Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
File: 1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft (raw, json)
Hash identifier: c/GGxwvvaG9I16w20KpqHbopPmjFQ7+9AgZ44Ps6TOs=
Subject key identifier: 83:D1:B1:4E:46:3D:6B:46:2B:BD:3A:87:2A:1F:BB:FB:84:ED:AF:E6
Authority key identifier: FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87
Certificate issuer: /CN=fbb5b1d61e09a4e4b0dd1b05ced8e6513bc66187
Certificate serial: 0199239EEEB022E885CAF5EBD0A7F77CB933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 10:00:42 +0000
Manifest this update: Sun 07 Sep 2025 10:00:42 +0000
Manifest next update: Mon 08 Sep 2025 10:00:42 +0000
Files and hashes: 1: 1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl (hash: bQc2Su/JhhjdkGQucL47mldaQ5UeUT4QtV3l6E2T0Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:ee:b0:22:e8:85:ca:f5:eb:d0:a7:f7:7c:b9:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbb5b1d61e09a4e4b0dd1b05ced8e6513bc66187
Validity
Not Before: Sep 7 10:00:42 2025 GMT
Not After : Sep 8 10:00:42 2025 GMT
Subject: CN=83d1b14e463d6b462bbd3a872a1fbbfb84edafe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f0:9c:85:11:95:ca:22:52:dd:37:6a:5f:3b:
52:9b:48:8d:61:27:b9:71:52:64:dd:ad:cd:a9:fa:
0b:41:d1:e2:1f:a0:d0:75:ab:7f:06:ae:5b:81:22:
49:6d:8e:cf:ba:72:90:60:da:4f:1e:e3:5e:6c:07:
d9:96:9d:c8:a0:34:da:85:19:75:f1:8b:b4:40:73:
e7:fa:ab:9b:fa:79:5e:12:64:46:2d:f8:4d:04:1e:
15:fc:9d:d4:5d:1c:ea:52:90:4c:0c:1e:ff:d7:df:
9a:9e:42:3a:ac:4a:a7:39:95:3d:2f:00:e8:15:2d:
aa:2f:cb:e8:a8:5f:92:08:32:8c:65:95:be:b1:30:
f6:c5:cb:3e:c2:5b:93:cb:17:49:ba:b8:56:4c:8d:
c9:46:e5:19:d1:c5:c0:26:19:42:84:d6:11:92:dd:
15:c3:28:d4:54:04:58:c0:35:c1:25:55:b3:b8:24:
d2:e8:44:42:21:58:e7:eb:2c:f4:10:79:d2:bf:70:
a4:7c:fa:95:a9:6c:df:e4:39:bc:bd:f8:9e:d1:20:
92:52:e7:a0:b3:c0:7a:35:20:c8:56:5c:86:ce:ca:
30:2c:16:2f:b7:03:4b:33:64:07:5d:0c:4e:df:b9:
67:83:9d:32:74:c7:49:8e:b5:62:51:cb:95:1e:ca:
1c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D1:B1:4E:46:3D:6B:46:2B:BD:3A:87:2A:1F:BB:FB:84:ED:AF:E6
X509v3 Authority Key Identifier:
keyid:FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f6:99:23:60:88:d5:4c:9d:b5:e1:5d:38:83:be:ee:79:9f:
36:94:90:c5:d3:1f:00:53:64:a3:de:db:ac:ed:1a:70:05:3e:
4d:42:f7:49:64:49:d5:61:5b:59:d7:ae:3e:59:5c:93:b3:39:
dd:f9:52:ed:13:b7:91:65:e5:2f:3f:58:c9:35:36:48:e4:7b:
ad:75:5c:0f:e8:65:60:21:ee:6d:60:63:27:a5:d9:24:c9:74:
0e:6f:a4:8b:61:d9:8f:97:bb:20:11:15:ae:9f:21:ce:cf:71:
d5:4d:aa:a4:54:ac:d4:fd:e8:b7:d9:14:6f:5d:63:7a:46:9d:
14:c5:c7:bc:69:43:f0:ca:d7:fb:34:fc:7a:14:94:53:71:26:
ea:bd:1d:8b:92:8b:23:61:87:84:1a:a2:44:f5:26:da:d9:26:
a7:4e:58:69:40:a8:aa:f3:3c:22:81:23:cd:52:b6:44:3d:83:
7b:73:47:54:49:73:cf:75:a9:d0:8f:69:9f:b6:8c:2d:10:9d:
93:c8:c4:fe:28:21:7a:98:2d:c4:3c:38:17:57:3c:6b:69:4c:
21:05:a7:d0:d8:5d:ca:f3:9d:a0:1e:47:dd:22:bb:20:43:3d:
f0:ad:00:68:ec:df:19:a7:b9:ec:94:e5:dd:d1:62:63:e1:59:
ed:a7:9b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:42:07 2025 by rpki-client