Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
File: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft (raw, json)
Hash identifier: iUnDgZcL5rEWWfiMYaS/CKiBAA5kLIreAWvFlQqpDs8=
Subject key identifier: C8:A3:ED:2B:4B:4E:BB:FA:39:76:F6:91:42:06:4E:1D:F7:CC:85:5E
Authority key identifier: FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
Certificate issuer: /CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Certificate serial: 019872CFF41453BE0311EF4652DD1E2273F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
Manifest number: 1614
Signing time: Mon 04 Aug 2025 02:01:27 +0000
Manifest this update: Mon 04 Aug 2025 02:01:27 +0000
Manifest next update: Tue 05 Aug 2025 02:01:27 +0000
Files and hashes: 1: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl (hash: rA9LyfsM09pyFdM146k07drFonm5/jLsyu+9rGvzM9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:f4:14:53:be:03:11:ef:46:52:dd:1e:22:73:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Validity
Not Before: Aug 4 02:01:27 2025 GMT
Not After : Aug 5 02:01:27 2025 GMT
Subject: CN=c8a3ed2b4b4ebbfa3976f69142064e1df7cc855e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:68:e8:0b:be:7b:c0:c8:2e:af:74:0f:6e:0b:
ff:78:d0:e1:75:0c:c4:bb:b7:45:c2:62:a2:e0:18:
28:8e:82:7a:a9:79:fc:97:da:b5:b6:15:4e:b4:e4:
1b:86:04:06:d0:dd:ce:20:8a:06:a6:b0:e9:3f:c3:
d7:ff:d1:20:92:9f:b8:ab:80:de:64:2b:72:73:7d:
85:4d:d9:b7:ea:f4:c5:81:98:6c:22:22:46:77:1f:
36:b5:59:ca:76:69:60:5a:0a:a1:02:36:5b:8d:7d:
28:33:10:04:3f:f6:37:e3:97:36:64:85:04:18:f1:
cb:c4:a7:e2:06:3b:7d:98:b6:a9:2b:43:db:f8:a3:
a2:e1:dc:be:b0:27:70:1b:57:69:fb:aa:7e:1f:a5:
a2:73:af:b3:ae:8c:a0:a1:b4:a3:3c:cf:9c:b9:74:
64:ee:7e:d4:25:4d:47:fd:63:ce:b2:2b:19:2b:0d:
f0:f9:9f:95:4e:13:cb:49:6c:1c:53:66:34:64:0c:
5b:f7:35:85:6f:25:e4:ac:13:01:02:76:ad:ce:6e:
95:fc:53:ee:0e:f3:29:ac:c2:47:b9:8b:dd:33:8b:
67:75:11:95:6e:ef:4f:21:d4:0e:3f:c4:7c:94:16:
69:a8:a9:a1:d4:3c:29:48:05:cf:09:3c:aa:1f:17:
87:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A3:ED:2B:4B:4E:BB:FA:39:76:F6:91:42:06:4E:1D:F7:CC:85:5E
X509v3 Authority Key Identifier:
keyid:FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:bd:19:07:fc:aa:7b:0e:0b:5e:fc:2b:19:ba:7e:56:5e:d8:
17:d9:28:bc:d2:7b:43:ae:8e:20:23:a7:8e:f1:c6:3c:6e:bf:
fe:91:25:71:f3:76:6f:58:a2:59:0c:e3:97:81:0f:f6:60:c4:
2c:43:43:d7:25:fe:b0:6f:17:b7:61:51:6b:a2:e4:f6:65:01:
56:50:e7:21:7e:12:84:ac:d4:6e:ef:fe:69:a0:e9:0e:2a:c9:
63:a3:4c:21:4d:73:f1:8b:8e:3e:ec:89:ef:36:4e:9e:28:dd:
87:32:6c:19:ea:cc:eb:bf:50:b9:fc:5b:0d:db:45:80:e1:92:
c6:5a:33:88:06:83:89:ff:a2:be:f3:d9:48:03:94:62:3b:c9:
7d:01:19:9a:fc:2d:aa:71:d4:32:13:b1:99:0a:59:5a:e3:11:
10:27:cb:9f:73:94:ac:31:c8:76:79:bf:9b:cd:8a:54:bd:68:
65:13:24:36:31:c0:5d:b3:4d:25:22:2e:6d:d6:7a:0e:86:e8:
da:ce:48:81:69:1e:e0:0a:ab:0a:b1:33:d2:d0:1c:7e:06:b1:
c9:b4:a0:6f:db:dd:23:fc:28:85:f5:75:83:c0:6f:95:44:d7:
f4:ec:d9:cb:f5:d6:f9:d0:02:0f:a6:88:7f:08:37:bf:76:14:
ca:37:a5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:54 2025 by rpki-client