Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
File: 1-3grePIKbktwZDBSvRpArxWlYzg.mft (raw, json)
Hash identifier: zGR60LxAWDlHq2gYaQmEhC9VTIdprIEHGA51grDELJA=
Subject key identifier: 2A:4E:9E:86:DA:0A:1F:C5:99:1A:F2:86:75:1B:72:BE:D0:7F:22:DC
Authority key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
Certificate issuer: /CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Certificate serial: 0198D515E9283123D792051D3AFBD49C117C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
Manifest number: 14F0
Signing time: Sat 23 Aug 2025 04:00:39 +0000
Manifest this update: Sat 23 Aug 2025 04:00:39 +0000
Manifest next update: Sun 24 Aug 2025 04:00:39 +0000
Files and hashes: 1: 1-3grePIKbktwZDBSvRpArxWlYzg.crl (hash: gct71q2KVc7UBJLL+HOMpzDbAwyuQtd/niC2aY8AjPM=)
2: B1dTi0f_of0kmb1xPgeCM0wY_So.roa (hash: AUmVPkVAQPCmSbSqHlAfz6SLH5DutLJ3OBZdx5Ql8g8=)
3: g4GI57zRcwc78atAcKzvcX8O_Jg.roa (hash: I42VDUXmjO3wztnHcn35mdQWvB1AtZN/AkJrcxSWDOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:e9:28:31:23:d7:92:05:1d:3a:fb:d4:9c:11:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Validity
Not Before: Aug 23 04:00:39 2025 GMT
Not After : Aug 24 04:00:39 2025 GMT
Subject: CN=2a4e9e86da0a1fc5991af286751b72bed07f22dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:32:1b:be:89:6b:84:61:e1:7f:14:ef:2a:18:
db:f0:d1:95:83:6a:e1:96:00:c6:cb:ba:23:0b:5a:
32:0b:06:c6:f1:91:3b:02:c7:93:63:b6:89:d0:27:
44:9f:36:4f:de:89:bd:b0:2e:57:fc:34:0f:23:b9:
7e:12:ef:5b:63:35:7d:7f:39:ef:14:10:ff:24:b6:
4c:18:1b:30:7b:05:68:21:b9:e9:38:4c:c8:29:48:
79:d8:79:dc:6c:03:b0:81:08:64:e8:23:c9:85:6d:
fb:00:83:2e:91:78:af:16:60:1d:21:1f:20:94:4c:
f4:aa:a3:42:51:0e:c5:76:0e:95:55:72:e3:0d:41:
0a:dc:bd:0c:de:01:b9:b0:f6:be:09:09:19:17:4f:
b8:81:c6:50:b8:bf:94:48:1c:bb:4c:40:86:03:6a:
66:f4:dc:fd:51:60:d1:38:3f:c3:7e:9a:10:37:74:
3f:1a:8c:6d:9b:d2:25:5b:7f:bf:c9:1c:61:47:98:
ce:66:46:23:8a:76:8f:10:65:97:fa:05:60:7b:66:
69:16:e6:1d:17:2c:05:c9:d5:af:84:1e:27:95:16:
80:a8:bf:b0:30:cc:fd:c5:07:91:dc:88:04:d9:40:
22:f2:3e:2a:7d:4a:3b:8f:7a:a3:43:a7:f2:6f:50:
31:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4E:9E:86:DA:0A:1F:C5:99:1A:F2:86:75:1B:72:BE:D0:7F:22:DC
X509v3 Authority Key Identifier:
keyid:FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:9e:78:41:8a:7c:4c:38:08:82:ba:83:f5:ff:7b:73:da:9d:
a8:21:6e:4a:bb:bf:33:27:00:e8:fb:3c:70:19:be:c8:33:c9:
4a:1b:d5:b1:c2:67:56:ae:57:2f:76:dc:ec:a1:25:38:c5:dc:
4e:02:95:78:0d:a9:33:b3:04:c5:2a:91:49:6d:20:9d:9f:2e:
f8:a8:7e:71:70:a1:f2:58:6c:82:b1:1d:ae:1e:2b:0f:09:f3:
e2:df:c5:c8:e7:85:e5:19:c6:c7:7b:33:ef:a2:1b:34:18:24:
e1:39:39:e7:67:52:79:15:e3:e9:fb:39:67:7d:e6:5a:9e:ca:
d4:92:4c:10:7d:ba:26:ea:94:aa:d5:80:5a:03:ad:bd:4c:26:
ed:4c:4f:08:1a:53:40:ad:a9:eb:ff:72:8d:a8:b6:5c:00:83:
60:3c:d0:3b:84:55:6d:25:89:14:97:b4:f9:85:30:7e:f6:07:
34:9a:6c:16:33:e5:6c:ca:61:1e:d4:46:28:80:8b:ac:4d:7d:
cd:c8:3f:69:75:a7:5f:32:68:50:30:be:49:df:f8:81:f4:ad:
aa:32:52:29:04:0a:17:04:52:4e:6b:23:77:97:87:65:88:70:
17:36:d7:40:bf:44:e5:ac:1e:ed:13:38:8d:0b:00:b1:1d:b7:
32:f3:89:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:46:45 2025 by rpki-client