Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft
File: 1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft (raw, json)
Hash identifier: PbCf+VtNmdySxAZ5ixY1IafLeVWFmx3yyFI15klwlWo=
Subject key identifier: CC:11:39:39:F3:66:D9:E3:09:CA:7B:69:EF:97:97:EE:7A:BE:30:D3
Authority key identifier: FA:CF:15:3F:24:FA:8D:32:14:CD:7C:6E:25:0D:4B:19:F5:06:72:2B
Certificate issuer: /CN=facf153f24fa8d3214cd7c6e250d4b19f506722b
Certificate serial: 0198E33FB5F1F74E76E97359984C4365BCE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft
Manifest number: 1651
Signing time: Mon 25 Aug 2025 22:01:00 +0000
Manifest this update: Mon 25 Aug 2025 22:01:00 +0000
Manifest next update: Tue 26 Aug 2025 22:01:00 +0000
Files and hashes: 1: 1-s8VPyT6jTIUzXxuJQ1LGfUGcis.crl (hash: ERG5YXeEGO1wyOD4njy6ydtB80vW/GOy5wgqBTe5oug=)
2: rJdrJhQQmpxY59M8JPVpH2s71pI.roa (hash: xxb6VYq/XoyduiRjX57bX/HD20WZN47aVhzULOuwKsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Aug 2025 14:16:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e3:3f:b5:f1:f7:4e:76:e9:73:59:98:4c:43:65:bc:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facf153f24fa8d3214cd7c6e250d4b19f506722b
Validity
Not Before: Aug 25 22:01:00 2025 GMT
Not After : Aug 26 22:01:00 2025 GMT
Subject: CN=cc113939f366d9e309ca7b69ef9797ee7abe30d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7f:d0:4a:8b:bd:c2:b6:f4:d1:5e:68:e8:a7:
50:23:ae:ae:62:9b:bd:df:f8:9f:cc:e6:6a:ed:39:
7f:54:3f:58:1a:95:a4:f7:0c:07:01:3f:6c:a2:06:
83:6a:66:eb:05:97:e5:34:a4:ac:60:39:5a:b2:98:
68:50:f3:f7:c7:6d:19:9d:2b:77:9d:27:1a:1d:f6:
7c:6a:8b:e6:38:3e:1c:b4:8a:2e:10:ef:17:dd:07:
62:41:d5:f6:82:c0:70:cd:9a:3c:ba:dc:e2:2e:ab:
46:3b:24:cb:b4:54:ba:f3:ca:54:7e:a2:c8:9e:49:
17:53:ef:da:f1:0a:24:c8:e9:39:c0:68:98:80:43:
0d:fb:04:5c:e6:60:20:17:e1:21:14:da:7e:68:7a:
93:84:32:fb:f6:68:b5:d4:1a:13:75:28:98:6f:e2:
ca:62:b7:74:62:c1:73:fb:79:71:6d:54:3d:be:f8:
29:42:67:a6:ed:51:13:df:7a:4b:5b:f8:5d:1f:eb:
98:5e:bb:be:b1:ea:df:b1:3b:79:c3:84:54:6c:76:
46:36:f3:d4:26:17:71:14:60:22:c9:2c:18:3b:24:
04:29:4f:6a:89:eb:08:64:dc:29:34:13:a4:9f:24:
f6:80:b5:d3:68:3e:f9:65:c4:09:7f:9f:0e:30:d5:
4a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:11:39:39:F3:66:D9:E3:09:CA:7B:69:EF:97:97:EE:7A:BE:30:D3
X509v3 Authority Key Identifier:
keyid:FA:CF:15:3F:24:FA:8D:32:14:CD:7C:6E:25:0D:4B:19:F5:06:72:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:5b:13:83:66:77:2c:10:c9:06:83:97:4c:f7:c5:ff:13:92:
ac:32:a6:57:9f:14:27:69:15:75:83:3d:c1:22:74:f4:cf:76:
e3:7d:d4:71:52:6d:28:1f:2a:54:0f:6d:01:a9:35:40:29:ae:
b9:bf:9d:c8:84:51:29:a7:c8:53:b8:18:a0:43:30:4e:9b:0b:
11:35:65:ad:e5:05:63:ef:82:d7:4b:81:a1:0d:93:6c:9c:41:
5a:15:fa:99:c9:f2:2e:f0:fd:44:d4:e5:75:1a:f0:10:a7:b4:
fc:66:60:3f:f8:8c:9c:12:cb:0c:be:7c:0d:3f:a0:1d:85:c3:
47:c6:41:00:e9:fd:ba:55:10:1e:79:94:2e:c6:02:67:d9:4d:
db:05:22:c5:82:46:ed:a3:d3:d1:de:a8:8c:a8:75:64:3b:73:
ab:91:63:ce:f9:79:de:3e:bd:51:77:76:0f:e0:c7:ec:0b:4e:
e5:95:92:3c:62:f2:a8:32:c2:f9:ab:57:7e:b4:60:7c:e7:3f:
e4:d4:89:72:f4:2b:ec:b5:ec:5e:3e:1f:0c:2a:2c:5d:a4:6f:
94:7c:28:a1:c5:7c:35:45:9b:8c:ec:ef:2e:a2:b8:7e:60:97:
a5:15:52:22:e3:17:ee:bb:ab:73:fd:98:bb:f9:5b:84:d0:58:
e5:bd:e0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 26 00:47:52 2025 by rpki-client