Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
File: 1fBlyL23j_KU98VFSXHb-r-2wYQ.mft (raw, json)
Hash identifier: drZVg4CjXm/qCubWmD8CsNghoI3Nhm+t2ObE3z8T2xw=
Subject key identifier: 8D:C4:80:AD:BF:80:4F:22:62:04:5B:55:53:D6:AA:46:81:8D:A2:5F
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial: 01985F48E190920345353CED173A6BC71CA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
Manifest number: 1106
Signing time: Thu 31 Jul 2025 07:01:08 +0000
Manifest this update: Thu 31 Jul 2025 07:01:08 +0000
Manifest next update: Fri 01 Aug 2025 07:01:08 +0000
Files and hashes: 1: 1fBlyL23j_KU98VFSXHb-r-2wYQ.crl (hash: KPlVlBdoIJLrEzvK4dZdg+dmdTX65HYwh/yFIbkq4Pw=)
2: m2QQfUK06vFb9PgOjuRKEEy3_-M.roa (hash: r2c9NdRmbfXSJX1yrfGNpKRrDXEdWsNsnb45Hs3S/N0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Aug 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5f:48:e1:90:92:03:45:35:3c:ed:17:3a:6b:c7:1c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Validity
Not Before: Jul 31 07:01:08 2025 GMT
Not After : Aug 1 07:01:08 2025 GMT
Subject: CN=8dc480adbf804f2262045b5553d6aa46818da25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c6:0d:76:aa:f1:54:75:ea:6a:a8:3b:95:75:
a0:92:7a:8b:20:22:09:b6:f5:80:09:b7:96:f8:99:
b9:fa:6b:37:3a:2f:93:88:c4:2b:b4:b4:67:aa:fe:
a6:29:1c:8d:3f:f6:6b:49:12:e1:e1:e0:a8:41:a1:
b5:ef:e3:78:77:46:fc:69:db:b5:01:95:93:a6:94:
bf:0c:02:33:15:87:a8:73:5b:1f:60:b2:38:82:fe:
bd:1e:a8:a9:d3:32:b2:d5:a8:0a:ea:04:12:75:3a:
d9:f3:62:03:5d:f3:be:91:c0:28:99:ec:df:3e:3c:
5c:19:94:54:9a:9a:89:30:c0:40:93:9f:23:cc:f7:
f9:00:31:69:b6:8a:8e:70:5c:12:90:8e:22:80:24:
66:f8:29:0b:98:1f:28:fb:09:89:2f:37:60:91:e9:
fd:82:da:b7:c2:b4:b7:b1:ba:56:15:fb:91:12:9e:
17:c3:58:60:10:c6:5b:33:a5:6f:51:fe:f9:68:0d:
ba:fe:17:24:10:be:c8:2e:0c:ee:dc:da:98:72:70:
03:8b:96:5c:49:49:38:c8:5e:69:ca:fc:5f:50:e0:
4a:8a:5c:c1:7b:5b:1b:da:73:30:49:0a:7d:d3:bc:
5c:c5:f3:82:4d:74:07:2b:01:c0:b6:df:56:97:5a:
71:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C4:80:AD:BF:80:4F:22:62:04:5B:55:53:D6:AA:46:81:8D:A2:5F
X509v3 Authority Key Identifier:
keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:cc:a1:b8:00:64:37:30:2e:17:3c:60:15:c6:df:c8:b8:13:
b1:da:c1:31:61:74:f6:38:43:e8:22:47:b2:da:6e:b5:c3:75:
b2:68:b6:fd:95:5f:ae:f8:21:aa:06:db:39:1b:01:a4:ad:0b:
ab:d1:5a:08:b7:12:08:6d:59:f8:6e:7d:d2:8b:97:83:08:10:
27:37:c1:17:e5:ff:35:e2:1d:b0:27:7b:c7:4f:a6:aa:06:90:
40:71:49:1f:21:5b:d3:2d:9c:8a:e7:ec:2f:72:38:bc:df:12:
ec:04:17:a0:fc:53:2b:df:0f:d9:e2:86:74:4e:fa:c8:06:a9:
41:39:69:8d:05:e3:72:78:d7:ce:37:f0:41:cc:1e:33:b0:75:
b4:3a:f3:12:95:85:89:6b:d2:57:56:b4:a1:34:c8:60:8b:47:
9e:dd:1b:59:00:d7:4c:c9:da:e7:b1:16:0b:e8:12:71:58:9f:
fb:f3:2a:ad:6a:cf:be:cd:38:6d:d2:69:25:8a:44:5d:a1:93:
99:9e:c2:16:18:59:e4:63:0e:ea:c2:61:b1:6c:f4:22:7c:39:
b9:38:42:24:ac:23:c4:08:41:14:ca:7d:cc:ce:ad:1e:8c:88:
65:1a:b7:a4:7d:7f:3a:da:5a:8c:93:e4:24:f1:dc:c2:c7:a1:
75:de:5c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 08:39:28 2025 by rpki-client