Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
File: 1-Rnh8_5ptOvf8CqahX58bCslMBo.mft (raw, json)
Hash identifier: QzkTScj7izvWKb5B6Tpstq2Rb29mkQ8aRSPm4Ui6/3Y=
Subject key identifier: 33:AA:C3:A4:9D:D7:06:F2:5D:53:4D:4F:9E:79:47:32:5F:74:77:94
Authority key identifier: F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A
Certificate issuer: /CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
Certificate serial: 0198D5BBADA71CC7EA4801603D5C9B9F36B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
Manifest number: 12FF
Signing time: Sat 23 Aug 2025 07:01:43 +0000
Manifest this update: Sat 23 Aug 2025 07:01:43 +0000
Manifest next update: Sun 24 Aug 2025 07:01:43 +0000
Files and hashes: 1: 1-Rnh8_5ptOvf8CqahX58bCslMBo.crl (hash: dbLQman3jS2MvWQIxfcabyydWSGblPBueeBdtt0ONtc=)
2: sG6LQp_gQ94ODISJjZUd2s3wp-s.roa (hash: BwAZqLpT7OhVUlTGHfY2WKqDcBZLalSsu2uZKqZNG2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:ad:a7:1c:c7:ea:48:01:60:3d:5c:9b:9f:36:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
Validity
Not Before: Aug 23 07:01:43 2025 GMT
Not After : Aug 24 07:01:43 2025 GMT
Subject: CN=33aac3a49dd706f25d534d4f9e7947325f747794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:00:16:88:ab:46:c5:27:e8:18:60:aa:f7:aa:
6d:a4:89:c8:f2:2d:a6:eb:d9:d9:0b:bf:27:7f:22:
0b:37:ee:7f:67:10:26:5d:be:aa:3d:68:6a:20:f1:
72:2f:7e:23:69:1a:83:89:b1:5c:4a:35:00:6c:e0:
e2:fd:b8:c3:f0:73:d7:a8:bd:b6:43:ac:6d:2b:48:
46:98:1b:23:2e:e8:79:43:85:9a:e4:5f:78:16:e6:
eb:a7:76:34:96:de:87:68:1d:09:d0:75:05:3b:b2:
7d:8d:72:a9:5e:93:b0:45:0b:db:71:1f:f1:dc:b1:
0e:5e:95:bd:04:2b:a2:68:77:1e:fd:46:8d:ec:45:
99:87:78:95:85:7e:52:7d:f6:69:2b:b1:fc:6c:6e:
86:d4:8c:1f:40:a9:1e:9a:78:a0:4f:83:6d:93:c7:
70:77:94:9c:a5:76:09:66:3d:9b:fd:53:3a:c3:1d:
27:5e:89:4d:df:ff:1c:12:63:8e:c4:7e:a4:74:fd:
9a:a6:29:4d:a1:b9:1d:a3:8a:7a:92:c7:42:74:e6:
59:01:77:71:58:56:72:d3:17:7c:78:7c:4b:81:ee:
7e:f3:bd:08:da:4b:05:36:ee:e9:95:fb:38:63:a1:
62:a0:dd:79:34:8c:0a:1f:a6:d6:e6:df:89:1d:b1:
57:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AA:C3:A4:9D:D7:06:F2:5D:53:4D:4F:9E:79:47:32:5F:74:77:94
X509v3 Authority Key Identifier:
keyid:F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:98:8a:71:98:f6:a5:5e:5b:2a:04:b5:29:56:6c:a2:db:f5:
c6:5c:f7:ac:d7:e8:c7:02:2a:59:25:d4:89:fa:36:af:15:3d:
8b:9b:4a:63:34:d9:d7:15:05:f7:14:42:a7:a9:1d:6c:ce:69:
65:40:bb:9e:9a:5e:04:da:55:77:60:32:fa:34:50:81:72:b9:
bd:a6:f7:03:78:e7:2b:ce:5f:4e:3c:21:5a:33:63:e1:94:9c:
70:ca:d6:d3:9d:bd:75:8e:f8:37:dc:ee:41:7d:1e:3f:9f:44:
fe:9e:96:2f:06:32:18:4a:bc:9b:c0:82:7d:84:30:52:5f:6b:
30:ae:ae:f4:7e:09:f0:2a:9e:65:e6:0e:e6:21:db:37:e1:66:
d5:cb:67:16:6b:3f:10:80:7c:aa:45:f2:de:9d:3b:9a:f3:bb:
1e:7e:df:85:68:2e:83:9a:1b:eb:02:1a:fe:64:3f:b3:26:f6:
39:1e:5c:c5:66:75:ae:37:43:9d:7a:89:20:b9:42:95:bb:be:
18:8f:6e:f1:bf:c8:b7:90:1c:39:b2:51:ec:a9:9f:c2:e9:89:
e9:d1:ee:71:95:ac:ac:66:69:8f:fc:75:39:fd:bc:14:69:e6:
90:b4:5d:d5:1a:89:c9:a0:78:a0:ba:e6:e3:8f:ad:ef:f7:ea:
fa:da:37:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:12 2025 by rpki-client