Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
File: 1-PvIQVghSG6P4IYLW-w-koO4A4U.mft (raw, json)
Hash identifier: IiPN/i0NoqBIqWPsha3jRoa+Ob2Mde5UzmiYJO/PiZk=
Subject key identifier: 58:04:23:14:0A:E7:EB:07:80:E1:94:66:1C:B7:84:5A:A4:13:86:02
Authority key identifier: F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
Certificate issuer: /CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Certificate serial: 019853E91EF2328980EB4916ABD952A2A18B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
Manifest number: 1606
Signing time: Tue 29 Jul 2025 02:00:43 +0000
Manifest this update: Tue 29 Jul 2025 02:00:43 +0000
Manifest next update: Wed 30 Jul 2025 02:00:43 +0000
Files and hashes: 1: 1-PvIQVghSG6P4IYLW-w-koO4A4U.crl (hash: sIjiHFXfH08+tdu7kZCaP2OZ1ejdDpVBHmTpbbUfP+g=)
2: Dn9PJQBV1DBDQ0-rgh6HR3KDZu0.roa (hash: gZf47H7ZNPeHNBxmm1n+mb7mTaHE9Uiqqc+N1w8TQc8=)
3: rkGv9bkZwGnroE2E1JMq5CMdQAQ.roa (hash: DQuQsqAZ9ADD7G7O8fgD2/H25auaCw74dHGUBLobCk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e9:1e:f2:32:89:80:eb:49:16:ab:d9:52:a2:a1:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Validity
Not Before: Jul 29 02:00:43 2025 GMT
Not After : Jul 30 02:00:43 2025 GMT
Subject: CN=580423140ae7eb0780e194661cb7845aa4138602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:64:6e:e0:06:c8:bb:80:b3:36:ef:e5:9e:35:
0e:6a:5b:18:02:f1:9c:3c:6d:5a:81:42:d1:2a:e9:
82:c4:5b:26:26:d8:ba:4c:b0:c3:5d:06:7b:7b:29:
62:e4:80:5f:a8:72:32:bb:e0:21:ab:42:00:07:6e:
a9:f5:f0:af:b3:5c:42:d9:61:51:2c:36:8c:88:a9:
d1:ff:d4:02:fe:9c:17:27:6a:33:74:a0:fd:54:7a:
6e:b0:9a:8f:2c:58:71:42:b2:11:c4:28:08:43:99:
51:b6:48:03:25:66:c9:82:12:8d:0a:38:7e:fe:20:
1d:28:8a:d6:e7:24:11:82:52:61:91:9c:c7:54:e9:
26:d7:e7:04:e4:03:84:e2:5b:fb:87:71:10:d5:63:
f4:69:9a:70:41:86:86:3f:fb:41:80:eb:3b:2b:dd:
73:34:59:60:70:ef:74:f7:9e:ea:da:e9:a4:fa:75:
5a:9c:8c:ab:2f:f9:03:f2:63:93:f1:5b:50:b6:29:
f4:ae:21:7d:ae:33:26:e1:4d:1c:76:84:04:64:f5:
18:ee:f9:8f:d6:e9:bb:11:5b:9a:eb:64:b8:c7:35:
e6:c4:9f:5c:97:85:bd:0a:65:04:80:5a:26:73:84:
e3:16:4d:f7:b9:a0:ce:59:6b:cb:a0:9c:6c:2c:17:
36:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:04:23:14:0A:E7:EB:07:80:E1:94:66:1C:B7:84:5A:A4:13:86:02
X509v3 Authority Key Identifier:
keyid:F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:1d:ca:04:7c:7d:2c:06:9c:7d:a8:05:45:36:03:1a:eb:e2:
7f:58:fc:67:35:32:0b:78:f2:ec:9c:ae:6c:dd:28:9d:45:a8:
49:b8:72:fb:29:0e:7f:4f:73:b4:51:3f:fb:74:38:73:10:3e:
5f:7c:60:27:0a:b9:5a:ed:23:82:82:01:ae:f4:0a:bb:1b:db:
72:42:46:c6:a2:a9:b5:57:a5:5e:f9:3f:20:61:1e:d7:5c:f4:
9e:29:62:c3:b5:b3:56:05:4a:06:a2:3f:5b:9b:1f:f2:99:a2:
19:60:4d:9e:87:e0:01:1b:9c:69:32:b2:d8:98:f1:04:5e:2e:
26:84:64:6e:3c:10:6c:a7:09:3e:7b:bc:37:13:dd:6c:bc:a7:
57:0b:66:d2:9c:0d:fe:a7:e6:26:f0:d6:93:25:e2:6f:cf:47:
d2:f0:55:9a:e2:63:16:08:36:48:ed:d0:32:74:0f:fa:6f:bf:
1e:e1:ca:0d:95:76:51:96:34:d3:e4:67:dd:7c:57:35:24:5d:
5c:9e:7d:86:9d:73:6a:1a:ed:c0:62:10:39:35:f6:59:7b:00:
41:86:2c:b1:e6:b0:b3:93:1a:6f:1b:fa:a3:5a:4a:ae:1c:d2:
d6:73:1d:d2:c5:12:37:ab:b8:16:43:78:d9:17:5a:aa:de:6f:
bf:57:94:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 06:17:08 2025 by rpki-client