Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
File: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft (raw, json)
Hash identifier: LZ0H1hDscc8NPDHz38aviAw8W3hKP8xG5F9HeSXSR+U=
Subject key identifier: 6B:CE:6C:6C:20:C1:70:FF:DC:72:91:CC:4C:36:E8:5A:E7:3F:D1:35
Authority key identifier: D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
Certificate issuer: /CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Certificate serial: 01987DC0F3F0C9B9C89D8D22D9D00D3D3723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
Manifest number: 0681
Signing time: Wed 06 Aug 2025 05:00:53 +0000
Manifest this update: Wed 06 Aug 2025 05:00:53 +0000
Manifest next update: Thu 07 Aug 2025 05:00:53 +0000
Files and hashes: 1: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl (hash: fvE+uygLFJvpPnn0Tyme6aYbdBTBSq2CUPFssgDshtI=)
2: VggHyCGAaBqT1YS8rDtl_KIKf0g.roa (hash: ViUcKTn2EWx6jkDRARIAQEFwd2YhU52ckTDp4ZosIG0=)
3: p_i4xl5EipcKtC3SPVXhIuYprDw.roa (hash: JFa6mX6HD50RoNNNUoDQdjnuPBe7vWX9ha3WyuSEprs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c0:f3:f0:c9:b9:c8:9d:8d:22:d9:d0:0d:3d:37:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Validity
Not Before: Aug 6 05:00:53 2025 GMT
Not After : Aug 7 05:00:53 2025 GMT
Subject: CN=6bce6c6c20c170ffdc7291cc4c36e85ae73fd135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:0c:44:e2:c9:a6:43:d1:5c:43:67:f8:4e:
9a:3d:f2:c4:7f:5d:cc:6a:fb:75:ab:d4:c9:5e:3c:
71:c2:1c:a7:32:f2:ca:b1:d8:23:70:dc:1c:9e:e0:
3c:31:5a:ad:3c:14:50:4f:96:da:26:8a:c5:ad:c4:
8e:1a:bc:f0:30:36:e7:da:11:98:fe:95:e9:6a:01:
cb:25:86:b1:0f:e7:6f:06:c0:13:2a:62:43:05:6a:
99:34:44:b1:51:55:55:3c:87:5e:1d:e8:2d:bb:91:
7c:0d:bb:2b:ca:32:dd:17:bd:20:52:c8:e3:a8:05:
19:b6:d1:6b:dd:5b:f8:9b:c4:5b:5c:50:bf:cc:fb:
80:c5:93:26:69:90:52:72:b2:ff:50:b8:ee:19:53:
64:60:69:4b:bd:52:19:09:35:be:72:7d:1f:e2:09:
46:99:df:d3:e5:62:78:26:1e:9f:97:1f:f9:df:37:
7b:e6:9d:3c:43:1d:21:f4:eb:41:c0:c8:a6:ee:38:
82:1c:7a:de:1a:d5:d7:ea:0b:44:0b:56:69:d6:ec:
93:71:62:33:e2:ce:a9:69:ce:8b:49:00:65:cb:4f:
1e:e3:f5:db:10:53:e1:c9:7a:9d:34:7d:13:14:1d:
e6:ba:69:1e:7a:7b:7b:40:b2:8c:fb:22:ea:18:5a:
ef:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CE:6C:6C:20:C1:70:FF:DC:72:91:CC:4C:36:E8:5A:E7:3F:D1:35
X509v3 Authority Key Identifier:
keyid:D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:db:bc:ff:c9:52:e4:7b:80:47:86:3a:30:0e:9d:5b:2f:fb:
6a:d3:e0:de:d5:26:b5:5c:ed:08:66:7a:3b:0d:73:5b:4c:64:
3b:44:d5:4f:e2:c4:75:ab:cc:3f:d2:4b:d0:0b:41:19:05:75:
94:52:52:c1:35:69:e0:ee:e0:e8:69:c8:e5:41:c3:9f:ed:b4:
40:27:c2:7e:b7:30:b2:dd:be:9a:c9:27:c6:4e:07:11:f3:99:
2c:63:3f:4e:1e:49:54:f2:9b:59:59:01:48:cb:da:ab:1d:9a:
bd:0d:6b:5a:1c:f1:8c:11:eb:a1:48:31:0d:a1:31:37:e2:cf:
21:03:bd:72:91:dd:d5:82:c1:c1:64:69:bb:14:96:2e:eb:e5:
cb:74:74:b5:af:55:3f:61:8c:61:70:14:4c:bd:64:ae:bb:60:
6f:9e:fa:33:38:38:ae:1f:15:1c:e2:6d:1a:c7:f6:1e:01:a7:
c8:2a:39:c1:5b:fe:d1:19:fb:37:41:0f:0f:56:1a:cd:f2:d1:
b7:49:7d:dc:be:17:33:55:0f:8d:16:bd:63:c8:25:62:89:de:
10:ae:d3:2e:e1:89:e2:c7:73:90:8f:14:f8:e2:1f:a3:e0:b1:
71:e6:fc:15:31:3d:3a:00:1d:18:d4:fa:f8:9d:fc:36:99:68:
e7:8d:62:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:58:32 2025 by rpki-client