Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
File: 1PvHTNH4egvxbEgvYgHJueskTqI.mft (raw, json)
Hash identifier: h0ttd0THmFw9qUDBOOtTSOyrbCHVOya19i9K9fMp1L0=
Subject key identifier: BF:32:F8:77:8E:57:C6:75:D1:11:95:E1:5E:59:25:B3:06:04:18:B1
Authority key identifier: D4:FB:C7:4C:D1:F8:7A:0B:F1:6C:48:2F:62:01:C9:B9:EB:24:4E:A2
Certificate issuer: /CN=d4fbc74cd1f87a0bf16c482f6201c9b9eb244ea2
Certificate serial: 01989712F1EF013E0B094A41CE8D000325E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
Manifest number: 162B
Signing time: Mon 11 Aug 2025 03:00:57 +0000
Manifest this update: Mon 11 Aug 2025 03:00:57 +0000
Manifest next update: Tue 12 Aug 2025 03:00:57 +0000
Files and hashes: 1: 1PvHTNH4egvxbEgvYgHJueskTqI.crl (hash: pr4P0BwOcbnu77fO/1pZrpOsXP6Vn8LcpuXuU2xejPs=)
2: Lf04Gu4CGxYLcQBclc4AN9VDJLA.roa (hash: dSOlHoyFZA5kqNN/4PjLQn10doJUzZFyYe2NTurY+0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:12:f1:ef:01:3e:0b:09:4a:41:ce:8d:00:03:25:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4fbc74cd1f87a0bf16c482f6201c9b9eb244ea2
Validity
Not Before: Aug 11 03:00:57 2025 GMT
Not After : Aug 12 03:00:57 2025 GMT
Subject: CN=bf32f8778e57c675d11195e15e5925b3060418b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:90:b3:17:7a:23:53:53:b6:34:09:29:51:8a:
4a:e9:f0:d3:cb:31:30:5d:db:8d:3a:a5:61:15:a1:
fe:2c:b6:de:53:37:11:f5:8a:b5:b5:8e:29:1a:9b:
a8:46:0f:46:7d:d4:8e:37:ae:60:51:c1:5c:c0:42:
96:5c:88:c0:6f:c6:cd:cc:06:c8:9c:57:a2:48:83:
06:3f:b5:86:fc:46:4c:cc:5c:3f:d9:eb:de:bc:f1:
99:75:cf:96:0e:bd:e5:06:d4:81:e4:61:32:f5:f7:
33:53:5b:a6:06:f7:6e:c2:9f:de:09:e6:26:60:2a:
52:e4:c1:77:a3:c5:e8:e4:f5:19:55:44:cd:1c:1d:
51:44:7c:7f:ab:61:08:a4:7c:af:bf:92:5c:50:20:
d3:49:64:97:a3:f7:2a:1f:f6:74:47:90:e4:5a:ac:
15:33:6f:98:d1:d1:e5:f2:42:38:be:ce:18:96:d1:
06:b8:f3:12:f4:7a:29:d8:de:46:25:87:94:7a:01:
d7:fa:87:f1:59:2a:bf:8a:48:24:f8:60:19:61:4b:
a2:77:67:3a:b3:ee:86:96:4a:1b:51:9d:f7:9e:a1:
db:ff:24:b9:d1:87:46:da:fc:b6:39:b8:70:3c:25:
08:ba:ea:51:21:6f:2d:77:90:89:90:6d:f0:23:cc:
33:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:32:F8:77:8E:57:C6:75:D1:11:95:E1:5E:59:25:B3:06:04:18:B1
X509v3 Authority Key Identifier:
keyid:D4:FB:C7:4C:D1:F8:7A:0B:F1:6C:48:2F:62:01:C9:B9:EB:24:4E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:50:e6:64:da:a0:21:64:17:fa:db:6d:55:60:2f:6d:4b:e5:
87:63:36:5d:ac:bd:b3:76:0d:af:d6:9f:c2:ca:d6:e5:b4:b6:
fb:6f:06:cf:13:89:8c:6a:1d:5c:72:cb:7d:c0:81:be:d9:d2:
96:55:53:32:d4:c1:71:c5:86:d4:56:2f:ac:46:fd:8e:a0:97:
98:4a:2d:5c:8f:d7:35:06:9e:4e:43:14:ae:fa:e6:48:e4:7c:
b7:91:ab:44:69:d9:db:28:d6:3b:ad:af:77:22:ad:96:3f:04:
69:25:b7:93:a7:92:b5:8d:d6:03:fa:15:07:58:57:50:01:17:
b7:35:35:50:47:98:a0:c2:de:9c:8c:1e:07:db:f6:78:22:4e:
d6:cf:94:75:3c:fd:e8:fe:94:68:9f:9a:71:c1:03:e3:30:e6:
99:9f:35:25:e6:06:21:32:f7:a6:6b:fe:ac:2c:35:2e:d2:41:
94:37:af:a2:15:de:62:6b:c1:cc:79:43:ee:77:d2:3a:18:35:
c0:ba:09:27:d7:a5:51:2a:5e:42:97:f5:9f:55:3f:c1:e1:ff:
f1:41:7f:d2:ec:45:4f:24:a2:ab:67:7d:31:e2:d5:9d:8f:d3:
27:f9:f3:1d:21:f3:27:83:d8:62:f2:e0:56:70:4a:07:7e:79:
bf:4c:f5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:54:19 2025 by rpki-client