Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
File: 1-Zq-RfIfEuS4AvMJREwkdZAA688.mft (raw, json)
Hash identifier: jOWhpT9F1xEAzPWWsN51VWG5RG9yG4wfc0go2o6EMh4=
Subject key identifier: 23:07:16:A2:8B:45:EB:27:3E:45:D4:B1:AB:24:76:D2:C3:48:6F:64
Authority key identifier: F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
Certificate issuer: /CN=f99abe45f21f12e4b802f309444c24759000ebcf
Certificate serial: 0198D5BBB4F2703191721E64E336448CE784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 07:01:45 +0000
Manifest this update: Sat 23 Aug 2025 07:01:45 +0000
Manifest next update: Sun 24 Aug 2025 07:01:45 +0000
Files and hashes: 1: 1-Zq-RfIfEuS4AvMJREwkdZAA688.crl (hash: fDKJ+4ZE5LuMTG0cJgGmxPn/IkGfnSHEAyXmooAH/Ww=)
2: SeJ_MUIfyEphmZtsrhRCas-Zt7E.roa (hash: 8yf8UNspB0AXwJ0f5mj6a36u/vut8a8srUMh6OwnuMY=)
3: nE72fRq5x2AdGCpsReX1DOqVoW0.roa (hash: LAILnXnxyWYExTH4qCTlNLIx2ujkg7Q+2T14oqEfAzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:b4:f2:70:31:91:72:1e:64:e3:36:44:8c:e7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f99abe45f21f12e4b802f309444c24759000ebcf
Validity
Not Before: Aug 23 07:01:45 2025 GMT
Not After : Aug 24 07:01:45 2025 GMT
Subject: CN=230716a28b45eb273e45d4b1ab2476d2c3486f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c2:d3:72:c7:7c:60:e1:34:c0:a9:49:61:c4:
2e:28:c5:62:fa:ab:bf:da:f8:3f:fc:e2:46:91:7e:
bb:a9:2d:7c:91:00:53:9d:9b:c3:e2:5c:1e:03:1e:
fa:97:2f:c0:12:9e:aa:8d:3b:a5:df:b9:9a:e2:04:
77:92:47:de:98:bb:97:09:6b:08:b0:78:ab:1d:be:
ab:b0:6d:96:1a:23:c6:c7:b4:b6:df:71:13:f6:14:
0b:e2:b2:b8:d5:f7:a3:42:74:e9:40:15:56:54:74:
76:92:ca:bb:d3:44:c3:8e:35:5f:07:cc:97:b2:b1:
0d:4b:65:5d:07:45:12:91:24:db:c7:8a:99:98:a1:
11:43:b7:7a:91:0c:be:59:8c:bb:75:9c:e6:c5:4f:
38:42:1a:4b:40:7f:96:37:ed:12:33:d5:a8:34:a6:
90:ba:b0:fe:ec:57:bb:45:0f:d4:17:9b:4a:50:de:
6c:e6:7e:93:a2:e5:1a:95:0f:4a:37:26:f4:df:3e:
6b:03:08:ab:69:3b:30:41:0e:8f:47:72:02:5b:d8:
c4:a7:ae:fb:5b:4f:6e:35:dd:2a:24:6e:44:09:57:
ea:1d:5f:9e:00:f4:b2:56:0b:6a:f4:06:43:16:51:
33:b7:95:fa:b1:c1:e4:ae:71:4b:72:bc:01:68:8c:
29:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:07:16:A2:8B:45:EB:27:3E:45:D4:B1:AB:24:76:D2:C3:48:6F:64
X509v3 Authority Key Identifier:
keyid:F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:db:87:90:53:a9:c1:01:99:fc:2d:94:d5:c4:d9:7c:31:01:
de:d2:2d:5a:1e:b8:7e:75:a0:e3:f6:fe:79:4a:85:1f:c0:df:
91:93:eb:57:9d:84:03:7f:06:42:73:bf:1a:82:7b:bd:ae:58:
5d:04:88:fd:5e:d3:4c:ca:6c:fc:5b:28:c7:24:b0:04:61:3f:
ac:5d:db:2d:5c:e8:43:35:6c:48:16:35:e7:b2:fc:21:a0:2d:
7b:ef:ef:ed:b6:4a:05:70:fa:c2:f3:75:0c:0b:61:2d:87:dd:
b2:d5:be:04:e9:38:c3:81:d6:da:c1:8c:59:dd:07:b7:5d:35:
16:be:d2:a2:87:2b:19:14:1b:3f:89:c6:4f:ee:ff:be:03:d7:
e6:cf:e9:da:1b:94:3c:ca:eb:4f:b3:c7:a6:47:3f:69:b0:6e:
03:64:c4:83:1f:77:a5:57:2e:57:2d:2f:83:b0:23:81:1f:6a:
60:fc:89:0b:75:55:a8:19:18:d7:2b:06:6a:0b:eb:6f:52:1d:
bb:26:3b:8b:f4:d8:1b:be:5c:d7:8c:36:8e:de:73:ee:63:df:
5e:77:a4:9b:0d:6e:57:32:2b:8e:94:9f:9d:cf:b1:4b:b6:d1:
95:7a:d0:06:00:e8:07:37:47:ba:32:ec:df:82:b9:6b:75:cb:
4e:b0:5e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:42 2025 by rpki-client