Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
File: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft (raw, json)
Hash identifier: Mol+r3qeqIU+U6jSxMssGiHRDhOSRQbWsl8YxZqWYcs=
Subject key identifier: C6:28:98:BC:AA:E3:80:96:7D:68:B6:4D:1E:9B:33:59:74:2B:D4:8D
Authority key identifier: FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34
Certificate issuer: /CN=fa307821230e7ba81a4d471a591e78ea759c6934
Certificate serial: 019848C06AF0167088649E2BABAEB7171E6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
Manifest number: 1128
Signing time: Sat 26 Jul 2025 22:00:26 +0000
Manifest this update: Sat 26 Jul 2025 22:00:26 +0000
Manifest next update: Sun 27 Jul 2025 22:00:26 +0000
Files and hashes: 1: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl (hash: vXmommysa2hzU6898pTI4T+SY/1CXQ4FkcaruaLNnRY=)
2: zwZQF0vycCjVTXKGPdvngCC8DiM.roa (hash: 3IwNNQnob+DFL0Pb8HdxIF5jocGgq3KKZc4IEORySTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:6a:f0:16:70:88:64:9e:2b:ab:ae:b7:17:1e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa307821230e7ba81a4d471a591e78ea759c6934
Validity
Not Before: Jul 26 22:00:26 2025 GMT
Not After : Jul 27 22:00:26 2025 GMT
Subject: CN=c62898bcaae380967d68b64d1e9b3359742bd48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e7:94:43:16:48:16:7c:74:26:59:20:cb:cc:
51:84:6c:54:7b:67:e2:e6:9d:eb:e4:6e:76:71:4d:
bb:74:42:05:82:7f:c4:24:32:77:c1:4a:1c:93:d0:
11:e4:40:55:8e:2f:61:e3:40:cd:c4:89:4e:11:a3:
11:ad:33:c2:ef:af:a5:66:55:df:72:69:29:7b:56:
d0:8c:89:5f:48:60:29:36:8d:eb:94:d4:fc:90:f1:
13:59:9e:c7:0c:8a:9a:9f:2c:c8:47:69:2a:97:86:
da:0b:69:5e:dd:ab:61:56:3b:cf:5b:b6:48:ae:fa:
f9:d0:b3:c1:01:5c:51:3f:6d:df:f5:66:48:da:80:
e4:a4:cb:a0:55:5a:ed:4a:d7:e3:7d:4c:74:73:2b:
d7:aa:c0:d6:9b:57:77:58:77:7a:1d:0f:5a:f7:ae:
56:9f:89:de:7f:f3:e4:ce:65:de:6d:c9:64:f0:d8:
73:b2:e5:25:bf:0a:65:92:5e:b8:61:69:e5:3e:98:
5f:4b:58:e4:d1:6b:2d:90:70:61:12:7e:16:db:d0:
d9:cb:3d:71:ac:e6:1a:67:3e:2d:9b:bc:5e:00:30:
25:b9:60:8d:6f:69:8c:8e:36:0d:c9:63:b4:38:b6:
d3:86:b0:55:af:b4:79:c0:bd:13:82:1d:fe:d3:3f:
1b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:28:98:BC:AA:E3:80:96:7D:68:B6:4D:1E:9B:33:59:74:2B:D4:8D
X509v3 Authority Key Identifier:
keyid:FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:1b:fc:df:1d:61:af:37:73:3c:5b:40:46:e2:48:e4:d0:ae:
4a:c0:a9:b6:e9:4f:fb:b2:53:25:b2:a8:d1:41:71:0d:39:33:
42:59:5c:c7:f9:53:80:91:76:0a:a1:25:7f:0f:f1:85:e5:fc:
81:2b:37:f7:24:3a:b0:53:17:e4:8c:77:f1:d6:d8:c1:8b:5e:
21:0a:05:4f:12:53:76:cc:48:b3:1d:37:3b:b7:9c:82:a4:7d:
59:ab:1a:0d:b8:4e:06:12:d8:98:d8:30:0c:86:46:7a:9f:98:
15:43:c1:5a:ee:db:74:58:aa:8c:bf:61:1b:12:fb:a2:ea:7f:
0c:9f:c2:9d:2a:85:e0:8c:c4:68:1b:8e:a6:5a:d6:33:da:f5:
f8:9c:a1:37:e3:78:05:8c:93:62:16:2f:47:2b:fb:93:7e:ca:
25:bc:19:7f:32:ae:d0:e4:45:0f:6c:cf:af:04:a8:d0:8e:42:
f1:d8:c1:f3:dc:6c:73:1d:7b:37:71:f6:e4:d4:6d:86:f8:9b:
2e:28:74:ac:de:46:69:02:ce:f8:55:f4:3c:30:aa:19:02:c6:
b5:c1:63:f1:af:45:42:ca:9c:2e:5d:a9:72:00:0a:dd:c1:93:
c1:53:e1:c8:3d:04:da:a0:d4:fd:90:1f:07:66:d4:dc:63:8d:
f4:f8:7e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:09:14 2025 by rpki-client