Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
File: 1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft (raw, json)
Hash identifier: FnnWvJDH1dh7UnYJY0sipqqKsrhurNVUPqm4rkdRxdY=
Subject key identifier: 7A:90:EC:EC:D3:30:70:A8:02:7E:EC:9A:8D:C7:81:6A:DB:9A:06:FE
Authority key identifier: F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08
Certificate issuer: /CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
Certificate serial: 0198439B1039ED869BB3F770569C064E9489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
Manifest number: 0B1E
Signing time: Fri 25 Jul 2025 22:01:32 +0000
Manifest this update: Fri 25 Jul 2025 22:01:32 +0000
Manifest next update: Sat 26 Jul 2025 22:01:32 +0000
Files and hashes: 1: 1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl (hash: 3z8iiXxPrBFSkA3ow1LjwkQ5BWXF/89BZGezUPCRsbg=)
2: EMHZK5FmGs3e4ft5zOEqyrPAX3k.roa (hash: SAEFhbIVJ1yY+JX9erZchhAcSGngszOxyT0JSaQzoqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9b:10:39:ed:86:9b:b3:f7:70:56:9c:06:4e:94:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
Validity
Not Before: Jul 25 22:01:32 2025 GMT
Not After : Jul 26 22:01:32 2025 GMT
Subject: CN=7a90ececd33070a8027eec9a8dc7816adb9a06fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6e:a6:8c:9f:ec:ab:cf:58:0d:a7:5f:a6:49:
00:d4:a1:6c:8b:87:9e:c7:76:ea:46:40:19:f9:1d:
8d:dc:bb:87:33:3c:44:9d:98:05:8c:5a:d6:6e:f7:
b1:43:95:ff:01:74:d1:bc:78:83:c6:42:3d:ce:0b:
4f:0f:c0:b2:35:07:b6:5c:da:a6:b2:06:8c:0f:00:
31:96:7b:19:ee:4c:87:95:f0:36:ae:06:77:32:2f:
db:4e:c0:34:f2:7e:01:14:2d:0b:3f:4a:86:66:0a:
60:85:50:6a:e4:93:68:da:17:50:5d:d3:98:62:3f:
5d:21:11:07:ef:2d:51:62:6c:08:01:f8:92:55:89:
91:9f:8a:bf:3b:f3:3d:e6:0b:e7:5b:ee:08:d6:c5:
8d:3f:46:b5:fc:47:a4:f2:67:6d:d6:ae:74:fd:d5:
0a:d4:62:5a:6d:e6:ad:64:79:77:56:98:67:62:4a:
f5:cd:e7:7d:5a:63:62:87:f0:ff:1c:70:3a:68:12:
00:b2:a9:a5:03:d8:d3:a6:28:aa:b0:6a:b5:94:97:
32:ae:cf:ad:cf:97:bb:ab:1d:19:df:39:24:63:c5:
b1:2a:dc:00:49:20:ff:c2:6d:50:3f:64:8f:19:43:
87:81:d9:dd:9c:5f:ab:ac:6f:20:b9:31:cb:2b:cb:
3b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:90:EC:EC:D3:30:70:A8:02:7E:EC:9A:8D:C7:81:6A:DB:9A:06:FE
X509v3 Authority Key Identifier:
keyid:F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:57:78:98:0f:6c:58:b6:1d:03:b0:f3:c8:d4:a1:52:08:5f:
fb:f1:a3:e3:be:a2:d3:6d:68:66:a4:d3:ca:ed:bb:7b:dc:54:
11:3e:49:c4:29:72:31:54:1e:99:db:f3:33:9e:7c:b5:dd:94:
c2:48:60:cc:e8:de:3b:0c:d8:33:22:a2:9f:e5:a9:d3:50:a5:
3c:a5:28:80:f6:99:6b:8c:e7:15:ec:81:c0:b8:e1:41:0b:0f:
73:68:ad:f4:d8:c4:f5:2b:c4:7b:e2:bd:08:b2:6f:6a:00:71:
0e:f7:30:d6:09:1a:f4:d4:fc:e1:39:53:aa:fa:56:a9:8c:a9:
4a:b5:c1:41:cc:ac:82:db:20:17:bf:a5:33:aa:7c:1f:a2:3b:
e9:ba:4a:ff:e7:dd:dc:ac:0c:ad:27:e0:82:56:1c:52:93:74:
53:2d:81:64:5b:b0:9c:26:98:45:a2:dc:ae:80:35:bc:0d:50:
5e:42:97:45:c8:0f:5f:3d:c5:6f:60:75:79:8a:7e:d3:10:99:
b6:77:7c:c1:61:9a:e4:15:41:8f:bb:de:98:95:44:cd:85:81:
6e:37:a1:78:4c:cb:0b:40:d8:41:ee:5a:bd:d1:56:af:88:81:
32:88:20:4d:e0:66:e2:ed:8c:9c:52:01:9e:57:24:b6:3b:91:
07:0c:7e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 01:55:32 2025 by rpki-client