Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
File: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft (raw, json)
Hash identifier: jHlgBv/P38j12AlVT0Y6UR7n4TYSksJBr/o+upL1s8w=
Subject key identifier: 32:DC:DD:18:FB:1E:DC:9E:31:88:CE:0F:02:4B:7F:B0:B0:D7:76:24
Authority key identifier: F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
Certificate issuer: /CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Certificate serial: 01989600C0BECCFCD98DAD7E4594E40C7B3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
Manifest number: 055A
Signing time: Sun 10 Aug 2025 22:01:28 +0000
Manifest this update: Sun 10 Aug 2025 22:01:28 +0000
Manifest next update: Mon 11 Aug 2025 22:01:28 +0000
Files and hashes: 1: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl (hash: ROxWStDf3ZHlRCA7pekwut9ibufMzodHHaEeGm1kqI8=)
2: S2hU1G91sKiWUh8YeDBY-hdp4ZQ.roa (hash: vffsi4me5kbuxqBTjwviA+XxgoZKSQ7xUMSzQTNSOQs=)
3: vexU20eqD75GiV-RYHWmgxEH73I.roa (hash: nDoTWPqSH3IWThsKOgFZF4UZDo4G9OwYH0ta4b9ZP0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:00:c0:be:cc:fc:d9:8d:ad:7e:45:94:e4:0c:7b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Validity
Not Before: Aug 10 22:01:28 2025 GMT
Not After : Aug 11 22:01:28 2025 GMT
Subject: CN=32dcdd18fb1edc9e3188ce0f024b7fb0b0d77624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9f:6b:d3:e1:05:79:ec:ac:da:33:c9:72:80:
fc:13:10:e1:0e:01:97:7b:a6:ad:f5:82:7c:8c:21:
72:36:e2:62:d7:0e:50:f6:ba:37:4f:f1:77:9e:79:
77:2a:90:5d:83:df:43:98:f6:05:0d:6e:8a:4b:f9:
4f:a2:d2:53:b2:3b:a0:be:9c:65:12:50:e6:32:63:
c7:d2:05:26:c7:11:67:e0:4f:34:7c:a7:4e:99:5d:
70:05:f2:7f:9c:7a:d9:57:20:25:10:01:b9:bb:0b:
d8:a5:f1:0e:94:b5:cb:52:cc:b2:3b:3b:57:63:66:
ec:0e:b8:fb:fa:db:2d:46:4f:8c:e0:b6:9a:0b:72:
77:2d:cc:b6:b1:1c:7d:72:fa:fd:44:6d:95:c5:b9:
2f:73:35:50:fc:e0:14:51:23:47:e7:82:ad:bc:60:
46:92:01:c7:14:0a:74:8e:ce:74:ee:73:fc:d5:44:
a5:3b:a8:2c:dd:93:f1:69:37:93:aa:c5:41:a5:4c:
be:8f:54:09:ab:51:ab:2e:25:40:50:8a:cc:9f:d4:
f2:81:21:d8:19:35:86:3a:12:c6:12:3c:7b:11:90:
64:ea:c9:00:e2:8b:1c:13:6b:4f:ed:d2:b6:cd:d1:
a0:7d:09:23:4d:b5:ff:d8:33:4f:ed:e7:87:6d:1f:
6a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DC:DD:18:FB:1E:DC:9E:31:88:CE:0F:02:4B:7F:B0:B0:D7:76:24
X509v3 Authority Key Identifier:
keyid:F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:de:10:65:21:87:de:9b:fe:ff:35:86:3b:47:53:3d:c6:54:
8f:fa:24:87:5b:f2:cd:f2:f1:cc:e2:47:7c:8f:fc:68:a7:df:
2a:bc:c3:d4:99:a5:43:81:f3:fb:65:45:67:4f:cd:06:f1:46:
2d:79:d6:6a:db:a3:38:c9:40:7d:25:fa:36:7b:66:ac:de:4e:
9d:09:43:8e:f0:7f:ac:a5:65:51:7e:e3:f6:c2:ed:41:19:d0:
01:07:8e:5c:82:10:1a:55:af:5f:b5:fd:8a:45:ee:b0:18:6d:
dc:ca:42:1e:e1:6f:6d:68:49:9c:66:53:c3:a2:b6:7f:2a:9a:
4d:7f:78:a6:7b:ae:c7:a3:5f:ee:e0:00:c2:7c:dc:97:4a:b4:
cb:98:2c:ce:1b:0e:95:d5:b2:4a:9a:e3:a1:3a:af:6d:9d:e6:
cc:69:db:37:19:78:f7:f4:a6:85:22:02:05:a1:d2:c0:fe:ec:
8f:b5:06:d7:84:4d:af:a4:8e:3d:b9:af:d2:72:80:72:43:4f:
54:25:3b:24:55:84:6a:ea:b4:86:45:29:c0:3f:c1:45:7e:03:
d7:fb:79:95:fa:07:04:39:54:09:11:0d:34:5a:ec:09:6b:3e:
bc:ba:ef:82:7b:e5:3d:bd:74:61:b6:b4:3f:e3:2a:20:2d:28:
68:27:95:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:46:38 2025 by rpki-client