Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft
File: 1-KK2BcWOB0aq3Fvw18vDbJMH900.mft (raw, json)
Hash identifier: sSXdvQNCFdRisFoPk9HkVM7n4jWm8C9qZzZG/3FbwM4=
Subject key identifier: 1C:CD:87:05:2F:AA:FE:BB:60:01:F8:0D:6F:63:64:7A:D8:62:43:7A
Authority key identifier: F8:A2:B6:05:C5:8E:07:46:AA:DC:5B:F0:D7:CB:C3:6C:93:07:F7:4D
Certificate issuer: /CN=f8a2b605c58e0746aadc5bf0d7cbc36c9307f74d
Certificate serial: 0198D660CAE97360CD2C2A6AD8E77E94D2C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KK2BcWOB0aq3Fvw18vDbJMH900.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft
Manifest number: 0216
Signing time: Sat 23 Aug 2025 10:02:04 +0000
Manifest this update: Sat 23 Aug 2025 10:02:04 +0000
Manifest next update: Sun 24 Aug 2025 10:02:04 +0000
Files and hashes: 1: 1-KK2BcWOB0aq3Fvw18vDbJMH900.crl (hash: DioNCL1bHu3ApkEEQDV0Y1kDtR+anF/FNqbs81wuYFs=)
2: KMs7aUSS9LqAFlnC_o5ElLedNIc.roa (hash: /x7zWDBe20WK1XP4EQ8MfhJthk5BD7GGqFW7sL/0M74=)
3: hqdB3dvV_dcCWDsTMYzzBUkq1iQ.roa (hash: PqNxdXFESdm3E0fpRf9aF9eGcWyACVXLt/A8w8L4KSw=)
4: ntHtztrMmkHjlQm-nR0AF_-ZVFE.roa (hash: Bf849e8DMlDt314X2PPaLUOxw5PYejhf50bcsgAnmcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KK2BcWOB0aq3Fvw18vDbJMH900.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:ca:e9:73:60:cd:2c:2a:6a:d8:e7:7e:94:d2:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a2b605c58e0746aadc5bf0d7cbc36c9307f74d
Validity
Not Before: Aug 23 10:02:04 2025 GMT
Not After : Aug 24 10:02:04 2025 GMT
Subject: CN=1ccd87052faafebb6001f80d6f63647ad862437a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ec:98:cd:fa:0d:3a:5b:d8:4f:b1:9b:72:1e:
8b:f4:ca:9b:f1:16:24:c9:df:f5:d1:69:fb:1a:18:
ad:1a:a6:66:ec:18:f6:42:90:a8:5b:89:c0:45:3d:
6d:cc:58:3a:8d:83:de:35:95:08:b3:ae:57:0c:0b:
1d:29:9e:2c:83:87:2f:7f:09:4b:25:2f:74:e1:d3:
69:20:e3:46:32:9c:ed:f4:f6:b5:8f:e6:0f:44:c8:
e3:36:c7:29:2b:6b:fc:ef:0f:09:8c:f6:5b:ec:2c:
c1:6a:17:26:c4:8d:f3:e3:bb:eb:e1:12:26:13:20:
11:5a:60:8b:20:00:05:df:77:2c:79:b6:fa:04:b1:
19:66:c1:2a:e6:2d:82:6d:d6:29:79:81:f8:38:1a:
3d:42:8e:75:e0:8b:1d:bf:01:60:d1:68:cb:2c:8c:
98:dd:d0:08:58:82:c8:9d:0c:45:97:e2:25:f9:b0:
39:55:27:ef:0b:05:05:2e:02:cf:3d:1b:2b:44:0e:
a5:09:cd:c0:ac:5a:02:a6:7f:7a:02:06:06:80:62:
7c:0c:28:6d:04:38:24:ed:04:68:88:42:24:1c:70:
3d:a4:cc:7f:fe:5f:45:aa:41:2b:22:5c:c3:1a:88:
e7:39:15:8e:48:df:4b:8a:fa:bc:ae:fa:9c:77:95:
21:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CD:87:05:2F:AA:FE:BB:60:01:F8:0D:6F:63:64:7A:D8:62:43:7A
X509v3 Authority Key Identifier:
keyid:F8:A2:B6:05:C5:8E:07:46:AA:DC:5B:F0:D7:CB:C3:6C:93:07:F7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KK2BcWOB0aq3Fvw18vDbJMH900.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:73:3b:b3:fe:fa:11:30:bd:22:88:4f:15:8f:9f:dc:88:9c:
55:73:fe:53:02:cc:e8:99:6a:69:03:c1:5b:08:3a:4e:e4:bd:
38:94:94:01:f4:b9:5f:2d:12:b0:a2:97:5b:db:fd:4f:98:9e:
24:69:68:b4:5a:63:a5:e8:93:70:e9:9a:6e:da:c8:b4:0a:3f:
b6:46:b7:d3:7c:74:8f:ec:dd:a4:78:02:07:c2:92:b4:c6:9b:
d1:54:9e:35:0b:3b:38:44:8e:6d:99:cc:50:02:68:46:94:15:
a0:2b:59:70:7c:5e:b4:c7:23:66:3a:54:8f:b4:bf:e9:48:21:
a2:c2:77:e0:d3:90:99:39:b1:98:50:93:23:66:1d:e3:da:0d:
94:52:dc:37:75:31:a7:02:cd:4a:a8:82:30:af:59:72:4d:28:
a6:e2:88:72:c2:75:54:7b:99:23:c1:d3:05:bc:7f:31:53:23:
9c:b5:b9:43:fa:ac:0b:cb:ee:8d:dd:20:d0:de:02:ee:cf:14:
c4:6f:2f:36:f0:2d:33:44:73:8c:61:e2:cb:44:0f:e9:f6:25:
ef:f8:85:a2:8c:a1:e1:35:51:75:63:92:47:03:47:39:bf:ab:
41:f3:0b:c5:f5:52:b2:2d:e5:50:1d:39:e0:41:b7:3c:c9:75:
f6:f7:eb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:37 2025 by rpki-client