
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
File: 1Fib0sD75-LYWSzuaHGSu7V5efc.mft (raw, json)
Hash identifier: w1dpPo1RukHDtl3RNAlptbr/NubKIZxQiUbLq3FK3E8=
Subject key identifier: 5F:8C:D5:93:B3:F5:28:CB:B0:E1:76:B8:AD:8F:02:0C:1A:2E:36:54
Authority key identifier: D4:58:9B:D2:C0:FB:E7:E2:D8:59:2C:EE:68:71:92:BB:B5:79:79:F7
Certificate issuer: /CN=d4589bd2c0fbe7e2d8592cee687192bbb57979f7
Certificate serial: 019873E2A3FCA22106F9BF9492183326F4E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
Manifest number: 02D7
Signing time: Mon 04 Aug 2025 07:01:29 +0000
Manifest this update: Mon 04 Aug 2025 07:01:29 +0000
Manifest next update: Tue 05 Aug 2025 07:01:29 +0000
Files and hashes: 1: 1Fib0sD75-LYWSzuaHGSu7V5efc.crl (hash: ROlpW369+nzL/A8+bzpCgme5J33MqToD79bwr8C2hEc=)
2: kWLYBV2lkiSE5J3RZk5fvmnmzB0.roa (hash: fcVu1jDo+tZnVop9ajN9Wj6s2WROmvxL/2WZUAGhZDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:a3:fc:a2:21:06:f9:bf:94:92:18:33:26:f4:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4589bd2c0fbe7e2d8592cee687192bbb57979f7
Validity
Not Before: Aug 4 07:01:29 2025 GMT
Not After : Aug 5 07:01:29 2025 GMT
Subject: CN=5f8cd593b3f528cbb0e176b8ad8f020c1a2e3654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:78:12:76:33:27:60:9b:c1:c1:0f:07:39:8a:
78:36:bf:9a:42:6e:2a:03:46:41:7a:c9:a7:d0:75:
8d:7a:64:5b:46:91:ef:db:e3:e2:9d:8b:f3:66:c7:
ac:d0:f3:67:6e:8c:0a:65:f7:25:cc:50:98:63:7a:
ef:49:d0:86:41:f9:d1:9c:f1:04:a2:31:0a:b0:c3:
2c:ce:19:db:c8:7f:f7:4d:cf:44:f1:76:64:8e:5f:
55:77:de:26:24:de:ce:3f:96:f9:2e:97:e0:c3:9c:
9b:37:d8:71:9d:bc:d4:ce:fb:4c:b0:3d:75:6c:15:
db:a1:fe:5b:a2:88:d2:1f:50:ba:b0:8c:d3:0a:55:
06:db:b6:d4:88:e2:14:6d:2c:10:b3:88:97:ee:95:
60:e2:73:18:34:f2:78:f7:63:56:48:a3:44:dc:d1:
bc:35:eb:9b:de:54:30:f9:07:47:17:c4:bd:b9:8f:
0b:fd:dc:9b:ac:60:fe:df:11:86:ec:cc:4a:66:86:
18:e7:86:a6:75:24:22:0c:d9:36:c7:cd:f1:d7:4f:
84:ab:69:9d:9e:60:7a:9d:82:d8:a4:ff:9f:f1:aa:
32:e2:2f:7d:c7:fb:c8:0c:d3:05:b6:51:58:3b:d3:
94:f5:89:53:3a:88:46:9f:4c:00:11:54:a1:61:cb:
44:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8C:D5:93:B3:F5:28:CB:B0:E1:76:B8:AD:8F:02:0C:1A:2E:36:54
X509v3 Authority Key Identifier:
keyid:D4:58:9B:D2:C0:FB:E7:E2:D8:59:2C:EE:68:71:92:BB:B5:79:79:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b5:b1:2f:44:f0:b6:fb:43:f1:f7:da:03:46:12:99:43:37:
69:a6:70:35:6f:b2:ac:c0:54:f3:cc:ee:a5:e7:95:8c:2c:7b:
58:7a:0f:d2:a7:5f:a9:7a:f2:b3:e1:23:7d:59:9a:0d:9f:b5:
86:9c:33:9d:e1:20:cd:40:e7:15:06:cf:d0:af:d3:52:6a:f1:
bf:d4:94:d7:a0:84:64:4d:e8:1b:7b:ac:c0:97:ba:d2:2e:18:
fd:77:41:7e:37:3c:50:2b:48:75:d0:30:0c:fc:d0:2f:33:d1:
48:80:65:1b:c5:af:d2:9c:6d:ca:e9:e2:47:e6:6b:61:ef:70:
6a:2b:d9:ba:8e:d1:3f:4d:16:a9:52:cf:49:34:8f:9f:74:77:
74:43:f0:24:af:f7:59:e1:7c:1e:6c:f6:78:6e:76:7e:40:6e:
14:3c:65:8a:60:db:49:ec:84:53:ad:7b:ab:55:5c:17:f6:ef:
61:4e:d6:8e:10:33:98:6c:b7:f9:e9:c1:a5:5a:e0:ae:7a:e7:
7b:e3:86:be:25:fe:dd:e7:15:68:3a:7f:25:1f:57:d0:9e:ac:
db:75:81:d9:aa:26:69:ef:68:95:c6:6d:4c:72:7b:12:d0:c0:
c5:aa:26:e2:b5:6b:92:16:90:5a:74:71:d5:76:55:49:08:a5:
12:2c:d6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:27 2025 by rpki-client