Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
File: 1-xoI20YpW03oryufkNb_x2zKMZo.mft (raw, json)
Hash identifier: SqYwPGvD5ZsFBSQryIV3zWDVT4C06JFRf7d4n49IYQw=
Subject key identifier: 3E:49:24:49:12:DD:0B:65:FF:4A:E8:D1:70:05:39:E2:6F:F2:20:2C
Authority key identifier: FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
Certificate issuer: /CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Certificate serial: 019892231F48EDF15DB6CBCDD6EFD8097E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
Manifest number: 1624
Signing time: Sun 10 Aug 2025 04:00:31 +0000
Manifest this update: Sun 10 Aug 2025 04:00:31 +0000
Manifest next update: Mon 11 Aug 2025 04:00:31 +0000
Files and hashes: 1: 1-xoI20YpW03oryufkNb_x2zKMZo.crl (hash: tbc4uhtQ9Arl56ISb5jHWcH/uNaJr+dW2CKHyT71G2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:23:1f:48:ed:f1:5d:b6:cb:cd:d6:ef:d8:09:7e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Validity
Not Before: Aug 10 04:00:31 2025 GMT
Not After : Aug 11 04:00:31 2025 GMT
Subject: CN=3e49244912dd0b65ff4ae8d1700539e26ff2202c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1e:1e:03:ed:f0:5a:e1:7a:31:31:5a:3e:8e:
b2:6d:93:99:62:87:d3:54:2b:77:d1:68:0e:12:95:
5e:a6:48:6a:ef:a1:5e:28:d5:7d:3d:ce:ae:a0:44:
7a:d2:05:03:b4:52:a0:e9:72:75:90:af:d2:d8:d7:
16:25:f4:db:f4:91:99:72:54:79:40:99:71:77:af:
0c:ac:df:ae:57:b2:27:53:fe:6b:14:3a:3b:22:70:
0f:5c:34:e9:9b:99:c9:1f:76:63:03:c6:d7:9c:39:
55:ae:3b:4e:37:34:c7:a9:88:a0:eb:15:53:55:98:
66:c1:28:04:50:d1:ae:0e:57:52:f2:f6:c1:c1:42:
1e:96:0d:a0:54:9d:33:d3:2b:84:00:4f:99:33:37:
46:b6:85:4b:a5:5c:fe:ee:3b:28:22:dc:01:4a:16:
ca:03:69:38:3f:04:cf:0e:1a:c4:87:59:87:d6:e9:
0a:b7:1d:48:7f:dd:f0:65:9e:ff:72:e4:06:7f:d8:
92:1b:83:6a:1b:51:6e:df:ee:8b:87:88:a0:a4:c5:
0d:49:0e:55:d1:2d:58:17:7c:af:35:4d:4f:f0:c7:
f7:35:a0:78:d1:65:8c:4b:f5:d6:c5:23:d2:76:dd:
89:7c:71:20:be:6b:1a:18:ec:0b:f9:c2:d0:4e:36:
41:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:49:24:49:12:DD:0B:65:FF:4A:E8:D1:70:05:39:E2:6F:F2:20:2C
X509v3 Authority Key Identifier:
keyid:FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ee:d2:0e:f2:ec:ae:cb:ee:b7:60:36:00:2d:41:14:4d:17:
1f:78:bc:75:18:7b:76:bd:d8:08:87:b2:42:80:84:89:21:98:
17:6f:8d:f4:e7:e7:51:7f:a7:82:da:8a:ae:7b:87:22:1c:ea:
0c:ab:50:60:30:b7:fd:4d:9d:0c:cc:63:f6:bd:96:9c:63:f4:
02:68:53:c6:23:16:e4:2e:2c:0b:f8:84:8c:21:33:02:80:8f:
4f:be:c7:eb:23:9e:34:5c:b6:f4:fb:21:7a:b2:4e:58:e8:40:
ab:ab:82:85:86:f5:4a:ce:21:20:65:d7:de:1e:27:49:3e:27:
6d:6e:61:b0:ca:92:f6:4e:22:ff:91:fa:1b:98:af:ec:5b:7d:
8a:15:14:de:10:4a:38:10:af:f3:79:ae:94:19:4f:b0:df:c2:
72:57:96:91:d3:00:c0:92:72:ee:e8:f1:27:fc:ff:4a:cc:76:
dc:61:57:e3:11:cb:bd:db:e5:9e:ed:25:5b:3f:bc:f6:76:9d:
26:01:79:ad:92:58:7e:bb:51:8a:e1:f9:ec:7d:62:50:e5:70:
e1:5e:40:49:0e:05:f9:2c:1b:b2:df:62:25:99:bb:91:09:15:
08:d5:25:1d:50:a6:0c:ce:39:c0:75:28:23:a7:e2:ce:fe:e5:
70:ff:5b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:45:22 2025 by rpki-client