Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft
File: 1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft (raw, json)
Hash identifier: 4KEp0Sl9vF3ZEUEC7qCISK5AKt74Acef42aWddpUbUw=
Subject key identifier: 02:EE:B3:36:4B:6A:95:06:B7:00:36:01:C2:AE:DF:F0:CC:DA:07:1D
Authority key identifier: F8:B7:60:0E:78:1F:93:05:B8:8C:A4:93:1A:7D:B0:09:F8:C7:2B:3A
Certificate issuer: /CN=f8b7600e781f9305b88ca4931a7db009f8c72b3a
Certificate serial: 019922FAA05D67F8027F3DF822FFD6DFA347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LdgDngfkwW4jKSTGn2wCfjHKzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft
Manifest number: 65
Signing time: Sun 07 Sep 2025 07:01:14 +0000
Manifest this update: Sun 07 Sep 2025 07:01:14 +0000
Manifest next update: Mon 08 Sep 2025 07:01:14 +0000
Files and hashes: 1: 1-LdgDngfkwW4jKSTGn2wCfjHKzo.crl (hash: Bm4jCPZQs7bB20W9iuZ3BzkMM/JuVfT61/ypKmcR5Rs=)
2: 1j10fGgoumz7WTH368PI_luQFZo.roa (hash: I8kLuezU2XygaqC04v/laZ7klhdBf+W1z6e/cSddoJA=)
3: warGeR8KF_Qduq42XjiOHRQiVOo.roa (hash: rRr5EdH0nhSwX6FyG7IpMNhRuhDpGs/F3/vvkFXiG7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LdgDngfkwW4jKSTGn2wCfjHKzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:a0:5d:67:f8:02:7f:3d:f8:22:ff:d6:df:a3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b7600e781f9305b88ca4931a7db009f8c72b3a
Validity
Not Before: Sep 7 07:01:14 2025 GMT
Not After : Sep 8 07:01:14 2025 GMT
Subject: CN=02eeb3364b6a9506b7003601c2aedff0ccda071d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3b:5d:37:30:d6:0c:f1:1c:db:9a:f6:d2:87:
20:c2:7c:c5:e3:1f:d8:b4:cc:59:a8:ed:29:40:ec:
b8:04:e0:7a:b0:60:df:99:94:2c:26:73:2c:42:91:
d0:fa:ef:0d:6a:cd:ab:45:70:6a:7d:57:1b:34:25:
a5:aa:92:cf:6a:11:fc:00:fd:c2:86:57:19:5d:8e:
b5:ce:c6:b8:57:31:fd:22:0e:6d:cc:df:4a:21:bf:
fc:4a:c6:1c:1e:70:d6:dc:0f:cb:dd:64:62:a8:80:
00:c5:10:f2:80:7c:62:fe:57:f5:fe:b6:c1:ba:e7:
f2:86:76:85:f3:ee:2f:2f:38:15:b9:fa:7a:ee:56:
d3:71:4e:5a:4d:b2:b3:9e:49:dc:55:0e:05:87:43:
f3:7e:fe:cd:17:3c:11:9c:bf:e4:e6:78:28:56:89:
97:b9:2d:d6:11:30:a2:50:38:36:99:fe:e7:ad:16:
4f:8d:a1:1a:b1:30:b0:22:bb:aa:13:7f:57:77:89:
a9:c9:75:91:78:e3:76:53:c9:2e:28:37:99:9e:a0:
30:2b:9f:bd:72:4b:f7:f8:cf:a2:fe:4e:68:b0:ec:
5f:96:47:b3:69:7e:b2:6b:b0:b9:4d:cd:c3:49:f6:
ad:2b:a1:80:cf:95:6c:8b:50:e6:0f:b8:fe:85:d6:
60:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:EE:B3:36:4B:6A:95:06:B7:00:36:01:C2:AE:DF:F0:CC:DA:07:1D
X509v3 Authority Key Identifier:
keyid:F8:B7:60:0E:78:1F:93:05:B8:8C:A4:93:1A:7D:B0:09:F8:C7:2B:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LdgDngfkwW4jKSTGn2wCfjHKzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b3fece-905f-4cb3-9a9a-e5afe263f0a2/1/1-LdgDngfkwW4jKSTGn2wCfjHKzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:4e:71:fa:a7:66:7d:75:24:05:17:12:6b:57:e6:19:76:44:
1b:54:da:18:d8:23:03:fd:a4:bb:1e:d2:4c:e6:59:ce:21:c8:
f9:24:1a:39:b3:c2:4d:6a:65:1b:5c:10:21:27:65:94:6b:65:
79:a6:78:ad:03:fc:eb:8f:cd:49:a2:da:34:87:c9:74:e5:31:
8d:b4:c2:12:a9:ee:07:75:34:cc:dc:7b:9b:e4:51:dc:99:06:
fa:f0:3b:0c:09:8c:cc:95:78:b8:28:a4:11:67:c6:9d:1b:e2:
f9:9f:8b:be:1b:fa:b1:57:9f:47:09:79:c4:69:77:11:84:94:
8d:a2:9f:4c:33:46:0b:5e:2b:fe:d0:06:fc:4f:cf:e1:48:78:
f7:33:76:66:7f:db:1b:ec:2d:25:fd:78:da:0f:eb:c6:47:a3:
50:b4:4d:0f:6d:75:94:01:ae:d3:97:37:f0:2a:70:ad:82:e7:
39:9c:ea:aa:fb:b0:84:29:de:f8:6c:be:c6:cc:e3:11:6e:0d:
bb:67:46:36:23:aa:89:03:32:78:2c:6e:67:d2:17:5b:41:b1:
3a:2d:80:7e:46:15:65:14:db:f2:3e:96:1b:4b:4a:80:e9:07:
fd:2b:b8:5c:92:01:e1:ef:72:da:51:ca:d7:d0:9e:3a:d3:2d:
f9:5d:ba:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:37:34 2025 by rpki-client