Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
File: 1P3VliZ9VvfOVuv67IajJwj-3gA.mft (raw, json)
Hash identifier: ME4ExMbduGpTtFNYtNVcDxXpOH6ieiEYJvmkl1sWspM=
Subject key identifier: FA:B8:AD:FA:31:50:26:3D:DF:F9:AD:83:19:37:CF:4C:BE:AB:F6:1F
Authority key identifier: D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
Certificate issuer: /CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Certificate serial: 0198A04CF63A9B5240F43B28359CE401C940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
Manifest number: 1634
Signing time: Tue 12 Aug 2025 22:00:54 +0000
Manifest this update: Tue 12 Aug 2025 22:00:54 +0000
Manifest next update: Wed 13 Aug 2025 22:00:54 +0000
Files and hashes: 1: 1P3VliZ9VvfOVuv67IajJwj-3gA.crl (hash: bb47e/xM4DwKnG4A+GEbWqlmka10J7VaN4DQ44GxNyc=)
2: kXAoycjFnk5ToJYqqTkBxzOraGU.roa (hash: +7rp8yWmgsLGmzgq1w+1h/kN+7iJKvOfloIbj12Qykg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4c:f6:3a:9b:52:40:f4:3b:28:35:9c:e4:01:c9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Validity
Not Before: Aug 12 22:00:54 2025 GMT
Not After : Aug 13 22:00:54 2025 GMT
Subject: CN=fab8adfa3150263ddff9ad831937cf4cbeabf61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dd:07:cd:f0:61:31:14:95:87:bd:70:e2:46:
59:f7:db:5f:a9:88:d1:b9:9b:f0:42:db:c2:fd:a7:
1a:19:04:38:01:fd:44:c8:9f:c2:4b:6b:72:3b:fa:
9e:df:89:07:10:1f:c4:93:69:55:ff:d6:31:c6:f2:
c0:f9:7e:a8:44:78:a4:8d:6c:1f:04:94:f9:e3:56:
29:5e:48:c3:0c:80:5b:b5:ad:0b:f3:6e:0c:7a:6f:
53:6a:a2:62:e2:eb:68:b5:65:86:fc:c1:21:94:16:
bc:87:5f:f3:b4:5e:dc:44:f6:99:c9:a0:81:e8:fb:
74:43:79:4b:c8:80:0c:53:82:81:06:15:cb:40:a8:
7d:ba:8a:52:37:6d:bf:f1:95:08:0a:b6:0b:1d:86:
ea:c5:24:15:9c:d7:9d:c4:1c:38:b0:43:0e:65:43:
7a:11:ef:cf:8d:0b:9e:d7:12:50:74:10:54:8a:01:
13:0a:8d:99:c4:52:64:b4:19:d1:9f:86:0a:7e:80:
f3:4f:93:29:cc:2c:93:9e:f9:06:b9:de:99:83:06:
17:0e:62:a6:97:4c:1a:d1:2b:ad:f8:8a:ff:a2:1f:
e6:ed:dc:21:fe:7b:da:7b:0e:b0:b6:45:62:1d:a6:
16:15:2d:f1:dc:ff:10:15:f3:1f:51:ec:55:e4:de:
cd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B8:AD:FA:31:50:26:3D:DF:F9:AD:83:19:37:CF:4C:BE:AB:F6:1F
X509v3 Authority Key Identifier:
keyid:D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:95:00:c7:a2:29:9c:9e:a9:48:66:97:f6:a7:51:e7:42:7f:
d1:d6:26:6f:86:e9:d4:83:8f:ec:a3:9a:e2:48:a3:d7:0a:38:
db:34:fd:a2:2f:15:d3:b2:b2:23:fc:69:73:ce:db:ff:c0:0b:
2a:6f:ad:8c:3d:42:64:79:9e:6c:cd:e8:cc:59:a3:1f:6f:86:
2f:30:c1:da:a2:30:fd:c0:87:86:9c:c2:14:4a:c8:ed:1c:27:
2b:43:ae:2a:6f:64:52:fe:37:94:d2:15:59:be:ae:ec:a7:20:
d7:c2:2b:c9:61:41:a1:42:44:69:19:d9:38:b3:18:78:46:08:
be:4c:ff:5e:27:55:7f:cd:92:1b:27:cf:65:f6:19:e1:3b:0d:
b0:e7:11:98:0c:23:6f:48:d7:b1:07:b4:c2:51:51:6a:c5:76:
14:f0:02:36:be:32:da:a9:1b:43:39:ad:8e:03:95:da:43:03:
77:7f:56:15:6a:55:d2:2a:ae:72:0e:cd:11:98:54:88:35:6e:
17:87:73:4b:cd:2e:9f:1d:1e:fa:9a:f0:d7:6d:87:68:26:f3:
52:5f:98:6a:94:f4:14:51:73:c0:ec:ca:6d:50:6c:a4:ad:2e:
24:71:c1:49:c1:7c:7b:9e:20:0d:92:75:4f:e7:00:e1:eb:a7:
8f:51:39:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:28:35 2025 by rpki-client