Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
File: 1NF5zknld2uSyGwmwgsLQ_0KbLY.mft (raw, json)
Hash identifier: hyi9ZzG30XAYu9yDFAYBHSi2ZSbCkjIYuW8qPEERHz4=
Subject key identifier: F5:14:12:51:E4:AC:BE:83:53:C4:D2:1C:4B:39:9C:1D:FF:20:E5:2E
Authority key identifier: D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
Certificate issuer: /CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Certificate serial: 019849D33FBA22B9B4132C907771ADE0F84A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 03:00:37 +0000
Manifest this update: Sun 27 Jul 2025 03:00:37 +0000
Manifest next update: Mon 28 Jul 2025 03:00:37 +0000
Files and hashes: 1: 1NF5zknld2uSyGwmwgsLQ_0KbLY.crl (hash: wl1XABaHXVXjnTl0loxf9CEj27z1+ReRvL5PizJPuBg=)
2: BrC95qegfOa0TgThzqIEYO52pE4.roa (hash: NQcrpLx6LISXQiUt+m/hCop1708krlvAotMAH3yT+Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:3f:ba:22:b9:b4:13:2c:90:77:71:ad:e0:f8:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Validity
Not Before: Jul 27 03:00:37 2025 GMT
Not After : Jul 28 03:00:37 2025 GMT
Subject: CN=f5141251e4acbe8353c4d21c4b399c1dff20e52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7c:35:b6:04:15:ce:50:55:c7:89:11:8b:6b:
fc:f1:3c:54:04:6b:ce:38:8d:5f:9b:87:9a:2b:1d:
3d:a7:cc:a3:52:cd:71:79:2e:a5:1f:3b:57:e6:61:
51:cf:66:00:17:ac:85:d4:f7:19:14:e6:75:7d:28:
8c:33:60:7c:05:64:47:84:87:c4:a8:9b:e4:39:e8:
e5:d2:e1:3f:8a:42:45:29:18:b0:9b:de:97:c1:05:
13:75:68:cf:78:cd:6e:83:a8:3b:a8:5f:7b:0b:94:
9a:da:83:57:74:c9:f8:0f:a2:f0:32:fa:55:a4:8f:
02:34:ac:05:48:15:7e:a9:21:34:9d:2a:95:88:5a:
d7:36:79:80:34:44:99:fe:be:04:c3:bc:cb:f8:6f:
b7:93:bf:bf:15:b2:83:ff:3d:ee:37:a5:1f:7b:9e:
30:8b:de:71:80:3b:73:d0:bc:aa:1f:65:81:66:82:
3f:b1:1a:51:e2:5a:49:cd:4a:56:fc:1e:e0:c0:88:
9b:18:32:4b:e7:1a:cb:a5:28:07:03:b9:98:df:29:
84:94:bb:33:2a:03:7c:7a:9a:95:61:75:6c:1b:57:
ec:e3:29:00:32:59:b9:b6:98:f0:b2:56:9d:ac:95:
c4:10:5a:b0:14:2a:f2:9f:87:12:62:f9:52:27:b4:
de:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:14:12:51:E4:AC:BE:83:53:C4:D2:1C:4B:39:9C:1D:FF:20:E5:2E
X509v3 Authority Key Identifier:
keyid:D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:18:37:77:a8:cc:97:0a:e9:f2:7e:a0:27:26:02:6f:25:cc:
2d:1f:92:f3:df:93:f8:86:44:9a:6f:3f:da:61:67:74:3e:63:
d8:95:dc:59:83:57:2b:94:4c:42:9e:d4:d1:9d:2b:24:86:98:
81:39:1b:d5:a6:1f:f8:b4:ab:e8:c4:0a:f4:74:3b:83:75:80:
ee:8f:4d:dd:72:4a:5d:cb:36:6b:e3:5c:59:15:a7:2e:cb:27:
db:74:58:40:b0:56:27:4e:40:ae:10:a4:4c:45:8a:1d:1e:03:
fb:fd:1b:a5:50:b2:e5:6b:30:70:da:11:e5:46:7b:da:c3:0b:
a9:73:b6:c1:cc:e7:93:de:02:bf:cd:a6:d8:53:52:66:ac:ac:
c1:85:92:94:a5:aa:c8:c1:8b:66:10:a3:33:e7:98:99:e7:54:
a5:cb:1a:3f:5e:f6:2a:32:ba:e6:b9:7e:5b:26:d3:c0:3d:6b:
c4:4c:22:08:17:fb:19:03:6d:e6:9c:57:0d:93:7a:99:4a:c6:
36:71:e4:2b:ec:56:8a:0e:ca:29:bc:c4:03:32:5b:c3:88:bc:
d8:c0:b7:b4:93:96:a4:d5:a8:8c:c4:a2:8a:c6:da:2b:f6:9b:
05:a5:bb:86:ba:84:72:1e:63:02:93:7c:5b:88:f2:34:6c:85:
87:f8:b7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:35:27 2025 by rpki-client