Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
File: 1-mSZFaR46obf8AAsW-2YKYJfmBM.mft (raw, json)
Hash identifier: LkXOnqHnJnLXnnyrCkK0viqLGr+uzqli7fFiLcqr3jM=
Subject key identifier: 1C:67:0B:BD:0B:7E:F7:58:63:14:9E:23:FF:6E:57:C5:4D:65:58:7B
Authority key identifier: FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
Certificate issuer: /CN=fa649915a478ea86dff0002c5bed9829825f9813
Certificate serial: 019896374548926C9FFA46C9608DE53CFD3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
Manifest number: 15A7
Signing time: Sun 10 Aug 2025 23:01:01 +0000
Manifest this update: Sun 10 Aug 2025 23:01:01 +0000
Manifest next update: Mon 11 Aug 2025 23:01:01 +0000
Files and hashes: 1: 1-mSZFaR46obf8AAsW-2YKYJfmBM.crl (hash: M6Zcs/Em1vcFwbKpEEF5yXfnoDR9foXhfhETuA3q764=)
2: 8Ja6nLmqn5rWkD8bJIXyJiseunA.roa (hash: 0Zo4/0JR5pHj4KIYK41VyhNWjJ7czQTS1SR9Du+4qQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 23:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:37:45:48:92:6c:9f:fa:46:c9:60:8d:e5:3c:fd:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa649915a478ea86dff0002c5bed9829825f9813
Validity
Not Before: Aug 10 23:01:01 2025 GMT
Not After : Aug 11 23:01:01 2025 GMT
Subject: CN=1c670bbd0b7ef75863149e23ff6e57c54d65587b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:91:d5:e3:b9:cc:a3:eb:4c:e3:d9:85:52:d1:
74:b8:19:19:a9:cf:e9:d9:bf:5c:64:5c:5e:66:12:
fc:8b:9b:33:a1:fd:d9:2c:6c:ec:a0:9d:f4:ea:02:
c8:97:5b:84:2d:96:d4:95:14:e5:1c:5d:fd:58:b3:
2c:a3:41:48:5a:9c:4e:a4:2e:28:14:e3:bb:07:91:
f6:43:1b:8d:bc:fb:43:f1:00:bd:68:0c:5a:42:01:
27:d3:9d:fd:f4:bf:e6:82:82:21:bb:0e:b9:59:e4:
ec:25:b6:5b:33:94:9c:03:96:91:8f:b1:79:d3:e4:
41:97:28:8c:6a:9a:c2:fd:36:c0:35:15:2b:29:08:
81:54:9b:b0:a9:87:ed:09:1c:9d:be:47:05:97:64:
51:49:3a:98:81:42:47:b0:d4:1f:f0:50:f3:08:f9:
0b:c8:19:7b:18:c2:ef:20:8d:d7:b6:de:29:6b:ff:
4a:6a:7b:c5:25:0f:ae:84:9d:15:ff:2b:c5:c1:74:
b4:24:1c:38:bb:f2:a0:18:4a:b8:c7:ad:a1:51:5a:
98:18:bf:a7:2c:5e:18:12:59:3a:5e:97:7b:22:9c:
30:ed:72:dd:68:ac:e5:e0:4c:b8:55:cd:d9:f1:55:
04:75:0e:24:01:a8:1a:5f:7f:f7:3e:ec:de:35:31:
a6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:67:0B:BD:0B:7E:F7:58:63:14:9E:23:FF:6E:57:C5:4D:65:58:7B
X509v3 Authority Key Identifier:
keyid:FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d9:48:80:86:a4:7c:d2:5a:aa:42:b3:72:de:59:f0:2a:b1:
4b:ce:85:3a:e1:19:3c:72:77:d9:c9:8c:ea:f7:26:37:ce:8e:
4e:25:87:37:65:92:df:a7:45:44:77:1d:6a:97:20:06:7f:a9:
f7:2e:51:15:ee:48:51:6e:81:82:f7:46:5e:61:1f:24:4b:74:
82:3d:83:e5:c8:97:26:1a:00:75:61:50:0f:97:ab:d6:7d:c5:
1b:dc:84:2f:d4:e1:5f:00:e9:0c:91:19:ea:bf:23:cb:ac:62:
25:84:d7:36:26:b0:07:f7:f8:4b:16:6c:61:c6:84:e8:ab:f2:
85:a9:b3:26:1c:82:93:99:30:7f:9a:4a:9d:8f:b6:a2:61:ce:
4a:74:b7:e2:96:b4:4f:9b:a0:b3:05:7b:cf:49:c4:e7:f2:18:
f3:00:53:eb:9e:b8:e8:4b:59:40:9a:eb:41:9d:76:85:10:99:
91:9c:17:eb:4e:02:e1:28:1a:bf:52:3d:72:64:5f:16:77:38:
46:61:82:ff:81:ec:73:fc:40:cd:c9:78:02:20:28:6f:f7:dd:
5f:ae:77:92:53:04:0c:2f:1f:8e:85:29:17:ea:a2:9c:7b:b5:
0f:91:5b:10:e4:eb:ec:c6:9c:c4:c0:35:8f:4d:05:1d:ce:0a:
35:8a:0a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:50:35 2025 by rpki-client