Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
File: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft (raw, json)
Hash identifier: 5QiYI8Bu/JU68KVQr0r9BkBw23OlMQWXDP6VDJ1kIHA=
Subject key identifier: B0:60:19:28:9B:2E:F8:3F:AE:D1:43:F0:A3:65:4E:E0:27:8D:BA:1F
Authority key identifier: FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
Certificate issuer: /CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Certificate serial: 0199C4C575D2A6A61BF30FC87516BE9C912F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
Manifest number: 1367
Signing time: Wed 08 Oct 2025 17:01:38 +0000
Manifest this update: Wed 08 Oct 2025 17:01:38 +0000
Manifest next update: Thu 09 Oct 2025 17:01:38 +0000
Files and hashes: 1: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl (hash: KZ+Xxp9T8M9LTwcFqQ/wrhpzbjZhZ4B8alg9kX8ruYs=)
2: T5P1uF0UtYOhlxgIVxyPu_E24ZA.roa (hash: D5TZHibqLUW4oTHKSJ4ExAAZayO10mFfTENppWTtXa0=)
3: fEMD1Qw1-K78TFax9wsXAdNUiZc.roa (hash: zI5YMBWWK0MgL2oV8W3UKZtv3pFv7wUr61mj7J1xZ8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:c5:75:d2:a6:a6:1b:f3:0f:c8:75:16:be:9c:91:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Validity
Not Before: Oct 8 17:01:38 2025 GMT
Not After : Oct 9 17:01:38 2025 GMT
Subject: CN=b06019289b2ef83faed143f0a3654ee0278dba1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ac:c1:aa:4e:0f:69:f5:c4:d3:5b:56:9f:a6:
c1:1d:84:92:38:ae:f8:47:0d:51:e1:fd:74:52:70:
ad:60:6e:30:41:0b:6e:d1:15:99:13:36:29:71:52:
77:94:c2:8b:1a:21:a6:2e:e9:12:42:c5:db:7e:79:
a1:e5:69:69:e1:69:74:9d:b3:b8:d5:07:da:76:4a:
a1:d5:68:3f:13:d3:82:14:96:2b:15:f3:cd:4a:8e:
ee:3c:31:f1:4f:79:5c:80:9b:6c:f4:86:d7:32:e0:
48:63:5e:a9:c9:b2:7c:d1:6b:4b:cf:eb:89:88:39:
da:cd:f2:c5:ca:a5:26:a1:57:ee:6c:97:21:a8:fc:
3c:09:69:d8:b2:f9:ab:9e:e9:68:ce:42:cd:5d:04:
37:03:be:9d:fa:5b:d6:45:1b:6a:e2:f2:c7:96:f7:
e2:7d:a4:67:87:73:6b:91:ca:dc:b2:e9:7b:9d:b7:
84:4b:46:82:d2:bb:de:54:16:20:c8:ca:71:66:5a:
1d:79:19:3b:02:53:e5:c6:d2:5c:38:bd:be:12:e7:
c6:b2:3f:e8:72:d5:1b:fd:7f:b6:eb:a3:15:8c:51:
94:ed:ce:43:82:fe:93:ac:43:24:22:e9:c8:a6:0e:
b4:e1:8c:9b:41:9c:17:2c:99:3c:0f:d5:21:b5:93:
b3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:60:19:28:9B:2E:F8:3F:AE:D1:43:F0:A3:65:4E:E0:27:8D:BA:1F
X509v3 Authority Key Identifier:
keyid:FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:41:aa:24:28:f8:1a:38:bd:05:a8:6e:1a:3c:6a:cf:a2:40:
9f:89:3e:00:c9:2c:26:41:79:6f:21:dd:e1:be:e5:bf:e4:33:
00:d2:4a:40:22:aa:06:88:1d:31:d9:f9:3b:2b:22:a9:78:53:
15:b1:c4:c6:18:5c:3e:43:dd:39:cd:5f:b9:ce:11:74:18:92:
52:33:8f:f2:16:67:f3:76:e4:49:44:12:88:1c:73:c1:e9:76:
f1:e1:05:e2:d2:ea:66:85:68:2a:79:d0:45:fc:2e:3d:49:9b:
86:70:3f:df:d5:03:6a:2e:da:c9:aa:e4:5d:06:2a:7b:5c:e2:
54:6a:1c:1f:df:34:75:12:49:d7:f2:58:b7:cd:0b:33:4d:96:
d2:02:26:33:75:28:c8:76:99:8c:07:a0:88:e4:72:56:f7:9a:
eb:13:2a:06:f6:62:53:a0:71:cf:9e:d0:f2:26:e0:75:bc:09:
fd:6c:86:1f:dd:50:c9:f4:6a:e9:7c:45:68:5b:91:68:b4:be:
ce:9c:56:45:50:63:a6:2c:83:b9:c1:fc:0e:8f:ea:5f:db:b8:
f3:d2:48:08:ad:0f:1c:a2:ca:82:86:35:49:ae:48:96:cc:86:
5c:2c:25:8e:7c:55:81:27:53:b8:9c:2f:22:e4:37:5f:5e:6a:
de:fa:9b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:34:50 2025 by rpki-client