Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
File: 1vgHZgvyzZKu45FEKlNDr3GMGMc.mft (raw, json)
Hash identifier: VfnUNevPf1/Cy5wfC5q1UhkXnGy4QsuoY3r/OMqrzec=
Subject key identifier: 89:4A:56:C4:4D:52:2C:8F:64:87:CC:A4:A6:1D:26:99:42:94:B2:FE
Authority key identifier: D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7
Certificate issuer: /CN=d6f807660bf2cd92aee391442a5343af718c18c7
Certificate serial: 0198469B5708CFEBDDB9F1F412C391571EE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
Manifest number: 1592
Signing time: Sat 26 Jul 2025 12:00:42 +0000
Manifest this update: Sat 26 Jul 2025 12:00:42 +0000
Manifest next update: Sun 27 Jul 2025 12:00:42 +0000
Files and hashes: 1: 1vgHZgvyzZKu45FEKlNDr3GMGMc.crl (hash: 9F3a5ycGOFgYStJK7GWSWdqHNGuLFmib6OLulhp5Mc4=)
2: KWwJmTARHeAHpXQEJKYr4FNXsos.roa (hash: 1063ws7p1tPR9qPGeDgdtnc+pragLeBe3JdEiKbe844=)
3: axQ4QcGTmWCvhs7XYE0LSyL0bR8.roa (hash: jnmoj5c8hE+D/ASpXs+Aut4m2SL0NpIhMDG7HImlpO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:57:08:cf:eb:dd:b9:f1:f4:12:c3:91:57:1e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f807660bf2cd92aee391442a5343af718c18c7
Validity
Not Before: Jul 26 12:00:42 2025 GMT
Not After : Jul 27 12:00:42 2025 GMT
Subject: CN=894a56c44d522c8f6487cca4a61d26994294b2fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5c:41:7b:65:59:dd:c8:53:af:f9:a6:ab:44:
21:55:64:2c:2b:50:c0:1a:f9:5e:59:c0:b4:1d:f6:
e6:a8:5b:75:1d:54:ae:b9:9b:e3:cc:fe:68:bb:44:
51:b4:da:3d:a4:4f:d4:34:88:96:5e:94:c3:ed:1a:
5a:6e:b4:28:eb:6e:77:a4:03:b2:85:00:d7:e1:5b:
a0:f7:fe:8f:b9:b8:24:c7:7a:61:cf:e5:7f:55:e7:
bd:96:12:69:68:d7:96:dc:ab:22:b1:f6:22:56:d0:
49:15:8b:bb:5c:4f:e8:4b:44:03:89:0e:3f:28:0a:
4e:10:13:ec:1c:f7:80:13:87:05:1c:88:f0:ad:3d:
9e:58:42:b7:63:f3:31:0a:7d:4b:8e:54:79:fb:c3:
a5:62:38:2e:05:a3:f1:98:26:12:aa:2f:b2:c1:31:
44:1a:12:cf:fb:c0:e4:a3:b0:8c:78:07:d3:18:71:
68:30:fa:6a:82:7a:99:f5:bc:46:0b:5a:f3:4e:e3:
d6:15:17:2f:7e:1b:96:3d:4d:fc:62:a6:0a:97:86:
61:44:1d:9e:e5:91:21:a4:1a:77:fc:14:57:f7:e2:
b8:d4:79:87:6f:53:8d:8c:c7:13:fc:d5:07:6e:73:
f4:4e:a8:60:78:3c:11:e9:0b:21:4b:77:39:b4:bc:
82:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4A:56:C4:4D:52:2C:8F:64:87:CC:A4:A6:1D:26:99:42:94:B2:FE
X509v3 Authority Key Identifier:
keyid:D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:81:4c:b9:51:59:2a:60:90:1d:4b:bc:50:2c:41:df:a3:4c:
6c:b5:16:d6:7c:17:78:c7:51:cc:d3:db:f4:15:c0:68:8c:50:
13:e0:e1:ec:f0:69:e2:8c:53:fd:93:81:94:ad:ac:c1:17:13:
66:26:85:f1:49:01:dc:d9:4a:14:80:ff:d1:cd:f7:47:ac:b1:
a4:88:e6:61:28:51:fa:15:78:49:43:1a:d5:6b:f7:88:c5:a9:
8f:ef:7d:65:b3:88:18:7d:31:f3:6a:67:de:07:48:7d:94:90:
fb:b3:f3:1b:fa:1c:17:5a:18:65:ca:ef:bf:9b:21:e1:35:b5:
bf:fd:4d:86:42:cc:f2:9c:b4:ff:d1:f1:4e:61:47:28:67:e3:
57:7a:d1:fe:38:70:ef:56:99:1c:0b:40:4c:fa:70:c6:b6:6e:
c3:aa:19:df:49:81:ba:bf:7c:d0:6f:ca:ec:70:e4:51:62:02:
78:22:d3:26:9a:b2:71:6b:33:34:31:d9:92:21:fd:f9:9d:8f:
06:50:04:bb:23:14:d2:90:6b:b4:15:3b:27:b4:9c:8a:54:02:
2a:75:fb:31:2a:17:1a:46:38:90:2c:d5:0c:79:a7:a7:47:77:
c8:c0:9d:66:ea:6f:ea:d4:6a:28:9f:b3:db:55:22:bf:80:45:
0d:fc:26:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 17:28:34 2025 by rpki-client