Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
File: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft (raw, json)
Hash identifier: SgPD6fRjiSbr1pa0Z2e5gjtNWc3VE6brFkQGhCJvZHo=
Subject key identifier: DF:0F:6A:CD:E3:06:E0:6E:BD:36:7F:B4:16:74:86:BE:24:E1:90:C9
Authority key identifier: FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34
Certificate issuer: /CN=fa307821230e7ba81a4d471a591e78ea759c6934
Certificate serial: 0198D5BBCB834C51AEB9BDADA6D81E982146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
Manifest number: 1171
Signing time: Sat 23 Aug 2025 07:01:50 +0000
Manifest this update: Sat 23 Aug 2025 07:01:50 +0000
Manifest next update: Sun 24 Aug 2025 07:01:50 +0000
Files and hashes: 1: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl (hash: bdr5+FG4OTXxrYcwkiwtLpLjS0IzipZOgu5tfBH1JcA=)
2: zwZQF0vycCjVTXKGPdvngCC8DiM.roa (hash: 3IwNNQnob+DFL0Pb8HdxIF5jocGgq3KKZc4IEORySTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:cb:83:4c:51:ae:b9:bd:ad:a6:d8:1e:98:21:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa307821230e7ba81a4d471a591e78ea759c6934
Validity
Not Before: Aug 23 07:01:50 2025 GMT
Not After : Aug 24 07:01:50 2025 GMT
Subject: CN=df0f6acde306e06ebd367fb4167486be24e190c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d1:88:0b:76:00:2d:27:d6:b4:5a:d0:f2:96:
cd:c0:aa:c9:96:b2:de:51:ae:ad:83:8c:b5:eb:8a:
ef:d4:a1:88:76:85:82:22:b7:e9:4d:e8:44:ca:9d:
2e:9b:b0:07:c9:5f:0b:49:f8:b6:05:1e:ac:15:ad:
07:1d:7f:82:a3:4b:e0:50:8c:e1:3d:c6:9c:6c:81:
3c:40:7f:83:2b:43:9c:f6:d8:3c:25:9c:d1:3c:04:
cf:10:4a:d5:c4:a9:53:15:55:3c:2d:43:ed:69:75:
ff:97:8e:85:19:3d:1f:0a:d6:6b:b4:6a:d3:54:c4:
24:81:dd:99:38:23:19:1e:9f:7c:70:17:8d:ad:3c:
a7:c4:aa:27:c2:70:27:9d:81:26:fa:fb:12:95:66:
32:e4:43:34:ca:25:d1:8d:52:bd:3a:09:91:3c:c3:
8a:85:60:d9:48:1f:fc:ba:a1:0b:a1:91:c1:a8:27:
7b:13:11:17:1c:2d:e1:d6:3e:0b:0f:e1:27:e9:36:
1a:96:08:d5:1b:19:a9:d9:53:1f:ad:4f:b3:04:e0:
0d:de:79:36:71:39:02:04:bb:90:9a:c1:c3:4e:47:
3c:69:d5:8f:2d:01:a3:a7:04:ed:bc:52:13:02:d8:
62:de:4d:18:a9:6f:14:e4:4d:b1:21:26:a2:67:db:
72:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0F:6A:CD:E3:06:E0:6E:BD:36:7F:B4:16:74:86:BE:24:E1:90:C9
X509v3 Authority Key Identifier:
keyid:FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:68:25:5d:21:e0:44:74:2d:d1:15:85:6e:c1:16:2d:d2:1b:
dc:d2:99:ef:c5:49:58:46:2f:d4:6a:96:8f:58:fa:25:1a:a4:
53:24:6a:fe:b1:35:69:75:c5:9e:68:af:f8:70:83:f8:65:ec:
5a:0e:9c:78:d3:a1:e5:57:28:a0:1d:42:69:8a:9b:6c:ab:fa:
57:e5:be:ac:b8:fc:48:3a:03:0c:37:97:2c:a2:b0:2d:d3:e1:
b8:27:24:ab:95:92:2d:71:2e:f0:df:14:66:9b:4d:f4:66:7e:
0a:80:de:87:79:4f:ec:8f:67:c6:0f:98:a6:b6:40:ac:f9:5d:
26:89:52:f2:d4:c4:e7:28:ff:d6:25:49:75:9c:ec:8e:0e:75:
8c:e8:e6:59:d5:e6:14:3a:7f:76:8c:0d:c9:93:4c:8e:f6:be:
63:75:08:88:78:e3:26:d0:71:0c:2a:42:f4:d2:74:de:1d:3d:
39:00:13:51:1b:b7:e8:de:09:01:3e:61:e8:da:3c:bb:eb:0b:
39:55:95:a2:a0:66:5e:bb:58:36:b8:ea:06:15:73:a8:49:71:
d6:4b:77:b3:5d:b2:aa:8b:02:5a:b8:5b:c4:28:8c:86:28:87:
c6:a1:52:63:32:b7:07:51:48:33:bc:66:0a:3d:84:13:59:d4:
18:1b:1b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:17:58 2025 by rpki-client