Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
File: 1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft (raw, json)
Hash identifier: WWKYGTgbWICDbllthBAM7VVIhfd3CHJls8kmGTgV/yg=
Subject key identifier: 9D:B2:88:9A:5E:4F:74:5D:11:D9:19:E8:6F:1F:79:2E:F9:E5:E0:55
Authority key identifier: FA:B7:96:D9:80:FA:60:FE:25:14:FC:E6:26:46:F4:5D:12:C9:51:65
Certificate issuer: /CN=fab796d980fa60fe2514fce62646f45d12c95165
Certificate serial: 01987450406CD4B362B27B66D39BEDCE9311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
Manifest number: 161B
Signing time: Mon 04 Aug 2025 09:01:12 +0000
Manifest this update: Mon 04 Aug 2025 09:01:12 +0000
Manifest next update: Tue 05 Aug 2025 09:01:12 +0000
Files and hashes: 1: 1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl (hash: TVPIrNj0W2K5XfVgnYvZpLz4DuQwht6U2buWEgKIQas=)
2: t-kDZ60Ga6s9XyZB2kPkoXB6jwY.roa (hash: +ne5fdeCEiZZDZ8TkDgbzZo5fLLpzzbaivx2MhBIpe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:40:6c:d4:b3:62:b2:7b:66:d3:9b:ed:ce:93:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fab796d980fa60fe2514fce62646f45d12c95165
Validity
Not Before: Aug 4 09:01:12 2025 GMT
Not After : Aug 5 09:01:12 2025 GMT
Subject: CN=9db2889a5e4f745d11d919e86f1f792ef9e5e055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e5:6d:df:d8:aa:ab:ad:b7:17:dc:4b:3a:47:
ae:0d:35:54:3b:da:f5:43:cd:76:89:fe:cc:5b:28:
83:66:82:3c:3a:ff:c5:0b:7a:4b:1c:7b:01:14:fb:
6a:81:d7:6d:f7:be:fe:2c:40:d6:66:fb:39:f1:8d:
be:b0:b2:79:01:89:4c:c5:b6:20:c4:c3:f1:e0:13:
7a:25:59:91:92:ac:1f:4a:57:f0:34:19:91:7a:a6:
ad:ec:ab:0f:85:0f:2e:0b:0c:be:7c:4b:d8:7d:06:
3d:23:ee:29:74:10:5a:db:c3:0d:c9:69:f2:f1:fd:
6e:4f:83:0c:1e:2b:28:a1:d9:7c:03:1c:99:b5:e2:
15:e7:05:f2:97:93:50:11:d0:23:d5:fe:3f:c2:b5:
bb:7f:59:f9:f8:e5:16:67:4e:79:a3:9d:ae:c4:46:
e3:5f:75:d7:7c:26:6c:94:1c:64:ad:75:83:f4:a5:
db:24:eb:04:62:d3:42:dc:10:00:77:79:cc:57:0d:
d5:10:7c:9c:9b:8c:c6:50:6e:ea:1f:6f:da:16:60:
52:2b:50:ff:70:b9:21:05:dd:b0:21:06:a0:d5:04:
12:e2:b2:0f:fb:f0:d6:f6:25:8b:3c:7e:9f:71:7b:
f8:ac:d0:6e:3e:df:a7:f2:5f:71:92:62:1e:60:51:
6b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B2:88:9A:5E:4F:74:5D:11:D9:19:E8:6F:1F:79:2E:F9:E5:E0:55
X509v3 Authority Key Identifier:
keyid:FA:B7:96:D9:80:FA:60:FE:25:14:FC:E6:26:46:F4:5D:12:C9:51:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:97:34:63:6c:11:93:dc:e5:36:3a:81:1a:e6:a9:89:af:e7:
fe:b6:9c:48:da:07:81:c6:be:e7:2b:b3:da:d1:5f:fd:c9:05:
b1:49:ef:e7:a9:ff:e3:9d:77:08:d3:a1:75:f2:a4:4f:52:c2:
a4:f2:31:88:d1:b3:98:da:f8:bc:af:82:fc:42:2b:c7:e9:87:
35:3c:6a:0b:c6:1d:08:e1:cb:cf:3e:dc:22:1b:21:81:2f:43:
de:fb:42:31:c9:62:df:fa:b9:1f:ab:b6:45:0d:86:a8:8a:17:
f7:e8:f4:e1:b6:7d:6b:68:ae:f8:7c:87:71:93:f2:1a:66:ac:
52:df:bf:cb:25:32:2d:d2:1a:41:ea:a4:fa:1c:0f:b6:4b:f6:
e9:4b:37:ef:cb:e4:8a:c8:b3:60:ba:a9:fa:80:75:e0:9b:00:
65:35:0a:08:81:50:c6:aa:af:bf:f5:3d:ab:be:e3:19:3d:16:
f2:32:9b:69:a9:00:8c:86:4c:ee:1f:a1:75:7c:ca:0b:ad:68:
58:42:32:a3:10:8a:53:20:0e:fa:b9:ef:8c:00:58:af:c3:34:
17:d1:82:88:d5:d3:17:2c:fd:e8:9a:94:d0:2c:c3:a0:30:f6:
ba:3e:f1:9a:d7:dd:f0:dd:da:10:f3:c7:8f:5b:e9:f6:88:be:
3f:89:9d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:20:18 2025 by rpki-client