Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
File: 1-VkY92suBLF1FE4jy-SKY8yaqo8.mft (raw, json)
Hash identifier: q5AtMckmJOJyIZea9svUblPrXGRlEZCgK3OVKElgT4A=
Subject key identifier: 95:AE:67:0A:A9:4F:E6:0D:CF:09:7E:9D:8E:EB:4E:A9:38:FB:64:1B
Authority key identifier: F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F
Certificate issuer: /CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f
Certificate serial: 0198D697F5F6C78747FEDDA5DB522834C819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
Manifest number: 0A01
Signing time: Sat 23 Aug 2025 11:02:19 +0000
Manifest this update: Sat 23 Aug 2025 11:02:19 +0000
Manifest next update: Sun 24 Aug 2025 11:02:19 +0000
Files and hashes: 1: 1-VkY92suBLF1FE4jy-SKY8yaqo8.crl (hash: dzDXHGomdSGLVWEwuto6FGh69BwISJzpWHI5e6uula0=)
2: 7-j4zYeoEZb3GyJAS87cCTQvMeg.roa (hash: EAdEDlZP/7sT6Qp3HfzjAY/RfoPmZ+aNXdW6ptqfGUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:f5:f6:c7:87:47:fe:dd:a5:db:52:28:34:c8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f
Validity
Not Before: Aug 23 11:02:19 2025 GMT
Not After : Aug 24 11:02:19 2025 GMT
Subject: CN=95ae670aa94fe60dcf097e9d8eeb4ea938fb641b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:75:ff:62:53:b3:39:52:f2:00:d0:a4:80:d7:
c4:ec:25:ee:e9:55:ae:d5:60:54:6e:22:b4:6f:1e:
e2:62:47:4b:b2:a1:f0:9f:81:8a:f5:01:75:f3:3b:
ae:89:53:d4:2b:6d:b3:99:b6:f4:ad:e7:ca:df:a7:
de:ca:82:08:f6:1d:37:99:5c:e3:8e:36:d8:e3:c5:
5e:f9:07:13:1c:40:97:28:b5:62:03:93:44:3d:53:
7f:d0:e5:59:fa:fb:e8:73:84:93:00:1c:94:85:91:
be:de:15:28:5d:0a:59:b6:32:fc:fe:b4:40:33:91:
56:48:0d:90:00:2d:66:33:43:3e:59:3e:37:8e:a5:
44:18:88:ad:3c:cd:77:3c:36:ed:92:ad:21:69:3b:
a8:4b:81:e7:de:50:40:32:c7:56:28:64:03:ff:08:
3b:64:68:b5:c9:1e:9b:2a:b8:08:b0:70:6c:27:ac:
35:2d:52:72:67:53:9d:87:95:38:f2:f0:16:1c:9c:
a3:ea:d2:13:73:e7:fa:53:26:e5:a6:38:85:7e:e8:
51:8c:d1:bc:af:54:6e:9e:b2:c7:0d:f0:d1:c9:ce:
33:12:33:aa:e7:05:31:6a:dc:7e:ca:95:8a:3b:5a:
2c:d8:f4:c5:98:c8:17:3e:1d:17:45:64:f8:d1:f3:
77:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AE:67:0A:A9:4F:E6:0D:CF:09:7E:9D:8E:EB:4E:A9:38:FB:64:1B
X509v3 Authority Key Identifier:
keyid:F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:64:46:a7:d3:0d:ef:03:b9:bf:34:3a:47:5c:c9:14:57:59:
ba:18:ac:26:98:24:58:2e:15:32:92:88:ec:4f:7d:a0:4b:9f:
a1:20:ee:99:ae:9f:97:14:0d:5c:fe:34:d0:88:e5:98:03:32:
18:12:2f:ae:f6:27:b3:a2:fb:18:86:fe:e9:17:e5:f5:ba:c0:
41:b7:cb:d2:c0:9d:67:15:dd:b8:69:45:68:74:8d:8e:90:9f:
ab:b5:fd:18:f7:00:f8:c8:63:aa:95:37:55:3b:c4:41:46:66:
09:db:b7:27:3a:c9:49:3a:07:ef:c9:9c:72:39:4d:a4:cc:ca:
4f:bc:0a:fe:4b:59:11:65:6f:25:5a:fa:ce:ef:43:6e:1c:b9:
f7:f8:a2:07:4a:54:bc:25:0f:e2:3c:78:fc:22:05:8f:9a:3b:
1a:75:2a:ec:90:84:41:49:13:ad:69:d7:8d:ca:ce:a1:db:e8:
da:8a:4d:ab:02:73:49:c8:76:3d:da:68:b1:87:2b:e3:91:81:
ba:f8:2c:25:0f:04:1d:2e:48:91:09:85:ed:31:e7:13:ea:42:
4f:4a:c0:e9:b2:10:89:70:39:71:ad:77:e6:f4:83:c9:55:03:
d4:c8:bd:9e:ff:b7:15:46:31:8f:e5:1a:75:fe:44:94:44:41:
4e:39:55:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:31:15 2025 by rpki-client