Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
File: 1-h3je7xsBkINpibAu01yMjHpPoQ.mft (raw, json)
Hash identifier: mXfBNX0xh+Tn/P3ROkz3hg3E4ltD4W4DNCi73UNvFTM=
Subject key identifier: 4B:1C:63:73:93:9A:AC:8E:47:D1:65:0D:76:D3:43:7C:4D:13:5D:7E
Authority key identifier: FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
Certificate issuer: /CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Certificate serial: 019922FAC189B660E0347CBEA0D707D1D006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
Manifest number: 0DE3
Signing time: Sun 07 Sep 2025 07:01:22 +0000
Manifest this update: Sun 07 Sep 2025 07:01:22 +0000
Manifest next update: Mon 08 Sep 2025 07:01:22 +0000
Files and hashes: 1: 1-h3je7xsBkINpibAu01yMjHpPoQ.crl (hash: kW6cSQ3E9NLiKouhEES873gSv/G6LLn/qdqVKNPU8bg=)
2: X106OsUC0FAl9jkdnlr5gWlzbbQ.roa (hash: JYZSAqgEH1ZLu6PBGCZjtxMtu36xGzGi2+VOR9jTAy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:c1:89:b6:60:e0:34:7c:be:a0:d7:07:d1:d0:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Validity
Not Before: Sep 7 07:01:22 2025 GMT
Not After : Sep 8 07:01:22 2025 GMT
Subject: CN=4b1c6373939aac8e47d1650d76d3437c4d135d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:63:1d:2f:c4:81:c4:41:c3:a6:34:00:43:46:
7c:0e:0a:8d:a1:e2:27:cc:72:ee:c3:73:8a:fd:50:
cb:83:e3:82:52:ca:a4:e7:a8:51:71:da:20:35:9c:
53:ad:82:e5:05:94:c2:63:a6:ad:6a:11:c0:94:72:
f8:49:6d:32:16:41:6e:f5:b7:60:50:ea:a0:1d:a2:
64:f9:18:01:bd:e5:f9:90:30:32:18:5e:bf:68:d0:
87:72:e1:4b:9c:6a:23:10:b1:1d:39:f6:60:39:81:
f7:a4:ca:6b:22:78:bf:0e:55:e6:db:28:9e:56:f2:
bb:dc:4d:b6:7b:dc:79:a8:4f:eb:a4:da:ad:95:92:
69:e2:b3:e5:94:2a:ea:47:9a:97:d2:bd:eb:86:0f:
78:97:79:7a:72:ce:d4:15:a1:9d:94:34:b7:4e:7d:
ab:16:37:2a:6e:9c:87:7e:bf:06:ef:fb:37:5b:f7:
6c:0d:86:36:ab:7f:14:1c:b3:0b:ea:53:b5:98:1a:
fc:b1:e8:97:ca:cf:ed:b7:31:42:49:2e:5d:2a:81:
a2:ed:ed:36:30:67:dd:eb:d9:9e:63:e9:4b:68:44:
88:d9:85:ba:16:57:3e:87:5f:fe:13:ad:e0:ce:42:
3c:39:5d:30:ef:ef:bb:f5:ad:35:17:31:bc:8d:2e:
0e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1C:63:73:93:9A:AC:8E:47:D1:65:0D:76:D3:43:7C:4D:13:5D:7E
X509v3 Authority Key Identifier:
keyid:FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:77:6f:b5:71:5d:95:fe:0d:8c:85:e4:2e:74:27:13:b9:c9:
ec:33:ef:e2:eb:80:12:be:5c:e2:bd:97:be:ec:7c:29:f9:1f:
cc:e9:db:5e:ec:53:59:81:6f:a2:5d:2a:ac:49:e4:c9:95:7d:
e0:61:72:6c:65:31:c5:7f:31:91:33:a7:27:32:26:b6:04:06:
8a:bb:7c:4c:20:1b:b8:50:38:3a:71:cb:73:7f:4d:37:5c:0f:
22:e8:e0:9e:ca:57:0c:ee:32:ef:14:fc:3e:47:24:cb:63:75:
77:02:ef:69:eb:68:1f:bf:86:35:20:4d:83:f8:4d:f8:22:42:
ee:cb:cc:27:9e:07:4d:34:e9:2c:48:94:33:52:6b:fa:fa:bf:
54:6b:50:52:31:57:06:14:48:54:22:1d:a4:f4:4e:9e:90:c4:
5e:7a:e3:4c:72:2c:34:1b:70:b9:0e:27:e1:53:bc:f2:b1:34:
37:76:63:3a:78:d9:0d:6d:0d:ab:a8:93:a5:c5:94:6b:48:7c:
dd:24:c6:4d:22:84:1d:a0:fd:a9:4a:5c:bc:ef:05:7d:c6:87:
ab:65:6c:d5:fb:45:f8:c1:a1:16:1a:20:b9:73:fb:7e:a2:a0:
89:64:47:69:63:18:a6:7c:eb:f5:0c:de:33:c1:11:91:f3:fd:
2b:29:32:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:53:26 2025 by rpki-client