Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
File: 1hCKSF368GqTH1Q8CFoAnGrqLZw.mft (raw, json)
Hash identifier: AJc09vIOcGR7M7Krj53HmdqahNzBzlRVOR2jaVstX6w=
Subject key identifier: 9B:C0:FD:A7:FE:A4:D5:A1:6B:B8:60:3B:C0:F2:C2:20:32:9F:B5:C0
Authority key identifier: D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C
Certificate issuer: /CN=d6108a485dfaf06a931f543c085a009c6aea2d9c
Certificate serial: 01986ADF65C26E4626FDC88CFD8D5881D735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
Manifest number: 091C
Signing time: Sat 02 Aug 2025 13:01:22 +0000
Manifest this update: Sat 02 Aug 2025 13:01:22 +0000
Manifest next update: Sun 03 Aug 2025 13:01:22 +0000
Files and hashes: 1: 1hCKSF368GqTH1Q8CFoAnGrqLZw.crl (hash: 2LiXwGUSw5bSIOWDD5dtuDyVyBokym/uSU6R5XS+GWA=)
2: XYlDbmNEweM6LqFALkkvUh2W9lE.roa (hash: 9gP6l/HCX+2ev9Uk9YYU1pfiHW7Ig/5Pk5coTY/utmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 03 Aug 2025 09:20:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:6a:df:65:c2:6e:46:26:fd:c8:8c:fd:8d:58:81:d7:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6108a485dfaf06a931f543c085a009c6aea2d9c
Validity
Not Before: Aug 2 13:01:22 2025 GMT
Not After : Aug 3 13:01:22 2025 GMT
Subject: CN=9bc0fda7fea4d5a16bb8603bc0f2c220329fb5c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:44:0f:75:5b:29:d3:39:2b:76:0d:4e:23:2d:
c8:93:fc:f8:55:55:1a:21:7a:4c:9b:66:93:49:60:
3b:7c:98:9f:29:1d:6b:af:eb:e3:a8:f0:ae:5a:1c:
17:e9:50:5c:fc:65:35:3c:f9:d3:90:aa:5f:a2:bc:
11:5a:9f:35:11:ca:2a:38:52:b3:ca:e2:ca:de:19:
e6:58:e3:b3:12:67:61:2c:a5:d4:05:b8:67:c5:30:
9d:29:62:25:97:47:ad:25:58:80:ef:60:1e:e0:81:
41:b3:24:cf:a2:f0:5c:4b:bb:3b:95:b7:4d:b2:0d:
c0:8c:be:22:4e:bf:fd:7e:d7:67:07:f2:e9:6a:6f:
47:79:0c:29:61:c6:07:34:93:70:d2:8e:e7:62:dc:
6b:98:9e:37:9c:76:de:9f:32:58:b9:66:32:75:30:
34:89:8a:66:51:64:d3:18:1a:19:fe:4c:fd:6e:73:
b4:5b:c2:11:5d:f8:9c:33:76:37:46:ad:04:e2:c7:
6e:59:e1:7c:f1:71:8e:5d:19:f5:c8:43:ff:17:39:
42:59:e2:7b:8e:38:7c:5f:44:c0:02:45:a0:dc:30:
e6:5c:45:41:61:80:92:2d:fd:89:85:be:1e:ed:d0:
12:82:34:a5:a7:c6:e0:96:62:61:72:74:5e:0a:22:
ea:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C0:FD:A7:FE:A4:D5:A1:6B:B8:60:3B:C0:F2:C2:20:32:9F:B5:C0
X509v3 Authority Key Identifier:
keyid:D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:8f:ce:d3:ad:65:ab:29:ba:a5:3e:e6:e4:98:1b:9a:51:49:
00:9a:8e:ac:d6:bd:2d:e8:d3:7c:03:1b:61:45:b7:75:ec:41:
ed:96:cf:e6:ee:b3:60:d8:95:33:a4:9c:2a:4d:2b:b0:f7:89:
43:3c:36:87:a7:72:b4:ef:d8:1e:f3:83:f5:2b:ca:57:e2:ad:
29:fc:2d:b1:43:93:cf:1d:00:51:23:c1:10:83:39:4e:3d:75:
28:3a:ac:a8:0f:68:1c:3f:7c:ac:ec:4c:a9:8f:66:bc:4d:fa:
8d:a2:5f:47:82:39:69:19:55:6e:6e:05:5b:d2:8a:27:87:68:
15:8d:46:9a:6c:d8:a5:01:37:69:e4:d2:b2:39:c8:e5:80:a2:
9b:0d:32:bb:d0:c8:49:38:0a:d5:3a:c2:bd:ea:c4:36:b3:e8:
48:cb:32:44:dc:63:8c:ee:7d:a1:fb:ed:cb:d7:22:9f:19:18:
4a:37:af:8e:a0:9f:f9:f1:b2:a4:eb:11:bc:ea:97:64:0b:ca:
e6:69:b0:e1:c6:51:05:b8:76:f3:e2:24:e7:41:43:37:5a:b0:
2b:98:4d:4b:43:89:b8:d6:d5:44:9a:e7:4b:33:fb:ec:f9:c9:
71:0b:77:7a:a7:98:51:f6:5d:05:f6:be:7f:f3:5a:ec:20:f7:
2c:db:aa:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 18:21:35 2025 by rpki-client