Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
File: 1-cJWdFvSc8kYauKWNoohF9PSytk.mft (raw, json)
Hash identifier: pn9peL74QobS0n4hZpx8bkdbwMYRp5+vKK0eS6bnPnE=
Subject key identifier: 33:46:AC:C3:23:6B:66:E1:F7:FE:09:99:F8:59:A3:99:D7:1B:0E:CE
Authority key identifier: F9:C2:56:74:5B:D2:73:C9:18:6A:E2:96:36:8A:21:17:D3:D2:CA:D9
Certificate issuer: /CN=f9c256745bd273c9186ae296368a2117d3d2cad9
Certificate serial: 019880F96E59246728FE47E7BDDFBC8209E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
Manifest number: 0BF1
Signing time: Wed 06 Aug 2025 20:01:26 +0000
Manifest this update: Wed 06 Aug 2025 20:01:26 +0000
Manifest next update: Thu 07 Aug 2025 20:01:26 +0000
Files and hashes: 1: 1-cJWdFvSc8kYauKWNoohF9PSytk.crl (hash: GBYvydu5lkTBzLFSPPM1IAFGkufNCKcZ9Qsh2korrf8=)
2: N0McjdXZl5TUnCSac35uIbLCfTQ.roa (hash: 3oYd1qltvihRo6bFoxlQSV7suemsf1IDfXlwXxFseIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f9:6e:59:24:67:28:fe:47:e7:bd:df:bc:82:09:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c256745bd273c9186ae296368a2117d3d2cad9
Validity
Not Before: Aug 6 20:01:26 2025 GMT
Not After : Aug 7 20:01:26 2025 GMT
Subject: CN=3346acc3236b66e1f7fe0999f859a399d71b0ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:52:bd:a2:79:d6:a5:51:5b:0e:8d:68:32:7a:
78:6b:13:cf:21:04:23:42:de:fd:97:2a:22:cf:f1:
e9:61:4a:82:65:79:fe:49:a3:40:6d:ec:d5:b5:01:
65:4b:44:53:71:e7:cd:64:72:50:ed:77:c5:22:be:
a8:f2:06:a9:88:0d:3d:cc:dd:13:42:1e:de:dc:a2:
c4:3a:8d:f7:c0:22:4e:ef:df:e4:53:a8:34:41:94:
44:b1:56:8e:16:35:54:e4:03:41:ed:38:8f:d7:cf:
83:8f:2e:f4:69:49:1f:4e:e3:94:74:db:65:a5:c6:
66:f7:cb:7c:c8:9c:59:4b:a7:f4:a1:e3:e7:3d:31:
9c:fb:46:84:ca:e5:d5:bc:e5:34:a6:ed:f9:61:2e:
91:67:82:fb:2c:d4:a4:90:2b:aa:7d:f0:d5:e9:38:
13:14:11:be:04:7b:17:61:ff:a9:c0:19:ca:74:0d:
43:2e:20:e2:70:5e:92:ef:f3:87:be:02:84:f5:3c:
8b:3e:09:e2:c1:5c:8b:4c:a4:46:77:8b:6b:9e:ae:
e9:5a:13:60:69:c2:d1:a0:44:80:45:63:b7:e6:6f:
d7:02:f0:c5:6b:73:49:df:be:21:51:5a:79:88:1c:
98:bb:1b:2e:cc:80:1f:0b:25:b1:b8:65:c6:e7:9c:
10:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:46:AC:C3:23:6B:66:E1:F7:FE:09:99:F8:59:A3:99:D7:1B:0E:CE
X509v3 Authority Key Identifier:
keyid:F9:C2:56:74:5B:D2:73:C9:18:6A:E2:96:36:8A:21:17:D3:D2:CA:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:25:2a:e9:97:cd:5a:4a:96:46:7c:a1:72:c1:10:b1:75:a9:
2b:21:02:f9:d1:a0:44:d1:4e:1c:a2:1e:00:46:ad:2c:5b:5a:
29:76:c9:c7:f1:3f:14:fd:a6:0b:e3:01:19:f0:dd:7b:32:0e:
32:00:be:8d:7d:26:b8:ab:a0:ad:c9:82:4e:a9:4c:14:cb:05:
02:18:e3:89:17:ff:69:53:88:17:a1:fa:6a:a7:f5:c7:b2:33:
f6:81:64:4f:f6:96:5c:6d:7a:26:6b:50:5e:56:23:d3:27:90:
e6:7c:9a:4d:f8:fc:be:88:87:21:7e:e9:70:b0:a3:b5:42:dc:
a5:df:28:a3:c6:21:69:7e:11:4c:15:03:69:e9:95:cd:bb:87:
19:8b:b9:8f:f5:4c:0d:34:d8:11:0f:d5:60:0a:93:0f:d6:13:
ea:93:57:17:86:38:da:56:4f:4f:1f:9e:f4:68:31:dd:59:f7:
17:35:da:5a:40:28:af:12:35:db:d5:f6:52:a7:f0:28:33:c1:
08:92:27:2c:7b:4d:c9:c7:6d:95:2a:3a:87:b6:c4:59:8e:ec:
e4:b3:65:17:0f:aa:7e:d9:8a:ff:f4:f4:65:04:10:69:40:a0:
d5:7a:a1:55:41:a7:ba:8e:ef:23:c8:4d:a8:e7:18:9c:78:1a:
6f:f5:6d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:20:54 2025 by rpki-client