Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
File: 1-_zUUVtJMDkhZ1jec45PGujjIkw.mft (raw, json)
Hash identifier: Mx4HQ2gthI4t9E25/PePwGudgfeOSYnsAqsLzv/RvBs=
Subject key identifier: 6F:35:1E:4E:61:AA:E3:21:12:4D:D9:2C:D5:9A:92:F1:B6:9C:DD:45
Authority key identifier: FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C
Certificate issuer: /CN=fbfcd4515b493039216758de738e4f1ae8e3224c
Certificate serial: 01984B8AA50BB7BD6BA585359FE7733AE960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
Manifest number: 1024
Signing time: Sun 27 Jul 2025 11:00:33 +0000
Manifest this update: Sun 27 Jul 2025 11:00:33 +0000
Manifest next update: Mon 28 Jul 2025 11:00:33 +0000
Files and hashes: 1: 1-_zUUVtJMDkhZ1jec45PGujjIkw.crl (hash: 9qqeLzVIfwS7lXKkGmqCMYMgtte/pqveTfou5Q4IZPg=)
2: eWonEOCqO1vviTWWC4HukImo8zA.roa (hash: sMT1P9/4Uirj38sOSO6BfhAmJiAf2rmN1xaNoG1qFVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:a5:0b:b7:bd:6b:a5:85:35:9f:e7:73:3a:e9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbfcd4515b493039216758de738e4f1ae8e3224c
Validity
Not Before: Jul 27 11:00:33 2025 GMT
Not After : Jul 28 11:00:33 2025 GMT
Subject: CN=6f351e4e61aae321124dd92cd59a92f1b69cdd45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3c:1d:aa:5b:03:1e:d2:3b:7a:65:bb:e5:3d:
5f:12:a0:de:4b:95:1b:c8:61:8d:ed:b2:55:4a:90:
80:d8:a2:fd:5b:0f:73:83:bb:e0:ac:09:fb:05:64:
aa:90:9e:98:93:03:c0:7e:8e:ac:09:0d:17:82:c0:
7b:db:bb:88:e0:13:a2:f9:32:b8:ed:b9:2b:9f:5a:
65:3c:62:81:73:10:35:29:7e:a3:61:cc:f2:e3:48:
f7:a9:08:21:66:60:4a:bc:bd:0f:a9:a1:e0:a5:2c:
e9:dd:a2:e1:95:f3:7b:33:49:cb:a5:9b:77:f0:cd:
a5:e5:6d:d3:b0:4b:c1:00:2d:bf:2f:a4:98:82:bb:
40:d3:1d:35:c8:77:65:20:5b:c7:7c:37:e2:2e:53:
cd:6e:0e:80:0d:78:8e:e1:58:e2:9c:41:65:42:27:
c8:fd:5d:ea:e9:a6:60:36:78:70:aa:6e:e0:8e:2f:
65:6a:fc:50:db:42:fa:a8:e1:fe:19:93:0f:93:e5:
cd:11:a4:d8:57:b1:47:be:b2:31:f8:e9:12:97:59:
85:2e:9d:d0:3e:b9:f8:d6:d0:fa:51:f6:eb:7c:d8:
f0:9c:c3:10:d1:44:22:dd:42:b2:9b:bd:69:23:5d:
47:d1:4c:12:ee:5e:0e:7d:16:16:4b:db:8d:6f:53:
2a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:35:1E:4E:61:AA:E3:21:12:4D:D9:2C:D5:9A:92:F1:B6:9C:DD:45
X509v3 Authority Key Identifier:
keyid:FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c8:c7:2c:3e:f2:10:54:3b:bf:4f:1e:95:84:af:44:b2:fe:
6b:84:a1:70:b5:0c:c4:2f:44:cc:cb:e9:e5:7d:00:32:98:36:
7f:0a:ff:b0:eb:28:9b:e8:7e:41:d2:d8:f3:17:0b:53:e2:41:
6a:3f:64:8f:7d:a6:4d:c0:da:5b:a9:2c:e7:6c:f6:f8:b7:44:
7d:da:24:e9:c9:ed:99:2f:41:d4:f4:3e:ad:bd:cf:b6:d0:6d:
a8:98:1f:e5:af:01:76:a8:97:cd:a3:7d:1e:5b:e3:41:21:f4:
e6:63:10:43:dd:d0:c8:bc:02:37:75:f3:f8:b4:03:15:63:d9:
c5:4b:5c:a9:8f:bd:77:a0:01:82:91:f0:2f:54:87:b3:bd:bf:
78:85:f9:ea:57:8d:45:d0:ea:ed:a4:1a:9e:39:0a:82:b5:40:
54:cb:07:62:4d:a0:3f:92:65:62:41:8b:58:e8:34:1b:29:a3:
be:5d:ef:f9:48:d9:b0:ae:a9:04:77:ce:db:5e:d4:9b:03:c4:
15:aa:53:bc:62:23:e1:20:cc:9d:c1:c9:fa:fe:a2:cb:33:c5:
17:31:61:b7:29:fe:8d:da:e8:27:17:fa:2d:8e:d0:43:64:a0:
35:99:9b:b1:c5:12:75:33:15:ef:2d:60:14:6a:4a:40:17:3e:
46:9a:28:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:21:30 2025 by rpki-client