Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
File: 1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft (raw, json)
Hash identifier: 56jGO20IFOtBwas0868NJlczE5bviESY8H/NQ8pAiVo=
Subject key identifier: FA:12:14:57:0E:71:F3:A7:33:C6:E8:E2:93:59:0E:5A:31:21:D3:00
Authority key identifier: FA:14:E8:15:3C:D3:F9:1C:33:39:7F:9B:7D:F9:1B:F1:73:C4:D1:6B
Certificate issuer: /CN=fa14e8153cd3f91c33397f9b7df91bf173c4d16b
Certificate serial: 0198D439B1B60A0636F2A9EC270D492A4685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
Manifest number: 53
Signing time: Sat 23 Aug 2025 00:00:07 +0000
Manifest this update: Sat 23 Aug 2025 00:00:07 +0000
Manifest next update: Sun 24 Aug 2025 00:00:07 +0000
Files and hashes: 1: 1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl (hash: 1ONR27a72+WYZrKqWnGGP9tSf3kJLzZbXcE1qkKhybk=)
2: i9PMkFjZgddcdQkvP1yxnZzZAzQ.roa (hash: AH1/HP90I2Jx2/ajhEGYd7uNt41g8Pva2Gq/dNXs1dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:39:b1:b6:0a:06:36:f2:a9:ec:27:0d:49:2a:46:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa14e8153cd3f91c33397f9b7df91bf173c4d16b
Validity
Not Before: Aug 23 00:00:07 2025 GMT
Not After : Aug 24 00:00:07 2025 GMT
Subject: CN=fa1214570e71f3a733c6e8e293590e5a3121d300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ac:85:a3:41:64:f1:00:28:36:4d:fc:b8:e8:
da:a6:e0:81:65:43:7a:7b:43:75:86:fe:19:40:51:
96:85:67:ac:c0:ec:92:b9:d1:b4:71:c2:b3:bd:df:
8e:2e:c3:c5:60:0e:3b:93:3e:5d:60:38:6f:fd:b2:
9f:e2:57:e6:c8:b9:2b:a9:58:03:ec:a0:b0:4e:76:
89:85:07:2e:2a:21:bc:a4:90:3b:bf:f6:01:86:1c:
03:f1:9c:13:93:bc:96:b8:a9:43:7b:02:a0:bf:08:
16:09:85:37:79:60:af:ed:41:bf:4a:a9:a3:ca:ea:
3b:05:81:52:62:06:c4:ce:29:15:8f:77:a6:61:81:
8c:1e:14:ac:b9:49:f1:1f:73:5d:ff:8c:29:77:5d:
17:dc:6e:00:6b:ba:7f:5b:41:94:2b:1e:85:d1:ae:
31:15:04:a1:83:c0:18:0e:1d:26:6a:00:06:a8:ca:
ca:24:da:7d:b6:a9:69:df:bc:fc:d1:b9:de:96:2d:
e0:f0:a2:c5:79:4a:57:0e:2c:4d:39:53:8a:3f:93:
69:22:64:8b:56:05:81:3c:ee:cc:ce:9a:80:d7:fd:
f1:2e:67:7c:c1:3f:69:0b:c9:3f:5e:c8:06:c4:50:
18:db:11:e3:31:3c:68:37:65:58:c8:ff:a5:9b:2f:
4e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:12:14:57:0E:71:F3:A7:33:C6:E8:E2:93:59:0E:5A:31:21:D3:00
X509v3 Authority Key Identifier:
keyid:FA:14:E8:15:3C:D3:F9:1C:33:39:7F:9B:7D:F9:1B:F1:73:C4:D1:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:5f:78:a6:04:4e:b0:fc:7e:1a:f0:b7:49:d5:9a:d4:e2:64:
86:f3:3d:60:d0:13:18:9c:58:49:4e:1e:74:99:83:e3:41:20:
a1:24:a4:9f:2a:4c:1b:b7:c8:af:e0:a4:93:76:5c:0a:30:40:
a7:be:9e:4d:23:91:3c:77:4c:6f:06:95:53:68:7f:4c:40:10:
0d:e1:da:33:f5:59:0a:d5:49:c0:df:03:21:e2:1e:85:71:46:
33:61:61:79:b0:85:9b:35:7f:4e:10:99:c8:95:ed:cb:26:df:
b6:d4:3a:3a:59:1a:79:d0:1c:bb:7b:a3:da:8d:e8:d1:67:8e:
f0:bc:8d:a1:e5:9a:d5:3c:8c:28:9f:55:96:8d:2a:c4:5a:e1:
33:e0:bd:fa:18:de:2e:1c:88:ae:23:81:17:ba:03:7e:0d:4f:
1c:08:75:d0:48:7d:70:c3:9e:c4:c8:18:73:67:b2:36:7b:b8:
1a:4a:bb:29:8a:9d:38:b2:dc:f3:ba:71:ab:82:9a:f6:55:bb:
63:a5:e8:79:d2:7e:36:94:5d:12:4a:69:cb:dc:62:94:cc:99:
b0:c4:ce:2b:39:fe:ff:f6:5c:80:0e:ed:ee:d8:70:29:d7:62:
bb:98:a8:32:2c:60:03:f3:d7:fe:e8:33:f6:8e:bd:4e:66:85:
00:4e:82:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:46:43 2025 by rpki-client