
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
File: 1-A4BfPFxFRmw_59lhYxJGy-l1As.mft (raw, json)
Hash identifier: ce1R6xLtaXvzXxuIRCYgUUOSzK0Ain8ncx+/4dZeM5U=
Subject key identifier: FC:4C:D5:F3:8A:23:1F:35:F6:AD:D8:D8:24:64:9F:1A:D1:57:66:6B
Authority key identifier: F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
Certificate issuer: /CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Certificate serial: 019845F6B0F61E55F914A80404926E39FBB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
Manifest number: 11D2
Signing time: Sat 26 Jul 2025 09:00:51 +0000
Manifest this update: Sat 26 Jul 2025 09:00:51 +0000
Manifest next update: Sun 27 Jul 2025 09:00:51 +0000
Files and hashes: 1: 0cg-ABQ5F07wo1zUc9k0K5Ly8to.roa (hash: Rkj4lRwYBqE7QsZIcMHOzWOT71EQLWq7kKtekOL+dc8=)
2: 1-A4BfPFxFRmw_59lhYxJGy-l1As.crl (hash: DOgYsXhKG9j9e3/gpkUJS+6Rz0nGD2a59J46J628GmM=)
3: BQSRgsrnX8JnjaCE0pOBIpQ5ebc.roa (hash: h3wwdJrizfCgG4S/e0JuPLlbVsXDFB1J+2NlIEyZmsM=)
4: TntDV8H0cxrOGkDYWiJ5vwYXM6U.roa (hash: U/d+Fv7E47cWBLg/rWP1IbXjQkA8lalBfzHWx2kVZS4=)
5: Wem4R1HhiLTH9JF3d-SZOmy37u0.roa (hash: 7MdQgNFI/gw33JrzBz7PAxkDLsGz7qoxKurvzPVxBTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:b0:f6:1e:55:f9:14:a8:04:04:92:6e:39:fb:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Validity
Not Before: Jul 26 09:00:51 2025 GMT
Not After : Jul 27 09:00:51 2025 GMT
Subject: CN=fc4cd5f38a231f35f6add8d824649f1ad157666b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:99:41:52:1d:ad:21:07:b4:6c:cf:61:d9:
c6:9a:fe:06:66:fd:cd:6e:38:42:2c:d4:f9:23:16:
d6:8a:86:78:ed:e8:b9:94:c1:ff:78:e2:0b:e2:ce:
5b:fa:98:fb:d7:3e:54:1a:85:f0:f8:e9:03:6d:41:
f3:db:9b:fc:43:94:94:d0:e3:63:c6:24:19:87:ac:
68:15:38:27:22:13:2c:aa:92:eb:d2:0e:10:67:63:
27:26:51:3b:04:4b:3a:aa:9b:35:d5:91:33:0f:25:
ca:55:df:6c:46:0a:20:b6:de:b2:96:0c:6e:58:19:
7b:95:f0:02:d0:95:22:00:c8:af:54:ae:b4:70:84:
43:51:45:13:34:57:2f:33:61:16:36:28:17:66:6f:
be:87:29:fe:47:4f:56:47:61:88:98:99:f3:78:26:
21:50:3f:a3:ff:17:ea:e0:04:55:83:78:ce:31:62:
89:b6:cd:18:30:3a:d5:ba:7c:4f:57:f3:1e:00:93:
57:d1:f7:d6:1f:80:f3:95:a1:56:99:7a:a7:2e:ed:
c8:2d:e9:8a:ff:07:c2:bc:f5:b1:0c:e7:0c:f8:ea:
a9:ff:42:52:23:20:b6:63:18:75:16:7d:47:ee:28:
98:e3:2d:4c:d5:44:77:83:d1:5a:09:22:30:c9:d9:
30:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4C:D5:F3:8A:23:1F:35:F6:AD:D8:D8:24:64:9F:1A:D1:57:66:6B
X509v3 Authority Key Identifier:
keyid:F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b2:ca:7b:21:65:f5:18:d1:a2:81:69:3c:bf:ed:90:3a:46:
ed:70:2e:c9:cb:9b:2f:1e:54:85:ab:4d:ca:2c:0a:07:6c:2c:
62:a3:24:d9:12:85:d2:43:7d:eb:ad:69:8f:f7:bf:b8:b6:63:
58:72:71:30:93:2b:69:52:1e:be:64:e2:a2:d2:92:c3:1d:03:
0e:ed:57:7b:de:20:dc:5e:37:59:51:1b:1d:69:09:f9:73:db:
40:a9:f6:e0:9d:20:3c:e1:e5:ba:8f:a2:17:5b:0f:67:21:35:
bb:9f:37:d0:1f:a9:81:27:25:88:24:25:40:83:34:5f:e3:26:
4a:fb:81:7e:29:11:4c:4b:15:d4:b0:cf:c3:08:c1:f2:0e:83:
8f:83:a4:6b:d1:dc:13:06:6a:e4:b1:73:19:b0:57:3c:51:a0:
8b:b1:e1:6b:e6:f5:86:15:64:0a:05:7b:06:5a:a9:62:4e:e2:
f1:41:54:07:2b:cf:b6:ce:ee:66:41:73:da:0c:53:8f:94:f8:
40:6b:03:02:84:1f:12:bb:6e:07:1a:a0:4d:25:b8:a6:ce:28:
85:59:35:d6:10:28:c7:51:d3:62:49:a9:15:1d:aa:0d:11:46:
16:88:04:b4:b1:75:91:ba:11:60:ba:60:48:5a:dc:44:5f:f3:
55:ba:82:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:54:51 2025 by rpki-client