Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
File: 1-yqlrPybsP5rkR8eytPrVNRcs28.mft (raw, json)
Hash identifier: GVTF5YVHCoYFqpdKm81tsxVNsAcYw14GcNJimfZkuR0=
Subject key identifier: 1B:0D:B8:3C:68:3B:A5:AE:5F:16:AF:20:75:00:D1:69:D3:09:9D:05
Authority key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
Certificate issuer: /CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Certificate serial: 0198D66109A2874EB4A5F777D88921561E22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
Manifest number: 0795
Signing time: Sat 23 Aug 2025 10:02:20 +0000
Manifest this update: Sat 23 Aug 2025 10:02:20 +0000
Manifest next update: Sun 24 Aug 2025 10:02:20 +0000
Files and hashes: 1: 1-yqlrPybsP5rkR8eytPrVNRcs28.crl (hash: iJDq6FiQPRbCLYY680I084cqLIcCf3m4EQRP/1uKhP0=)
2: 8BItxdRwiz6e55f08Mt17mlwvV8.roa (hash: cojnwxd3ILvAkZ0dYhgxffSNvY1zxZ63Duvu6PuvkIM=)
3: QO_GooH2m885Q2taEPXMPgyGMvU.roa (hash: 1VnTsOfjtKGYm7FG0JLVMLSQUzntH2YHEOdl/AmQZTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:09:a2:87:4e:b4:a5:f7:77:d8:89:21:56:1e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Validity
Not Before: Aug 23 10:02:20 2025 GMT
Not After : Aug 24 10:02:20 2025 GMT
Subject: CN=1b0db83c683ba5ae5f16af207500d169d3099d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:01:e1:a6:8d:c5:8b:5c:4d:22:23:f2:77:5b:
ca:52:97:d5:55:22:13:45:e4:fd:b5:bb:1e:48:28:
f2:22:09:35:eb:69:65:ad:bf:5b:e2:3f:1d:fc:1e:
00:d9:68:6c:5f:fe:3a:f6:28:f0:d5:c2:bb:e1:0b:
bc:a9:4a:ec:38:c4:ce:c4:24:27:dc:ff:7e:e0:90:
7d:82:a3:02:8d:12:87:a8:d1:7f:da:b5:2d:2a:a6:
8f:f4:49:ef:38:5e:26:14:9c:09:73:8e:51:79:f4:
dc:ac:ef:22:00:b7:d9:ea:bf:ab:21:54:8f:a5:0d:
57:ef:f8:af:b2:74:24:82:89:a7:f3:e9:64:2c:8f:
d4:21:3c:70:7b:e9:f4:4b:4d:5a:17:2b:b4:c8:4b:
ed:92:44:83:9d:b9:c8:b5:07:2d:f5:a6:ce:7f:08:
74:d0:ac:bf:77:23:86:c0:86:0f:74:14:1f:ac:79:
b9:6b:96:b6:92:32:b3:b5:63:eb:10:5c:47:ab:6b:
15:73:1b:48:4b:3d:89:8f:0d:ac:7a:96:bf:5b:da:
48:ac:6a:11:7b:74:aa:dc:1b:85:52:ed:7e:ad:5b:
dd:41:3e:93:bd:e2:a8:d2:56:1f:33:dc:2a:e4:30:
63:1d:7b:7f:dc:92:9d:43:78:14:8e:71:52:b6:b7:
4a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0D:B8:3C:68:3B:A5:AE:5F:16:AF:20:75:00:D1:69:D3:09:9D:05
X509v3 Authority Key Identifier:
keyid:FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:7e:16:86:3d:d7:e5:e2:af:42:6b:34:04:6a:44:eb:e9:9d:
ee:6d:78:b4:de:81:e4:af:60:e8:73:75:7b:51:ca:ba:5f:3b:
53:84:54:2c:d2:e0:2d:7f:1d:fe:8d:60:1d:21:38:cb:05:8c:
c6:95:25:d0:b2:0e:42:8d:49:df:1d:8c:ec:bb:bd:22:bc:fc:
15:ff:39:26:4c:c4:1e:1d:4c:18:cc:93:f9:d4:eb:46:ae:5d:
b3:78:8c:fa:3e:25:9d:94:50:de:f0:f7:e0:5d:77:cf:b3:f9:
da:8c:87:49:ef:cc:17:9f:e1:77:ad:a6:85:4c:86:97:59:ee:
35:31:71:04:51:43:08:df:c3:15:7f:3d:06:4e:13:be:5e:54:
b9:2c:c5:fb:69:8c:ee:e3:2e:22:66:df:b5:cb:77:d4:6e:2a:
05:1b:37:7a:c9:79:45:a6:97:d9:0b:f5:69:19:7c:ef:d7:b1:
52:71:d5:bd:91:e0:07:05:76:b2:47:c2:56:5c:4d:53:c6:b9:
b5:81:36:ff:16:9e:cc:80:57:9f:d1:d2:f7:d5:fe:31:92:5d:
bb:6e:41:59:6f:15:f9:e9:14:45:60:59:12:e5:fb:0f:b3:de:
76:d8:35:d0:2c:62:27:a1:fb:9b:d8:70:3a:f8:1e:e3:cc:fe:
34:a7:0b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:47:13 2025 by rpki-client