Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
File: 1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft (raw, json)
Hash identifier: p9himrz/339/8cNgjLLt3lK8XfBchZ+wsN+lutwxdcc=
Subject key identifier: 6B:1D:76:BC:28:75:CA:E6:EC:51:60:68:A2:8E:A3:21:A9:2A:B4:18
Authority key identifier: FA:C0:F0:DA:39:A2:2A:79:F8:0C:1F:37:9B:66:8B:90:F6:D7:47:08
Certificate issuer: /CN=fac0f0da39a22a79f80c1f379b668b90f6d74708
Certificate serial: 01984852861C36D183258BD697F28EF8B2C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 20:00:24 +0000
Manifest this update: Sat 26 Jul 2025 20:00:24 +0000
Manifest next update: Sun 27 Jul 2025 20:00:24 +0000
Files and hashes: 1: 1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl (hash: MkDK/ANY47Tzlzr6ZW3vfvVUbS1QjWtiuoe4UEEG3UE=)
2: IU1kfq4weOzN7OdLshfRhNPWBJA.roa (hash: dD5C1zuWgoU/8heEjF9DtJJhbPxUK71KXWz/l+dejRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:86:1c:36:d1:83:25:8b:d6:97:f2:8e:f8:b2:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac0f0da39a22a79f80c1f379b668b90f6d74708
Validity
Not Before: Jul 26 20:00:24 2025 GMT
Not After : Jul 27 20:00:24 2025 GMT
Subject: CN=6b1d76bc2875cae6ec516068a28ea321a92ab418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:54:ee:e6:9d:b4:90:a2:f5:25:02:2e:09:83:
cd:63:b0:74:cc:89:04:cd:a2:6f:d9:15:39:fc:ca:
b2:86:5e:ac:18:c8:a8:88:93:a6:e4:85:6f:27:ec:
78:e7:9f:83:c0:2a:2a:7d:f3:db:99:a0:18:f3:07:
37:0b:c5:f6:38:af:ef:36:9c:ae:39:b1:4d:56:0a:
ae:b7:6f:d2:14:bb:bb:e5:d3:f5:ed:39:d7:94:35:
95:1e:c9:91:23:55:09:ee:b9:1f:dd:1c:ac:d8:14:
87:49:a8:95:45:3c:29:56:a9:65:fc:e9:c3:fb:c3:
59:6d:b3:10:88:6c:ca:7e:3a:c9:b0:91:bc:dd:e7:
cd:fe:7e:ce:3e:54:c4:c6:cb:5f:61:97:ee:ab:6e:
7f:3f:15:4d:96:04:a1:b5:00:41:2d:9c:67:70:b1:
e6:d8:83:b2:64:c6:ac:99:14:e7:22:be:0d:90:16:
1c:d9:cd:4c:80:30:7c:f0:8e:10:85:b7:c6:e7:74:
62:cc:b2:33:b0:2f:31:06:4f:84:f9:ea:e4:54:66:
5f:bc:1d:49:0b:77:b9:87:e1:26:19:8d:de:2b:4e:
da:9e:ef:74:eb:10:ac:8a:ce:26:48:db:71:eb:dc:
57:67:c8:b6:c9:d2:dd:d1:5b:cc:09:8d:68:ef:42:
04:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1D:76:BC:28:75:CA:E6:EC:51:60:68:A2:8E:A3:21:A9:2A:B4:18
X509v3 Authority Key Identifier:
keyid:FA:C0:F0:DA:39:A2:2A:79:F8:0C:1F:37:9B:66:8B:90:F6:D7:47:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:b9:15:fd:dc:68:14:a4:3f:ac:d1:49:21:22:e3:b7:e4:9b:
23:02:87:86:e1:fd:68:69:a5:08:5a:e2:e9:92:0c:4b:cd:1c:
00:17:f7:b4:e6:2a:a3:71:a4:e2:62:ca:4a:31:0b:03:8c:e1:
d7:d6:a8:3d:b6:f4:33:39:c6:5f:84:4e:be:37:d2:ba:34:4f:
1b:4d:ab:5b:fd:ab:04:01:2d:36:32:95:e7:f3:70:a2:09:35:
05:0c:7a:64:4c:5b:6a:85:68:3f:07:cf:7c:16:83:a4:96:60:
82:14:eb:d2:4b:6e:d1:b9:0f:9e:dd:3d:25:74:a8:ab:0f:87:
a4:50:7e:0b:ae:a9:d6:cb:e2:5e:34:7d:a9:2d:54:53:4f:b9:
6a:e4:58:d7:3a:9f:de:bf:63:57:a8:30:db:b6:c4:47:5e:c2:
0a:f0:48:e1:19:08:0f:c1:f9:a3:07:1a:cb:f5:56:f2:a7:fd:
7f:2d:cf:4b:76:5c:72:3d:ed:ad:e4:b7:ed:25:46:ba:69:e8:
67:4a:7f:52:72:7e:56:2e:e1:c0:a4:ce:99:9d:50:99:e0:9c:
c1:46:56:89:0f:34:59:ac:bc:70:2a:6a:96:4c:2a:5c:2c:97:
fb:ce:57:77:bd:87:87:67:53:fe:e2:be:26:9a:39:d6:3b:00:
3e:09:d7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:20:08 2025 by rpki-client