Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
File: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft (raw, json)
Hash identifier: UDGlv6vKfC0gCy3kqfemR576tbUwk7Mb58qw82C2e+g=
Subject key identifier: A7:44:A3:74:89:F7:2B:E3:39:57:0A:5C:27:55:7D:0A:10:A7:EA:1F
Authority key identifier: FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
Certificate issuer: /CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Certificate serial: 019874BD98BCA95DDBC3EC393A59BCA8DDA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
Manifest number: 12B9
Signing time: Mon 04 Aug 2025 11:00:39 +0000
Manifest this update: Mon 04 Aug 2025 11:00:39 +0000
Manifest next update: Tue 05 Aug 2025 11:00:39 +0000
Files and hashes: 1: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl (hash: dLf7eCEUo+y/rnxrb22k3iPrcRXIHcO7Vnn+1El51s8=)
2: T5P1uF0UtYOhlxgIVxyPu_E24ZA.roa (hash: D5TZHibqLUW4oTHKSJ4ExAAZayO10mFfTENppWTtXa0=)
3: fEMD1Qw1-K78TFax9wsXAdNUiZc.roa (hash: zI5YMBWWK0MgL2oV8W3UKZtv3pFv7wUr61mj7J1xZ8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:98:bc:a9:5d:db:c3:ec:39:3a:59:bc:a8:dd:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Validity
Not Before: Aug 4 11:00:39 2025 GMT
Not After : Aug 5 11:00:39 2025 GMT
Subject: CN=a744a37489f72be339570a5c27557d0a10a7ea1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0e:4c:d2:af:fa:9f:32:a7:ff:28:b5:4a:52:
79:01:bd:1a:6d:88:28:12:03:0d:05:6a:d2:83:57:
39:cd:6a:42:f4:72:b9:1d:09:13:7a:87:f8:99:3d:
7c:c7:39:1d:5d:e0:4d:fe:ba:00:55:42:da:1e:17:
6b:41:de:92:15:12:42:62:48:99:66:ef:c7:23:eb:
7b:75:a5:92:03:81:cc:af:e1:f3:cf:c6:16:19:b6:
27:9a:fd:75:99:08:a7:dd:88:1d:34:77:5a:1b:68:
df:9a:db:16:87:32:ec:0a:92:64:09:73:f0:f3:b5:
76:f0:ab:e8:1d:1d:dd:00:46:12:11:fb:a7:18:e7:
d3:27:b7:85:ca:2c:26:de:cd:04:ef:76:ed:94:53:
b5:12:93:9c:c5:34:ad:fd:cf:aa:3e:f1:6a:c7:3f:
d9:81:73:6e:a5:d0:2f:4e:85:dc:05:27:6f:8c:41:
8a:3f:b0:8f:08:23:67:63:1f:57:df:cb:7d:ba:df:
c2:bb:28:8c:08:fd:ef:eb:9a:9c:ff:a5:12:55:e0:
46:5f:3e:3f:35:21:81:e5:8d:6b:a4:23:a2:ee:26:
56:f2:63:e3:89:91:8d:21:16:a3:0b:76:62:ae:f3:
03:13:7f:a5:fc:35:e3:9b:90:85:09:c2:19:9c:88:
f6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:44:A3:74:89:F7:2B:E3:39:57:0A:5C:27:55:7D:0A:10:A7:EA:1F
X509v3 Authority Key Identifier:
keyid:FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:c4:59:c3:df:31:d8:ec:68:15:07:19:2b:02:5b:19:d0:3d:
7b:97:2f:d3:0e:5a:81:69:c0:fb:17:2e:de:6a:2e:69:b3:b7:
4c:7d:87:a8:af:3c:a4:38:8f:cf:79:d6:4b:55:1b:9f:e2:1f:
1a:df:0b:a1:86:a1:5d:6c:45:1f:58:b0:ce:cc:22:39:83:14:
59:57:00:5a:20:02:41:d9:32:6b:16:60:df:60:3b:74:85:b5:
60:53:c6:9d:40:4a:c0:fc:b1:16:db:9b:7c:62:9f:b5:fb:f3:
a1:76:88:d2:38:67:7a:40:d9:b9:5a:37:f9:55:41:ee:af:ab:
0e:8e:f3:c0:52:aa:80:e0:c4:0d:35:3f:38:07:94:8b:fd:c8:
ab:76:68:61:47:8c:1a:23:c9:67:14:a0:f1:20:36:d9:21:54:
c1:b4:0a:1c:dd:0d:d9:c3:65:ed:b7:4d:11:2f:2c:f4:51:7b:
91:71:a8:22:e9:07:b0:5a:2f:e0:56:e6:70:23:7c:5d:ca:69:
8c:e2:5d:5d:02:78:63:27:b2:4f:6e:b9:2a:e9:34:78:45:82:
10:16:3c:8d:7a:10:4c:fb:8b:da:cc:df:ef:d5:00:d8:d3:e6:
0e:e2:27:f9:46:8c:03:4e:f9:5d:54:fe:6a:a3:65:2b:74:14:
d9:dd:e2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:16:03 2025 by rpki-client