Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
File: 1XfOFDQjLYCBldDKcKs5HfsHry0.mft (raw, json)
Hash identifier: /wbVMlS0WcDyMxUQh4yfxydpsu30q1MTFSqgzEOTM6o=
Subject key identifier: FA:74:F5:D6:9F:B3:B5:11:C8:5D:0F:06:14:4C:2D:B3:7A:1C:29:EF
Authority key identifier: D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D
Certificate issuer: /CN=d577ce1434232d808195d0ca70ab391dfb07af2d
Certificate serial: 0198D705E37876D42877881598D110C204BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 13:02:23 +0000
Manifest this update: Sat 23 Aug 2025 13:02:23 +0000
Manifest next update: Sun 24 Aug 2025 13:02:23 +0000
Files and hashes: 1: 1XfOFDQjLYCBldDKcKs5HfsHry0.crl (hash: M4a/6niX/tsMnGu8MZ7YlyGr4lARXFiVrsY18I/GU/A=)
2: HcDxgF3nqk8cgEWN2FjSYTqgWIU.roa (hash: zRQPtKl4Mi8+zyT9yY1R1Qmmn1wM9W5eQbvQLliU+lY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:e3:78:76:d4:28:77:88:15:98:d1:10:c2:04:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d577ce1434232d808195d0ca70ab391dfb07af2d
Validity
Not Before: Aug 23 13:02:23 2025 GMT
Not After : Aug 24 13:02:23 2025 GMT
Subject: CN=fa74f5d69fb3b511c85d0f06144c2db37a1c29ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5b:33:a1:4a:74:a2:a5:e7:aa:bc:b9:90:ad:
4e:fa:65:da:f6:8d:72:e6:7c:bc:6a:a7:2a:29:c2:
fb:08:d6:35:15:a1:0f:cc:99:53:00:7c:89:1e:10:
6b:8a:bd:93:eb:6a:51:7f:f1:0b:dc:ea:56:6b:01:
fc:de:b1:6e:96:ed:10:c6:c0:b3:9e:c1:ed:77:24:
9c:eb:2a:8e:af:91:f1:92:71:09:16:93:00:c0:48:
ea:4a:85:64:76:5f:b8:a0:c0:ab:f3:48:7e:03:9b:
c0:0d:06:66:40:68:c3:a6:69:f6:f5:7f:cd:a5:d1:
0a:93:c3:86:19:69:b9:ab:5c:8a:e9:b2:f0:3d:48:
72:dd:e8:2d:af:0b:a6:c2:73:2f:3f:cb:91:63:35:
6f:02:b2:7c:e1:ab:e2:8c:8a:ab:75:90:47:ef:32:
27:82:ad:88:42:7d:a8:cd:fc:7c:91:96:c0:c4:80:
2f:8f:fe:97:2e:0d:be:2f:26:e3:be:1a:4b:d8:a1:
c8:6c:47:58:27:c0:13:cd:1d:84:6b:76:fd:58:32:
a5:ca:d7:d3:b5:5f:cd:68:f8:20:da:57:8d:e4:f7:
37:6d:0e:a9:ab:c6:43:8f:2f:17:a0:e4:00:8c:d4:
7a:3d:76:70:7c:3b:9f:5d:b2:a8:c6:37:35:22:5f:
7c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:74:F5:D6:9F:B3:B5:11:C8:5D:0F:06:14:4C:2D:B3:7A:1C:29:EF
X509v3 Authority Key Identifier:
keyid:D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:fc:43:ff:66:5b:b7:26:4b:bd:fe:01:dd:39:8f:95:16:6b:
95:9b:a6:9c:26:21:f5:61:20:38:7b:6b:a0:8e:4e:95:ff:a2:
0f:a0:9f:ba:a6:91:d4:55:8f:26:54:d9:22:db:01:21:b7:d4:
0d:38:d2:ca:90:99:36:57:57:18:66:74:83:c6:49:b7:e4:3b:
9f:bb:83:08:b7:6c:07:a3:bc:12:6d:39:4f:40:34:9e:6a:d9:
99:4e:b6:7a:e6:44:4d:1a:f4:fb:f1:59:0b:53:e8:4c:c0:14:
b5:2f:6e:56:90:51:40:32:4c:48:b6:b7:cd:7f:9e:74:39:a2:
a5:6e:49:e4:3b:f5:8f:88:56:42:a7:e6:0d:78:ff:6f:26:b0:
e2:38:e1:fe:c0:98:51:41:60:98:59:bc:b8:fd:76:a3:91:c7:
7c:54:7f:1e:0b:cc:e5:81:b4:07:59:6f:4f:5d:c7:38:23:32:
b0:59:8f:e4:57:75:22:e5:7d:7e:5a:6e:c2:4e:6d:bf:84:02:
fd:58:26:9a:c5:40:51:e3:a5:82:f5:1a:75:6e:1f:1b:9e:c4:
f8:cf:3b:65:bd:d0:c2:01:ac:03:3e:28:f2:15:d0:2a:2a:93:
79:c3:38:0f:a3:3c:f1:0e:a6:3e:d6:1b:1d:cc:72:0e:6f:55:
be:30:af:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:29:46 2025 by rpki-client