Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
File: 1cH3vxvczjWLoL_c-_aWTzvqI2I.mft (raw, json)
Hash identifier: 5QwSc9ZFp4CLvoZYqn+hvFR8wnWhsvZTdj2IYLyVFwk=
Subject key identifier: AC:FA:1F:D5:3E:E5:F2:0A:88:83:3F:A2:12:1D:10:19:D9:D5:0B:65
Authority key identifier: D5:C1:F7:BF:1B:DC:CE:35:8B:A0:BF:DC:FB:F6:96:4F:3B:EA:23:62
Certificate issuer: /CN=d5c1f7bf1bdcce358ba0bfdcfbf6964f3bea2362
Certificate serial: 0198D5BC3A117F8A0A3FD5A88B66A6EF7CE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cH3vxvczjWLoL_c-_aWTzvqI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
Manifest number: 03
Signing time: Sat 23 Aug 2025 07:02:19 +0000
Manifest this update: Sat 23 Aug 2025 07:02:19 +0000
Manifest next update: Sun 24 Aug 2025 07:02:19 +0000
Files and hashes: 1: 1cH3vxvczjWLoL_c-_aWTzvqI2I.crl (hash: n6oYu02Dmx/I78EijzWXHm1AxKX8NhG0VfVQZQZRkxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1cH3vxvczjWLoL_c-_aWTzvqI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:3a:11:7f:8a:0a:3f:d5:a8:8b:66:a6:ef:7c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c1f7bf1bdcce358ba0bfdcfbf6964f3bea2362
Validity
Not Before: Aug 23 07:02:19 2025 GMT
Not After : Aug 24 07:02:19 2025 GMT
Subject: CN=acfa1fd53ee5f20a88833fa2121d1019d9d50b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:09:ef:1f:5e:f7:e8:fe:6f:53:bd:76:47:74:
36:17:17:14:c7:b8:75:e9:0e:bc:77:2c:56:e7:49:
79:0a:57:a1:5d:09:bc:f8:78:19:3c:82:a5:4c:37:
b0:61:08:5f:1e:52:d3:ad:98:c8:f3:df:61:39:13:
3b:b5:18:48:94:d9:32:bc:7e:c7:ce:c4:74:78:b4:
76:b3:54:8f:71:7d:ac:26:0e:a7:81:b3:61:a7:ae:
82:8e:a5:d7:fc:79:85:3d:6b:0b:74:ea:8e:75:33:
30:b9:d3:82:a9:5c:2b:41:a6:8a:1c:3b:f7:0c:ae:
ed:74:f8:f6:d4:64:46:ed:61:d8:fa:73:07:cb:b3:
ec:6e:a6:8d:77:c9:22:42:3e:b7:33:29:b0:d8:85:
df:ec:69:dd:84:d2:cd:09:48:45:93:e6:c8:56:eb:
5e:32:9a:dd:e7:ef:e1:b2:4a:83:e5:f5:c8:3e:fe:
99:da:4d:1a:cc:f2:84:00:05:73:05:50:fe:2a:32:
dd:1d:8b:84:87:0f:37:39:68:5f:0e:cc:25:e9:72:
52:2a:99:81:9f:50:68:6d:5a:80:61:23:f9:03:5d:
eb:ba:bf:b2:c1:98:3e:15:fb:13:eb:c1:80:57:df:
e9:7b:79:17:e7:5c:5c:d8:ae:ed:76:59:b4:e1:ea:
37:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FA:1F:D5:3E:E5:F2:0A:88:83:3F:A2:12:1D:10:19:D9:D5:0B:65
X509v3 Authority Key Identifier:
keyid:D5:C1:F7:BF:1B:DC:CE:35:8B:A0:BF:DC:FB:F6:96:4F:3B:EA:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cH3vxvczjWLoL_c-_aWTzvqI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:a3:79:26:92:82:0a:c1:f8:bd:fe:9c:6b:2b:e8:d7:50:3e:
ec:1b:da:b2:d7:c0:76:d7:87:f4:92:75:fc:2e:1b:11:b4:a0:
cb:04:70:b9:c3:6c:1f:97:48:8b:30:0d:c8:08:fc:c2:a5:52:
37:e6:47:d5:64:15:2a:e2:cd:a4:17:a0:dc:07:77:df:d9:70:
04:a6:cf:e9:04:eb:32:e8:98:be:8f:54:82:29:e8:f0:c5:c3:
c4:df:00:47:26:66:65:13:21:c0:12:64:8b:2c:5a:87:42:2f:
17:a4:f1:b2:44:f1:af:55:4f:7f:f5:1a:b9:a8:7d:bf:51:6c:
09:8e:d6:03:f2:53:68:59:5a:a3:d7:98:dd:78:20:d7:38:61:
ae:b5:97:e7:65:e9:da:0d:6c:04:aa:dc:c2:bb:f0:0c:6e:52:
df:b9:f3:e5:34:c3:ec:41:39:eb:32:ad:2a:f6:c2:6f:d2:88:
d8:af:b1:6a:5d:45:d5:ec:28:36:01:19:9a:b5:cd:41:5c:f3:
6c:5b:6a:8b:a0:9e:93:92:b5:34:99:ae:70:3b:e4:c6:be:73:
c4:21:aa:9a:82:d9:d2:34:86:96:34:f6:b1:a2:d2:b4:98:6b:
3c:0d:ce:a8:89:df:33:1f:5a:56:64:62:d4:5d:4d:3f:ae:c8:
2b:d1:14:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:43 2025 by rpki-client