Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
File: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft (raw, json)
Hash identifier: kJf06GSyD7a9HXO75GzMgmBKdmL24nUmXV8FAYDNpGc=
Subject key identifier: 25:56:D6:DD:C5:A5:C9:EB:9A:6C:1D:D6:1B:79:92:96:9D:02:57:55
Authority key identifier: FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
Certificate issuer: /CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Certificate serial: 019874BE793C463AFEB13B8346F9625F2B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
Manifest number: 0FBD
Signing time: Mon 04 Aug 2025 11:01:36 +0000
Manifest this update: Mon 04 Aug 2025 11:01:36 +0000
Manifest next update: Tue 05 Aug 2025 11:01:36 +0000
Files and hashes: 1: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl (hash: TcCWoY+10RACYJltQU3u130f3xvgVyaLHQ4kWeYoVgo=)
2: VXcC-Aoxwj-rTTGa_uO04BMN16g.roa (hash: VurFkBc53EnvckMEwSnM6ZAN10rC6gV5KJRXaTV9e/k=)
3: jyRg9rzyp13wzC9lPn-bQBVk9SM.roa (hash: DykO+WlsvnZBAvuruj+gmcKA6ANC0St445Gn0td25pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:be:79:3c:46:3a:fe:b1:3b:83:46:f9:62:5f:2b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Validity
Not Before: Aug 4 11:01:36 2025 GMT
Not After : Aug 5 11:01:36 2025 GMT
Subject: CN=2556d6ddc5a5c9eb9a6c1dd61b7992969d025755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c9:40:29:f4:76:6a:19:a2:27:d3:fb:31:ab:
d4:ee:4f:2b:cc:1c:02:89:df:28:87:61:fa:db:e7:
5e:94:51:75:27:54:04:40:32:8e:45:03:1a:70:86:
bb:ca:3b:10:e5:46:81:7b:69:d8:27:cd:f2:56:4e:
51:0e:63:89:bb:95:25:a9:e3:f4:0d:e2:bb:cf:a3:
80:42:06:73:1e:a9:88:d8:42:d3:03:8b:5f:cf:93:
94:ec:1e:d8:cd:a0:ac:87:6e:2e:f1:15:a7:b5:bf:
1e:64:b9:90:6b:de:33:00:f9:2f:84:6e:65:f3:b3:
09:0f:55:53:13:9e:36:4d:56:18:6f:72:77:53:39:
2b:40:c8:5f:f2:f4:e8:d1:bd:2d:de:ba:77:4f:48:
b4:b4:0f:f1:54:31:64:21:bf:2c:2d:f0:6f:22:46:
f5:5c:ae:7a:bb:4e:14:76:06:dc:6c:66:d2:71:f1:
a5:67:a7:e7:91:e2:25:ad:14:6d:51:5a:b7:2f:81:
7e:bb:87:f3:db:8f:db:a0:7f:c7:b9:da:62:92:53:
ac:3f:63:71:23:e5:b2:ff:b5:98:3c:4c:ce:a9:1b:
41:da:8d:c0:a5:76:8f:c9:45:fd:ac:63:dd:bf:b1:
c4:2f:ab:ac:c3:92:1c:ac:11:e0:6e:62:29:f7:00:
fb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:56:D6:DD:C5:A5:C9:EB:9A:6C:1D:D6:1B:79:92:96:9D:02:57:55
X509v3 Authority Key Identifier:
keyid:FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a5:66:d7:bd:d1:60:66:77:b3:c8:1d:f0:47:70:e4:f8:9b:
5b:ea:3c:27:99:3c:0a:f4:bf:14:26:b6:b9:6d:09:78:28:c2:
5d:98:51:1c:96:d9:50:d7:aa:a3:ca:12:e7:47:be:e8:9c:a4:
60:1e:dd:79:dd:67:6a:7b:cd:a6:d7:b2:46:db:56:3f:a6:00:
92:0f:80:a2:26:26:16:43:1d:3e:f7:aa:7c:a9:69:03:15:43:
b7:ca:47:ab:a1:d5:ac:d7:31:2f:4c:70:b3:ca:f1:03:a1:fb:
f8:2a:f4:a8:44:1c:a7:a8:43:2e:4e:ff:ce:d1:0a:64:9c:6d:
0d:d2:04:5c:06:eb:d7:fd:e3:9a:d3:36:0c:d9:ed:87:fc:e6:
e4:aa:fe:bb:ae:a3:5b:be:51:0f:83:64:85:21:51:1f:c1:de:
ea:ec:ee:6d:07:22:83:e8:db:d7:c2:df:11:9e:85:98:d7:ce:
81:51:ad:02:59:ea:72:87:77:33:53:cf:e7:c6:75:03:ac:c1:
3a:ab:60:be:b5:24:e7:13:bf:e8:8b:6e:c3:89:e0:ca:f2:36:
87:de:e2:c8:a1:99:b8:10:50:28:39:dd:d7:1b:e8:ad:77:92:
43:9d:18:4d:63:1b:b8:0b:77:39:c8:cb:5e:43:40:9f:4e:c1:
d3:86:cc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:58:27 2025 by rpki-client