Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
File: 1-RVYjvgFRokoxj2rCGMAheXQj2U.mft (raw, json)
Hash identifier: NcqsDUNvNa11A2hpnSfU0QL9hIy8to0uVvWG6LXiAwY=
Subject key identifier: 9C:14:17:87:16:76:BA:6A:C0:CE:EC:15:B6:88:0E:19:20:81:E7:3A
Authority key identifier: F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65
Certificate issuer: /CN=f915588ef805468928c63dab08630085e5d08f65
Certificate serial: 019858D88337DA7B36FD1A539A86F786DF43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
Manifest number: 160B
Signing time: Wed 30 Jul 2025 01:00:40 +0000
Manifest this update: Wed 30 Jul 2025 01:00:40 +0000
Manifest next update: Thu 31 Jul 2025 01:00:40 +0000
Files and hashes: 1: 1-RVYjvgFRokoxj2rCGMAheXQj2U.crl (hash: z5HlbB+KbvhgqA/kSYCMPdp6q3oul2hdtw69O9M24ao=)
2: kSpoSxHKDe6NIGWDkuL60L15TUg.roa (hash: H+OsucCLJz/FqkNDXLyLTzKpNO9y1yCy5pgD6JvPI6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:58:d8:83:37:da:7b:36:fd:1a:53:9a:86:f7:86:df:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f915588ef805468928c63dab08630085e5d08f65
Validity
Not Before: Jul 30 01:00:40 2025 GMT
Not After : Jul 31 01:00:40 2025 GMT
Subject: CN=9c1417871676ba6ac0ceec15b6880e192081e73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0b:b8:fe:02:a2:69:9f:c1:c0:88:5a:2c:16:
b2:de:5a:24:c6:3b:e7:e7:f6:01:cd:ef:c4:02:29:
6a:6c:0a:09:e1:0c:0d:4a:fe:db:6e:3f:70:70:e4:
ad:1e:fd:81:6c:9c:a9:7a:0a:96:32:a5:2d:f4:b5:
2a:12:25:6f:7d:18:12:f4:95:f2:c8:ec:36:c0:f5:
2b:f7:89:3b:21:d4:62:55:6d:50:2c:25:2c:4a:e6:
85:ac:01:27:1f:3c:6b:e2:f3:a8:b3:c2:c5:1e:5d:
dd:cd:d3:fb:55:5e:43:98:4b:92:e6:ea:37:16:c1:
1d:2d:19:d0:3f:93:e1:a3:a9:6f:e1:c6:f6:02:b6:
c2:d0:d8:c8:6c:1f:0a:8d:b5:2c:15:f5:41:d5:92:
0e:88:7e:63:48:0f:b9:ab:c5:5d:58:45:d9:2d:34:
f7:2e:1e:1b:d0:bb:bf:a5:aa:8c:bb:1d:b2:67:ba:
95:69:24:52:c1:9a:0c:0d:fe:ae:db:43:54:ad:b8:
15:86:19:ca:91:56:cc:a0:bf:75:fb:7a:03:39:86:
d6:c9:23:cf:9a:16:9d:70:df:6d:cf:17:4f:bd:72:
59:7b:ff:40:aa:e9:6e:96:09:26:92:5d:3d:ff:79:
4b:50:cd:1c:69:bb:5f:ea:76:97:65:c0:6b:5c:0e:
47:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:14:17:87:16:76:BA:6A:C0:CE:EC:15:B6:88:0E:19:20:81:E7:3A
X509v3 Authority Key Identifier:
keyid:F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:33:b4:85:46:f1:a0:40:1b:cf:8a:29:26:55:01:91:1c:56:
55:d9:37:35:5d:0e:df:9f:9c:1c:57:59:7b:6f:b1:4a:9c:69:
52:a2:37:4b:36:b9:92:e9:33:96:6f:2d:57:13:db:80:4a:cf:
95:b5:ca:fe:12:79:86:ec:1e:b0:b5:94:c2:ca:13:38:bb:48:
9b:5c:6f:b2:4f:86:8b:a0:85:1a:ed:4a:f2:73:dd:59:61:ce:
d4:f7:cc:05:4a:f4:b4:c0:f0:bc:1d:d6:b5:6a:42:1d:fa:10:
54:ba:59:19:62:2c:50:4c:38:eb:13:76:7b:35:b7:39:62:4e:
db:b1:02:07:09:f0:5d:48:e4:89:a0:90:c3:4d:f2:71:79:79:
e2:45:e0:37:c0:06:89:fb:ea:d1:f9:e5:1b:05:79:13:b8:cd:
21:21:89:cb:67:9b:6b:ea:dc:01:62:42:6e:e3:f9:dd:8b:1c:
fa:88:3b:03:32:bf:41:93:fa:98:73:af:88:e8:52:0c:a7:cf:
3b:5a:da:97:78:54:7a:ae:0d:d6:fa:68:47:47:fe:63:f7:57:
27:4c:f6:d9:e9:31:5c:01:fb:ab:f1:b8:32:30:d6:94:0f:50:
cf:ab:19:48:f6:a3:c7:c5:0e:13:a9:42:f9:5d:08:64:5f:e7:
06:78:46:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:36:07 2025 by rpki-client