Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
File: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft (raw, json)
Hash identifier: kz2vhSArYptWZG56B9Xk7YWopuC4V77og3GigC6RkaU=
Subject key identifier: CF:BC:7A:1D:75:89:E6:18:6E:96:F4:DC:73:F2:90:22:D7:EE:51:33
Authority key identifier: D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
Certificate issuer: /CN=d5a193671dc59d76fc311db2d6689a3c88299094
Certificate serial: 0198D6CCE43BBABA2E17455A2926CE4147D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 12:00:08 +0000
Manifest this update: Sat 23 Aug 2025 12:00:08 +0000
Manifest next update: Sun 24 Aug 2025 12:00:08 +0000
Files and hashes: 1: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl (hash: n4QCwqxbA2GiL/A080H8lIgxJoLDK7YWLkV1HOLqcH8=)
2: ceTKZ_Kbl5fdTbjM1BoGVl6TegM.roa (hash: DR/tSwdyZFDYwu3nLD2VKueV4ylVlrU59jgXrK70o90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:e4:3b:ba:ba:2e:17:45:5a:29:26:ce:41:47:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a193671dc59d76fc311db2d6689a3c88299094
Validity
Not Before: Aug 23 12:00:08 2025 GMT
Not After : Aug 24 12:00:08 2025 GMT
Subject: CN=cfbc7a1d7589e6186e96f4dc73f29022d7ee5133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6d:1b:c3:e6:fe:93:a5:6d:7f:32:45:87:78:
21:80:40:f8:2e:cc:0c:47:05:19:fd:09:27:86:9d:
33:b0:ad:b4:c0:d2:84:01:ea:40:77:62:24:2f:1b:
7a:e9:a7:2d:79:7b:b2:9c:12:ff:c3:47:92:ce:2b:
41:6d:bc:6f:96:a9:d6:42:72:b7:02:80:7e:e0:a0:
7f:b5:ed:21:f6:9d:45:47:c2:19:73:92:2c:ac:ed:
4c:8e:11:9b:2e:ce:86:1e:b9:67:af:de:7d:8e:32:
39:51:b8:c8:7f:ae:8d:c2:d9:ba:fb:8c:87:d4:3b:
c3:dd:0a:08:ab:16:db:e0:6d:22:9e:d6:b9:03:04:
14:9f:4c:3c:bb:00:0f:09:4c:6f:45:36:68:6b:26:
51:ed:1c:7b:43:49:59:5d:48:c0:99:f7:b1:0b:d2:
9d:b3:a3:36:43:58:0b:32:86:8a:34:f6:df:b2:e0:
ce:7d:84:b8:1f:6e:ce:1f:2f:77:94:8e:a9:af:d9:
57:21:0c:7c:d4:cf:bb:39:08:52:89:50:36:76:a1:
26:89:37:c8:d0:3b:2d:41:44:fd:03:d6:4e:95:98:
17:78:68:18:13:1a:32:c6:b7:ac:22:4c:ad:6c:36:
ab:82:a8:70:6e:ec:2f:16:3b:3c:24:a9:03:46:19:
bd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BC:7A:1D:75:89:E6:18:6E:96:F4:DC:73:F2:90:22:D7:EE:51:33
X509v3 Authority Key Identifier:
keyid:D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:2e:db:cf:8e:c7:71:6f:77:5c:11:05:db:94:ab:f7:a2:99:
e8:2b:1a:e0:40:40:c1:f1:89:8a:f5:67:f3:11:c5:ac:08:a6:
e9:36:65:53:9f:c1:f1:81:d8:ee:d8:e4:97:38:b8:4d:6f:9f:
d1:d3:f4:18:57:f2:68:ea:27:57:9d:bd:a1:05:31:f8:27:ca:
17:96:02:61:a8:62:6c:8a:73:58:a1:13:e1:d3:67:de:60:a0:
f4:83:cc:e6:97:58:cf:39:38:92:7d:b1:5c:cc:04:d4:86:58:
00:49:53:99:60:12:25:8c:c6:2b:95:be:12:d6:ee:5c:17:25:
db:b4:88:df:b5:29:35:a6:48:2a:f4:e0:5d:67:e6:93:0d:e7:
cd:90:22:b2:e3:ad:fa:9d:ef:60:8c:25:f8:f2:93:a0:23:3e:
51:7a:96:40:82:25:42:d6:59:de:a9:c8:93:3a:30:c7:99:37:
e2:a7:4c:ca:2f:ec:05:20:7c:65:35:56:23:02:8a:91:81:5e:
0f:45:c0:39:65:68:68:6a:c9:cd:9f:de:6e:c5:7a:50:2f:78:
b6:c5:db:c0:1d:08:99:78:5d:29:e0:1f:92:52:ad:0d:19:30:
31:f2:ec:ed:a8:92:10:6c:43:ee:29:75:1a:44:0c:4a:6c:76:
81:57:f1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:32:44 2025 by rpki-client