Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
File: 1-kak8RQ6vjrfxLaDX6E0498srDQ.mft (raw, json)
Hash identifier: llsV1wQbel+RlPcFi8GM3tNg4XkOlawJZznUFHxMWD4=
Subject key identifier: F7:98:83:DA:A9:78:F8:1A:62:32:BB:34:2D:60:20:FE:6E:E7:C0:86
Authority key identifier: FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34
Certificate issuer: /CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34
Certificate serial: 0198D705AD5A27AD6F5770D3E2D5B32EBA26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 13:02:10 +0000
Manifest this update: Sat 23 Aug 2025 13:02:10 +0000
Manifest next update: Sun 24 Aug 2025 13:02:10 +0000
Files and hashes: 1: 1-kak8RQ6vjrfxLaDX6E0498srDQ.crl (hash: N3zgHFhlffeleauVAWgWUWakZ+BaM3xq+PLkc6C8e1Q=)
2: 3uEhAk6Wx4KcEg0MVVsAAyyADBw.roa (hash: FqSkeFfRf148LCqtNv59QOP75egaClJCY4HAjWTWGX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:ad:5a:27:ad:6f:57:70:d3:e2:d5:b3:2e:ba:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34
Validity
Not Before: Aug 23 13:02:10 2025 GMT
Not After : Aug 24 13:02:10 2025 GMT
Subject: CN=f79883daa978f81a6232bb342d6020fe6ee7c086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:14:ae:ed:86:88:01:05:6a:96:5a:97:16:f2:
81:0c:99:c1:19:d6:9e:2d:43:38:4a:08:47:9a:98:
3b:3e:5d:67:e3:35:0a:94:36:57:8f:cd:7d:5a:5e:
2b:81:f7:83:38:a3:95:cb:99:23:14:f5:ae:4b:66:
4c:98:43:c3:d5:ea:d9:45:77:7f:10:64:eb:97:81:
44:4c:2c:f5:65:a3:90:66:72:4b:56:60:22:88:54:
4b:18:87:7b:74:a8:c5:47:c5:79:6a:0f:cb:a4:f2:
37:9c:cc:2d:d4:cf:96:38:37:45:67:65:a1:74:85:
0d:16:a3:3e:d6:ba:25:d3:44:8c:1e:5d:89:ed:be:
b8:0e:63:48:db:01:8f:cb:eb:8f:47:9c:28:e2:75:
44:08:be:0b:12:9c:94:3e:53:4d:fd:a0:3b:ee:4e:
74:3b:e9:8d:56:16:36:06:61:78:15:ae:fb:fd:51:
4b:f3:46:49:34:b2:24:8d:c9:d5:ac:04:20:39:23:
a1:7f:da:59:f7:9b:12:07:0a:ab:a9:bb:bc:8e:64:
d9:ba:b0:ca:e4:d1:3c:5e:04:9f:43:b2:ae:c5:73:
b9:ce:d9:fb:0e:92:6a:b3:84:49:ec:0f:9b:f3:6f:
e8:4f:a9:26:76:6b:e3:66:a4:ec:63:e0:e5:c0:1a:
6e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:98:83:DA:A9:78:F8:1A:62:32:BB:34:2D:60:20:FE:6E:E7:C0:86
X509v3 Authority Key Identifier:
keyid:FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b6:18:f4:bf:3f:5b:95:6d:ff:aa:b8:7a:7a:fb:50:b5:0d:
90:6e:69:50:e7:ea:db:44:2f:04:c7:94:50:c9:90:41:12:39:
69:34:3e:fa:4b:1b:8c:da:b2:c7:69:f5:18:31:fb:59:cc:d9:
02:93:9e:4d:73:6b:dc:12:cd:ba:20:a1:a6:6b:e3:3c:4d:5b:
82:a6:2f:57:4c:73:74:14:f5:66:e5:f3:ca:d1:c6:c6:c1:ba:
4d:92:11:e6:d1:12:d9:08:ea:3d:c3:8f:65:32:3b:da:a4:7b:
92:6f:5f:99:3e:34:51:9d:7e:6f:75:1d:c8:10:3c:23:04:b5:
7f:5d:a1:db:ac:d9:f7:2d:de:43:2b:f6:a0:8b:d0:07:85:2c:
60:e2:89:e3:80:0b:ed:86:a8:a0:6b:27:fa:91:b2:39:6f:0f:
70:0f:87:8e:ee:77:1b:0c:b0:8d:8e:ef:00:bd:6d:cb:09:3d:
12:6a:e0:94:35:e6:fe:83:6e:99:f4:3a:59:cf:07:79:08:06:
37:47:f7:f4:cd:83:44:1a:07:5b:d5:07:17:ca:38:14:63:df:
c7:be:bc:d7:6f:91:5d:df:9d:34:fc:f3:5d:43:89:51:25:8a:
02:58:25:ad:a8:c1:d1:73:1e:41:54:fb:8a:9b:2e:61:73:aa:
17:b1:9c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:05:42 2025 by rpki-client