Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
File: 1vvg67NTA0y7YyjrPo4_zTYLL7s.mft (raw, json)
Hash identifier: 4wuminN1LMtSjUEhfr/oT2MEFgQ/s2MgSURSTztKgrQ=
Subject key identifier: 21:9C:99:9F:2C:0B:CF:E2:D8:2A:7B:94:A4:BE:B3:48:01:9D:1D:72
Authority key identifier: D6:FB:E0:EB:B3:53:03:4C:BB:63:28:EB:3E:8E:3F:CD:36:0B:2F:BB
Certificate issuer: /CN=d6fbe0ebb353034cbb6328eb3e8e3fcd360b2fbb
Certificate serial: 0198496520E282C7382681B3D7593754FF15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vvg67NTA0y7YyjrPo4_zTYLL7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 01:00:20 +0000
Manifest this update: Sun 27 Jul 2025 01:00:20 +0000
Manifest next update: Mon 28 Jul 2025 01:00:20 +0000
Files and hashes: 1: 1vvg67NTA0y7YyjrPo4_zTYLL7s.crl (hash: geB08R25ErYSn2fmI7HANw2tz6ulGFgm0dc9MQcO3pc=)
2: ruk9oKCw5z4NLnJ9yGyr_UCfoEY.roa (hash: 3E2wFt0mctq9eZeC5gr+9q8G9wNZ7Xmn3ppu8VejkKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vvg67NTA0y7YyjrPo4_zTYLL7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:20:e2:82:c7:38:26:81:b3:d7:59:37:54:ff:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fbe0ebb353034cbb6328eb3e8e3fcd360b2fbb
Validity
Not Before: Jul 27 01:00:20 2025 GMT
Not After : Jul 28 01:00:20 2025 GMT
Subject: CN=219c999f2c0bcfe2d82a7b94a4beb348019d1d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:61:7b:6f:fa:be:e2:8c:03:57:92:48:1b:9e:
69:7a:d7:b6:0c:14:df:cd:67:bd:40:9c:42:3c:f3:
1e:34:c7:44:d9:3e:7d:2a:75:c5:50:bf:48:43:cc:
96:fc:09:e7:7a:f5:bb:31:b3:53:af:e6:4b:c5:87:
31:69:34:ae:46:09:cd:10:69:cd:a4:f2:a9:90:15:
67:5f:2d:37:19:67:8a:e1:d3:1e:e3:9e:b8:7b:90:
5e:1c:94:eb:dc:0c:5a:9b:58:de:53:6c:8f:5c:03:
9a:1e:bb:24:39:ea:f0:bf:ac:c1:4b:9d:9a:14:37:
31:d0:cb:d0:2b:45:fc:79:3b:97:41:39:18:8e:6b:
0a:db:d3:84:a6:a2:e3:28:f9:2f:5d:c8:19:65:e7:
c4:00:05:15:6d:c5:77:f9:f0:2b:af:6d:97:8c:0a:
61:23:af:38:5d:4d:09:45:db:4d:39:ec:f7:50:39:
01:f2:15:d3:8d:6c:9e:b5:29:95:7a:43:4c:38:47:
25:25:17:79:1a:eb:24:fc:1f:87:98:32:cf:a1:e8:
dc:70:63:53:4f:6d:e9:02:50:d1:b4:db:97:1b:59:
26:76:c2:17:25:bc:10:e4:43:b3:2d:ed:4d:08:1d:
93:fa:14:47:ce:9a:50:3b:77:f7:fc:49:12:18:39:
72:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9C:99:9F:2C:0B:CF:E2:D8:2A:7B:94:A4:BE:B3:48:01:9D:1D:72
X509v3 Authority Key Identifier:
keyid:D6:FB:E0:EB:B3:53:03:4C:BB:63:28:EB:3E:8E:3F:CD:36:0B:2F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vvg67NTA0y7YyjrPo4_zTYLL7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:3f:89:05:f0:e8:20:cf:61:99:69:41:ab:c5:8e:41:e9:79:
ba:48:4d:f7:52:21:c8:a0:0e:96:9a:ca:f1:64:23:97:2b:c4:
91:50:80:db:f1:0a:8f:2f:6d:38:e8:a6:b6:c3:77:43:e8:0f:
1c:64:61:86:e8:55:04:02:11:fc:14:ad:32:3e:22:d4:19:34:
4a:31:cc:53:4e:a8:26:6a:59:c4:51:a7:82:27:1f:7f:df:24:
c3:27:f8:f0:e1:fb:87:f5:7a:6e:4b:79:db:22:fc:06:48:e4:
49:08:ad:18:1c:5f:80:ca:ce:02:3a:02:c6:09:54:7c:22:77:
8d:72:0e:de:c6:ee:ad:3b:45:a8:f6:f3:33:de:ff:8a:a3:8b:
3a:7c:5e:d1:88:b8:2c:f2:3f:b9:8f:93:93:b0:04:e2:2a:5b:
f5:f9:32:a8:bc:7b:a3:d3:f7:9e:8c:62:e7:b3:31:bc:53:5a:
4f:f1:2c:eb:66:fa:18:af:cd:d9:a3:53:71:48:66:ef:bc:80:
ea:d8:34:28:14:06:85:59:31:35:5f:a5:e3:4a:c1:66:16:25:
6f:47:a8:18:dd:99:ad:83:4d:4c:55:e8:c5:a9:7d:49:71:1e:
f1:e0:87:ac:06:e3:c7:9a:e2:79:5d:58:15:22:4d:84:1b:a3:
7f:54:06:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:58:54 2025 by rpki-client