Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
File: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft (raw, json)
Hash identifier: jT9kxcPm2RlVFORM1mSy/7I9Txk6f/Szj9RG/bP8U0I=
Subject key identifier: 10:91:64:64:6E:2E:F6:EF:47:82:D9:40:89:35:D0:1D:94:C8:AC:78
Authority key identifier: FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
Certificate issuer: /CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Certificate serial: 01984852765BBCCA4D0F42F930B0A3EF84B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
Manifest number: 12A2
Signing time: Sat 26 Jul 2025 20:00:20 +0000
Manifest this update: Sat 26 Jul 2025 20:00:20 +0000
Manifest next update: Sun 27 Jul 2025 20:00:20 +0000
Files and hashes: 1: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl (hash: MhuaW+qzNxl3It8AMwLFFJps35a0W/fzKCqlGlnl5x0=)
2: T5P1uF0UtYOhlxgIVxyPu_E24ZA.roa (hash: D5TZHibqLUW4oTHKSJ4ExAAZayO10mFfTENppWTtXa0=)
3: fEMD1Qw1-K78TFax9wsXAdNUiZc.roa (hash: zI5YMBWWK0MgL2oV8W3UKZtv3pFv7wUr61mj7J1xZ8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:76:5b:bc:ca:4d:0f:42:f9:30:b0:a3:ef:84:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Validity
Not Before: Jul 26 20:00:20 2025 GMT
Not After : Jul 27 20:00:20 2025 GMT
Subject: CN=109164646e2ef6ef4782d9408935d01d94c8ac78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cf:e7:c5:2b:24:3d:70:59:84:98:79:71:ad:
6b:98:44:72:d7:e6:2b:08:94:9b:36:84:68:d3:79:
53:f6:99:9f:ec:cb:dd:b8:c9:c0:da:93:2b:04:b2:
71:b2:83:a1:32:79:2e:2d:88:65:00:3d:75:f8:b5:
4b:76:b3:c5:d3:70:cf:e8:6f:d4:f9:94:0f:b1:cd:
2a:73:4b:0d:14:13:9b:be:83:ef:e4:46:9e:d3:3a:
ee:05:d3:ff:87:5a:c5:9b:e5:f4:a0:9e:d9:8e:75:
43:75:d6:b2:13:7d:d0:ca:0e:9f:2a:74:07:44:f0:
85:d3:26:48:76:90:11:a3:5d:4d:8f:cb:fe:af:c1:
52:ac:74:46:24:e7:62:b2:05:55:ae:6f:ed:51:13:
90:02:f3:a7:0d:02:96:3c:da:7d:3c:8b:fb:9a:1e:
bc:2d:e7:5a:73:a8:15:9c:ab:e5:00:ec:4f:59:5a:
0e:df:04:6b:2d:a5:0b:13:4f:dd:57:60:25:f9:99:
b4:77:73:19:5d:d7:d5:ff:c7:d3:d4:61:ca:43:a9:
db:a7:9f:3b:13:6a:95:b3:86:17:db:86:f6:0b:7b:
e9:bc:fe:8a:17:19:91:4e:dd:af:ec:91:9d:27:4d:
12:9f:21:bc:9a:f6:e0:36:3f:bc:9a:3b:7e:a7:68:
62:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:91:64:64:6E:2E:F6:EF:47:82:D9:40:89:35:D0:1D:94:C8:AC:78
X509v3 Authority Key Identifier:
keyid:FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:0b:24:a6:f7:e3:e8:f0:48:5a:d8:54:d6:30:3b:99:e5:6f:
2b:b7:51:b4:ca:bc:1b:0d:6b:0e:c7:e3:cb:25:7d:1d:34:83:
4f:5c:e8:25:ff:ab:7b:48:0a:6d:d5:f7:a0:5b:65:85:b9:dc:
fa:32:46:bf:93:59:d3:84:da:1a:33:cb:0c:f8:73:f9:35:de:
d2:25:54:36:00:ac:e2:4d:c0:48:f3:43:7f:dc:65:ec:b8:c4:
38:c8:6d:05:57:1f:16:cb:75:3c:7e:d0:a9:62:8c:1d:e4:1c:
d6:63:b1:9a:fb:ff:9c:7f:c1:b1:95:cc:79:66:5c:de:9e:ac:
a7:ea:86:a6:f7:b6:57:6f:4c:34:01:ee:c2:ed:46:60:c2:f1:
0a:1a:10:e2:b2:2f:75:2c:c3:f0:ea:30:3e:26:28:db:14:75:
42:fe:40:52:a1:fa:d1:f5:c2:48:d2:d5:47:1e:cc:5d:33:08:
18:36:07:35:62:c4:b7:08:65:e7:58:bf:04:e8:cc:d5:60:ac:
0e:8e:28:d8:c4:c0:43:a0:36:1f:6b:24:d7:2b:e0:47:ad:f3:
2d:3c:39:c5:c2:af:25:85:4b:2b:8b:f0:97:5c:81:f0:82:b8:
85:16:e6:72:47:27:a3:4a:b4:f0:9d:2d:ec:d0:23:c9:a6:3e:
11:a6:b6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:17:20 2025 by rpki-client