Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/1-tfhSiYlYBkcZldpmOnGm4nDwTY.mft
File: 1-tfhSiYlYBkcZldpmOnGm4nDwTY.mft (raw, json)
Hash identifier: KUTYtbgk5O5VJ+wjbqGvJI358jDiVsj7WAWHP4ZOgLI=
Subject key identifier: FB:74:12:51:CC:6D:13:1D:44:9B:90:7E:8B:24:81:B1:25:02:7C:51
Authority key identifier: FA:D7:E1:4A:26:25:60:19:1C:66:57:69:98:E9:C6:9B:89:C3:C1:36
Certificate issuer: /CN=fad7e14a262560191c66576998e9c69b89c3c136
Certificate serial: 01984A4180744594292D73A22F3DCB06B8EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tfhSiYlYBkcZldpmOnGm4nDwTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/1-tfhSiYlYBkcZldpmOnGm4nDwTY.mft
Manifest number: 0A91
Signing time: Sun 27 Jul 2025 05:01:03 +0000
Manifest this update: Sun 27 Jul 2025 05:01:03 +0000
Manifest next update: Mon 28 Jul 2025 05:01:03 +0000
Files and hashes: 1: 1-tfhSiYlYBkcZldpmOnGm4nDwTY.crl (hash: 8tu2kdatfl/NTtBUAIydSnxT46dkw49IKsFLmiHFCpY=)
2: ELYZJGHcWhKUiY7ABJ-PY-iSroQ.roa (hash: XKv64QH5ODk1+MXzK56Lue/Lun/NuUmKCWEmKamL9J8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/1-tfhSiYlYBkcZldpmOnGm4nDwTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/1-tfhSiYlYBkcZldpmOnGm4nDwTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tfhSiYlYBkcZldpmOnGm4nDwTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:80:74:45:94:29:2d:73:a2:2f:3d:cb:06:b8:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad7e14a262560191c66576998e9c69b89c3c136
Validity
Not Before: Jul 27 05:01:03 2025 GMT
Not After : Jul 28 05:01:03 2025 GMT
Subject: CN=fb741251cc6d131d449b907e8b2481b125027c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:8b:94:af:1b:e2:cf:74:2b:44:81:40:f6:5b:
e0:f0:fe:3f:38:b5:9d:f7:64:99:1d:e1:3d:bb:cc:
69:30:3a:ea:07:7e:79:93:8c:96:c1:2b:ee:89:e2:
6b:8c:b7:77:a5:6c:12:70:61:a6:cf:06:c5:1b:d7:
e4:3c:c5:c8:14:33:d0:c1:1d:6c:66:7e:45:ac:27:
da:10:09:2b:2e:ed:55:95:5e:af:f7:fb:9e:89:e9:
70:a3:f4:eb:dc:00:68:27:36:cd:c2:46:7c:98:42:
2b:64:85:4a:60:5f:4e:f1:f8:ea:cc:43:7d:ae:08:
20:ae:9e:6c:f6:b2:6d:35:46:9b:5e:44:cd:d8:3a:
49:07:e4:e8:96:a7:72:d0:16:cf:a8:15:e9:20:3c:
9a:0d:c4:85:6d:f6:62:eb:c6:86:11:8b:84:6d:d3:
b3:e9:c1:e5:70:a9:9b:33:02:69:c6:9f:7b:96:1f:
90:cf:61:b3:65:fe:e8:90:ca:2e:66:b2:1a:2a:5c:
01:99:b2:0e:01:46:73:ce:b9:41:86:cf:de:b5:78:
cd:5a:fd:27:25:33:9c:04:32:ef:41:84:3c:06:a5:
82:06:ee:32:d8:96:26:7c:1d:32:ae:56:1f:f0:0c:
a8:4c:87:17:4b:16:d0:f5:dc:c4:36:8c:dd:6e:13:
4c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:74:12:51:CC:6D:13:1D:44:9B:90:7E:8B:24:81:B1:25:02:7C:51
X509v3 Authority Key Identifier:
keyid:FA:D7:E1:4A:26:25:60:19:1C:66:57:69:98:E9:C6:9B:89:C3:C1:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tfhSiYlYBkcZldpmOnGm4nDwTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/1-tfhSiYlYBkcZldpmOnGm4nDwTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/1-tfhSiYlYBkcZldpmOnGm4nDwTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a5:eb:89:ac:fc:77:64:c0:96:c3:76:db:f4:f0:3a:cf:40:
c8:9e:18:b1:94:79:4b:3f:4d:8e:2f:71:ef:10:73:51:b1:8e:
2b:a3:1e:70:ae:48:f4:cc:6b:93:f2:aa:05:a2:ae:09:48:2c:
a1:dc:60:89:b2:db:e0:09:77:05:c6:76:cd:cb:bc:10:a1:6c:
f8:5b:af:4c:7b:f6:0b:ab:ad:72:c5:3b:ea:e3:e8:aa:0b:e3:
2b:b8:5e:fe:fe:0f:dd:b5:7d:68:28:ab:a5:3d:2f:f0:fa:a7:
4e:22:f3:2a:97:f0:61:fe:5d:8d:f6:96:69:5c:ac:c8:d5:ed:
af:a1:e5:6a:ff:a0:a3:fc:4b:e7:ec:cc:7c:51:88:4d:a8:ba:
8d:57:86:b6:40:11:63:15:b1:5b:b7:3e:c7:02:06:cc:58:67:
de:9b:88:13:8c:98:f8:ea:24:24:4a:91:67:0e:a6:0f:dd:29:
48:d8:df:c2:66:b4:8b:df:2f:8b:bf:53:84:f3:20:37:90:01:
74:4b:2e:d5:42:02:2d:8d:d9:e3:bf:79:d4:44:fb:97:3d:12:
0a:12:0a:3e:1b:0a:ef:8e:31:f5:e3:b4:26:14:d2:29:4c:44:
2f:fe:f8:50:e5:1f:02:c8:3e:e7:da:29:56:94:3e:62:c2:47:
63:a2:13:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:22:43 2025 by rpki-client