3QA.roa (hash: Rx69uj0bTYsl5V2DHt7vMOyICCeb975OsfQSSz+LlmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:2a:9e:93:15:20:11:7b:fa:65:da:da:c6:01:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Aug 23 07:02:15 2025 GMT
Not After : Aug 24 07:02:15 2025 GMT
Subject: CN=b9b65e74be1589c27ecbf24206b35c05dcf03de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:00:c9:db:f2:b4:14:63:9c:84:64:a8:81:cd:
2a:f3:26:e7:f6:fe:c4:ca:25:03:e9:5c:09:9f:ab:
a1:7d:36:b6:c7:ae:a7:66:1c:cc:29:0e:be:51:8b:
78:8c:37:41:05:c1:80:67:4e:32:35:94:a8:90:aa:
32:1e:9f:e2:c4:79:fc:f7:a7:a1:d4:f3:1c:89:ae:
ad:e5:0a:02:40:d1:9d:7e:bb:2e:0f:95:36:d0:1d:
d2:a1:5f:32:ac:69:72:5a:fc:8a:77:fc:c0:e5:40:
37:31:56:64:d4:5c:67:de:1d:43:5b:4c:ba:8e:a3:
2e:ff:27:69:44:eb:c0:e1:27:3b:c5:ff:0a:f9:a0:
94:4d:14:ab:24:e8:72:7e:70:4c:06:df:17:2b:2c:
26:77:df:59:32:be:18:ce:2d:0d:88:9b:e1:2c:f0:
f6:2b:72:10:64:0c:0a:f2:41:f9:c2:21:cc:f5:c4:
26:ea:e7:e6:d9:a9:67:1d:e4:73:03:94:1c:07:2b:
6a:91:73:be:f9:0c:53:18:74:9b:3d:13:4b:bc:9d:
ca:7d:54:23:1d:75:f6:83:fe:3f:96:8a:8b:f5:71:
4a:26:a9:8f:88:fb:e7:12:73:e9:b2:6b:77:0e:5b:
98:8f:09:8f:ff:d8:03:6f:48:c9:b0:25:df:55:66:
4f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B6:5E:74:BE:15:89:C2:7E:CB:F2:42:06:B3:5C:05:DC:F0:3D:E5
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:96:f4:9e:3a:07:b9:36:4c:16:1f:aa:7a:05:76:e6:1c:65:
19:7c:f5:a0:f7:e2:98:17:2a:6d:9c:4d:5f:25:b9:67:5d:30:
bc:c7:85:40:8e:c1:95:6d:21:df:9f:51:40:0f:b7:07:17:6d:
1e:ae:2a:f1:e8:8d:de:d9:6a:8b:8d:3f:b9:3b:76:b1:0e:77:
b0:61:ce:be:c4:16:74:16:93:aa:61:22:a6:5a:3e:ed:16:59:
a2:82:e9:26:32:e0:c0:6d:bf:57:30:9d:76:d2:a5:c0:e3:3b:
69:10:87:db:34:33:c3:ed:ec:9d:22:1e:e9:fb:8f:f7:18:b2:
5c:fe:79:89:d5:21:67:87:6a:0c:08:60:d7:ef:09:4d:bc:7c:
25:80:d5:49:3d:c2:2f:2b:e6:08:2d:f5:79:f0:0f:fa:e1:de:
f7:3c:80:f5:74:8a:ce:15:6a:a2:da:59:36:36:05:6b:85:a7:
e3:14:d1:bf:18:c0:c5:80:a0:8b:49:9a:e9:ed:6f:7f:b4:b5:
a5:0b:96:67:ec:41:bb:f1:dc:03:9f:27:4e:6c:af:85:24:1f:
da:ab:7f:df:cc:35:87:0d:40:38:ea:20:13:96:cf:31:c0:57:
18:e7:98:11:2d:23:ed:38:8e:1c:6f:7e:db:a1:d2:6e:78:95:
e3:3a:d0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:29 2025 by rpki-client