Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
File: 1vgHZgvyzZKu45FEKlNDr3GMGMc.mft (raw, json)
Hash identifier: ejj81rohnPWDuamj7gpQTIdwnMHhdsKCZqYSfQmX6TQ=
Subject key identifier: 2E:D9:87:C8:D2:1F:88:06:44:7D:33:90:3F:B6:79:5D:DB:BE:E0:38
Authority key identifier: D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7
Certificate issuer: /CN=d6f807660bf2cd92aee391442a5343af718c18c7
Certificate serial: 0198D5837B9C1F0B5B35ADD58D6EE5E1AF73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 06:00:20 +0000
Manifest this update: Sat 23 Aug 2025 06:00:20 +0000
Manifest next update: Sun 24 Aug 2025 06:00:20 +0000
Files and hashes: 1: 1vgHZgvyzZKu45FEKlNDr3GMGMc.crl (hash: hBwseAUN9be8+mAkEj/tfpLPDvhhv0hQX10brNKbP5o=)
2: KWwJmTARHeAHpXQEJKYr4FNXsos.roa (hash: 1063ws7p1tPR9qPGeDgdtnc+pragLeBe3JdEiKbe844=)
3: axQ4QcGTmWCvhs7XYE0LSyL0bR8.roa (hash: jnmoj5c8hE+D/ASpXs+Aut4m2SL0NpIhMDG7HImlpO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:7b:9c:1f:0b:5b:35:ad:d5:8d:6e:e5:e1:af:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f807660bf2cd92aee391442a5343af718c18c7
Validity
Not Before: Aug 23 06:00:20 2025 GMT
Not After : Aug 24 06:00:20 2025 GMT
Subject: CN=2ed987c8d21f8806447d33903fb6795ddbbee038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2e:4d:79:41:b9:64:7d:4b:3c:86:8d:17:c2:
63:58:ec:d9:a6:79:06:6d:a4:eb:1d:2a:1b:80:6f:
21:0b:4d:c8:f0:27:1b:44:95:9e:f6:fd:8c:ab:6a:
d1:a7:bc:54:18:25:dd:8d:81:6b:81:12:1c:f4:92:
81:b1:e5:07:b8:78:9f:d4:18:9f:d0:e9:ec:e0:fd:
5d:b5:7b:cf:bd:a6:00:41:cf:8c:78:6e:cd:74:43:
e9:6c:ce:07:de:37:a5:bc:aa:75:74:73:4b:b6:51:
3a:61:68:1c:de:e3:ce:b1:ed:d1:91:f8:c1:31:d4:
1a:ff:6d:53:0b:17:0f:b5:c5:9e:23:a4:af:1e:af:
31:41:21:ae:5c:19:40:0e:f3:35:8b:39:b0:62:3e:
1e:dc:8f:6b:3a:bc:e8:cb:49:1f:6c:db:90:98:6c:
1b:e2:8e:5c:55:fd:93:f3:68:07:e4:3c:7c:0c:05:
e6:6c:ac:05:94:2e:3d:d8:01:69:d4:a4:30:5b:eb:
63:80:1c:9e:27:b8:ce:5d:74:ad:37:73:77:d3:99:
2a:b3:bc:f9:16:8e:97:90:8c:bb:c9:ef:a9:cc:8d:
cf:30:b6:d3:ed:62:cc:06:77:2c:79:6a:d3:4f:95:
84:52:7a:96:38:de:9c:bb:75:f7:1e:11:ca:96:e6:
80:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D9:87:C8:D2:1F:88:06:44:7D:33:90:3F:B6:79:5D:DB:BE:E0:38
X509v3 Authority Key Identifier:
keyid:D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:fe:e9:23:8a:5c:f4:20:dc:dc:fb:27:81:7a:bd:c5:9e:10:
94:83:65:c3:5a:3b:1a:26:e3:38:cd:52:d3:98:0d:79:2a:46:
cb:bb:10:e4:5a:74:53:62:b8:7e:75:52:a3:37:3c:27:ec:ba:
8d:16:0b:3d:d4:d4:c8:54:1c:5d:e4:cf:b0:ff:64:88:af:6a:
20:9f:a1:0c:82:ce:dd:11:78:db:0d:11:d7:ee:be:60:89:5b:
53:35:4e:08:d9:c4:7a:d5:3b:b8:d4:11:e3:d7:87:62:5d:1c:
8c:75:34:5f:65:25:6d:c5:46:7c:4b:fd:0d:a0:23:64:28:fa:
d3:fb:52:0a:68:1a:03:a9:2e:14:4e:98:db:71:5c:f3:5d:28:
16:55:00:a9:0c:79:38:0e:ff:c0:c6:42:68:63:ff:60:03:5d:
94:b0:38:55:2f:7d:e9:2f:9f:b5:55:e5:29:35:90:ff:10:db:
da:64:b1:e3:fd:49:f6:e4:d2:86:24:11:db:36:9e:19:2c:69:
5c:9c:45:65:44:ab:68:1b:2f:21:ff:62:13:b9:13:54:0e:98:
0a:62:d7:a8:32:6b:77:9b:99:7e:57:f3:22:26:e7:1a:cd:1d:
e3:11:42:fa:a5:07:33:e0:ea:d9:ef:11:ea:cf:c4:7d:d4:70:
94:60:ed:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:31 2025 by rpki-client