Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
File: 1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft (raw, json)
Hash identifier: 6/GynPAKACBA9xysoKd8axiSAD+DE6El5sK4/zSv3Z4=
Subject key identifier: 09:B4:A7:B2:C2:05:FD:A3:A2:E9:EA:A3:D3:5A:1B:22:36:D4:E7:83
Authority key identifier: D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96
Certificate issuer: /CN=d70b07459e2f116fb5a97f11bae75c0db491c196
Certificate serial: 0198D4A84077C362E8C93CAEB5D995249112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 02:00:52 +0000
Manifest this update: Sat 23 Aug 2025 02:00:52 +0000
Manifest next update: Sun 24 Aug 2025 02:00:52 +0000
Files and hashes: 1: 1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl (hash: Kdqjt1flLo8uHRX/8XGQRtwP+yGwQlh16D4frqRM0Ds=)
2: s9vftAOB-g2w5mpIAbtd2ux_YeM.roa (hash: vWHWtXPoZqDrxtoN/353NMnYSKtaPj8wKrdcVBwN80A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:40:77:c3:62:e8:c9:3c:ae:b5:d9:95:24:91:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70b07459e2f116fb5a97f11bae75c0db491c196
Validity
Not Before: Aug 23 02:00:52 2025 GMT
Not After : Aug 24 02:00:52 2025 GMT
Subject: CN=09b4a7b2c205fda3a2e9eaa3d35a1b2236d4e783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f3:4e:f5:c5:9f:5d:be:18:39:fb:4e:31:f9:
8d:0b:3c:64:90:a6:37:72:ca:c8:b0:90:c0:b6:e4:
57:46:66:b6:04:82:ef:7c:12:a2:e1:8e:62:9d:09:
35:4d:a0:bf:a2:10:ab:ad:5a:71:5a:d6:0b:92:73:
8c:8e:5c:64:b8:5e:eb:7d:15:92:1f:3c:5c:14:d0:
3d:a0:1c:cd:c7:86:b2:fa:38:0f:3a:d6:4b:8d:10:
b2:59:c7:f1:1f:38:94:d6:48:19:c3:21:43:c5:1f:
20:be:1a:7c:be:ea:9c:d3:89:b2:a5:43:38:c5:25:
d1:11:86:93:5e:e3:5c:31:44:6f:b8:80:9d:0c:6c:
80:63:db:97:95:f0:60:b3:cb:fa:74:5e:32:22:29:
a6:bf:4c:c6:a8:b7:0e:1f:ad:1c:0f:43:f5:f4:b8:
49:c1:b3:49:18:96:58:84:e3:1c:65:80:98:a7:39:
31:14:2d:4e:64:8f:38:b1:6f:c1:fa:51:3c:35:cb:
da:d3:0d:88:a9:1b:15:16:a8:f6:37:f1:9d:b8:b5:
21:ca:a9:98:98:df:6a:f2:11:c6:c4:14:18:f0:9c:
75:43:92:8b:4e:ed:4e:14:7c:44:de:49:48:89:02:
7d:dc:ce:73:f5:54:2e:17:20:c4:59:65:16:75:9f:
8b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B4:A7:B2:C2:05:FD:A3:A2:E9:EA:A3:D3:5A:1B:22:36:D4:E7:83
X509v3 Authority Key Identifier:
keyid:D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:5d:bf:1b:f1:e1:00:2c:27:bc:01:3b:97:64:bd:49:ab:83:
12:4d:54:1f:de:1f:c6:c5:76:dd:bf:cf:75:33:1c:e2:54:5d:
51:26:ff:03:a1:fe:02:aa:2f:25:3f:bc:05:e8:3f:10:c4:fc:
e3:37:0f:31:37:65:8c:ee:31:57:bd:d3:a5:9c:e1:f0:47:0a:
8c:13:5b:4a:a7:40:a5:ac:1f:3a:95:d6:91:c5:37:18:b2:78:
28:02:73:ae:1d:99:37:65:a4:0c:a0:ee:50:ef:6f:91:15:9a:
0e:0b:2e:11:96:2a:76:c3:04:26:cf:db:81:b1:1b:bc:e6:98:
12:65:7a:3b:55:9d:44:5a:9b:68:0d:1a:6d:7a:4b:23:7e:63:
29:19:9e:48:c2:15:5f:6b:86:08:35:3c:70:56:8c:f4:0c:fb:
42:9b:90:d2:9c:b1:b3:07:75:0d:7c:be:aa:41:46:5f:19:9b:
22:a8:c5:b1:64:e6:2f:2a:2b:62:8f:3e:eb:d9:3d:85:8b:91:
a6:88:42:f6:c6:87:af:0b:61:1a:9a:2e:e7:92:82:6f:36:33:
58:a1:3e:93:22:95:ea:c1:bd:2b:f4:20:b0:16:2d:28:3f:b5:
5f:84:6f:8c:fb:63:77:be:55:db:14:42:97:23:22:8f:f1:cb:
0a:43:0e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:16:08 2025 by rpki-client