Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
File: 1-83RF-rHV7b485QoZTrhJQjMaYk.mft (raw, json)
Hash identifier: ezoJdGxP4I1luSAp3SwEZzpHKnmC6KVW2baESSit4aQ=
Subject key identifier: 67:19:CC:C5:6C:E4:C8:D7:E1:84:A5:FD:60:C4:61:67:D0:66:6C:8C
Authority key identifier: FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89
Certificate issuer: /CN=fbcdd117eac757b6f8f39428653ae12508cc6989
Certificate serial: 01984B54D491CE3A1C8F81226B1AD8C7DF9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
Manifest number: 141D
Signing time: Sun 27 Jul 2025 10:01:47 +0000
Manifest this update: Sun 27 Jul 2025 10:01:47 +0000
Manifest next update: Mon 28 Jul 2025 10:01:47 +0000
Files and hashes: 1: 1-83RF-rHV7b485QoZTrhJQjMaYk.crl (hash: 7x5r7nFVqRE/2ntmmTp4m1R8RcGjriGL/QPxMNzAi4I=)
2: HLsqpW_Z-fbGO_aC3llZw59d0HA.roa (hash: zNqiqKUQYXwQHeg5g/DJfaZuunabikgAw4lZ3lENgDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:d4:91:ce:3a:1c:8f:81:22:6b:1a:d8:c7:df:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcdd117eac757b6f8f39428653ae12508cc6989
Validity
Not Before: Jul 27 10:01:47 2025 GMT
Not After : Jul 28 10:01:47 2025 GMT
Subject: CN=6719ccc56ce4c8d7e184a5fd60c46167d0666c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:16:59:7f:a0:72:06:63:45:5b:3d:fc:ea:bd:
0b:5e:dd:2b:52:41:74:3d:b0:90:d9:f8:8e:39:48:
52:00:99:69:39:23:a3:9e:31:a4:c0:ee:12:ac:19:
ba:e3:d5:e6:43:32:d1:e6:07:71:d1:39:e5:b1:b8:
2e:c3:c7:4a:be:3b:8a:2c:32:0d:e3:66:54:68:91:
25:d8:44:60:2f:47:7b:e0:0a:c8:be:e3:76:ba:8d:
b0:22:79:c8:10:69:1e:4a:89:ec:f8:9c:81:ad:1e:
69:c1:a1:1b:fe:6a:ce:f2:08:81:d9:b1:1b:8c:07:
71:c9:df:4d:0f:90:d5:b0:ff:2c:de:43:8b:6e:b6:
b4:af:83:11:93:c3:95:fa:d3:64:0b:01:67:81:49:
57:b4:8c:54:37:01:30:aa:14:58:84:de:96:03:4d:
f9:90:bf:1a:8e:a8:1b:53:e9:a3:7d:8f:06:d9:5f:
fd:d6:e6:00:df:11:b2:5e:fc:96:40:eb:0a:a6:2b:
53:b0:43:64:a1:12:f7:c1:98:3e:fc:d4:88:6c:f0:
10:b7:de:28:d8:95:dc:1c:5d:81:69:09:35:6e:0c:
e4:6f:75:c8:65:df:bc:9b:60:c2:ea:a5:8c:96:8b:
f8:20:a3:fe:c7:16:27:b4:c5:be:fd:8c:b5:33:79:
8c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:19:CC:C5:6C:E4:C8:D7:E1:84:A5:FD:60:C4:61:67:D0:66:6C:8C
X509v3 Authority Key Identifier:
keyid:FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:36:c1:2a:88:69:eb:45:e4:69:57:a0:7e:92:55:55:02:a5:
cf:1d:0a:2f:b2:df:d8:8e:d8:d1:e2:e3:c9:9b:1a:7d:4c:d4:
12:f2:e4:62:ad:20:76:f4:05:b5:1e:05:8c:ca:3d:85:8b:15:
ba:1a:c2:58:b6:ae:42:7a:50:12:79:83:b6:dd:5a:39:86:ff:
8d:33:9e:c3:db:b3:15:6b:65:ff:c1:43:91:4f:2c:3b:e0:6d:
db:3c:ea:c7:85:a6:f7:fe:d8:78:a9:a5:ef:9a:3c:f3:03:e4:
a9:5d:1f:25:18:46:6d:94:4c:c1:1d:ef:32:e6:21:7b:ff:de:
bc:10:70:0d:6b:c1:23:50:df:f2:d2:9c:72:96:55:1b:41:bb:
20:2b:79:55:50:4c:2f:c3:94:6e:20:a1:67:55:94:9d:37:50:
7b:43:b2:f8:d0:ca:6e:be:d4:2b:aa:20:0f:2c:e4:19:4e:51:
8d:6d:23:05:31:fd:d2:bc:25:fd:af:0a:7c:60:17:6f:76:e7:
72:20:e8:eb:79:d6:53:88:1a:fb:a5:03:ba:bc:4f:92:9c:1a:
cf:30:65:7a:90:2e:38:a6:db:60:ae:10:d3:0e:9f:79:98:08:
5e:e8:cf:de:b3:de:e0:57:9d:7d:58:3d:a7:9d:90:0d:b5:07:
c9:4c:69:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:31:25 2025 by rpki-client