Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
File: 1-jDy9nL7VLpJd8bhpronExwjH_I.mft (raw, json)
Hash identifier: ClAlrkZP7wWgWNe85p+yEV5j+eHVvXwOXKfdUGoKPX4=
Subject key identifier: BD:0A:D2:87:09:48:8B:FC:11:43:C0:59:76:F4:9B:88:C8:91:2B:78
Authority key identifier: FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
Certificate issuer: /CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Certificate serial: 0198898EADF2E7889FE0549B73CE8B13A3D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
Manifest number: 046A
Signing time: Fri 08 Aug 2025 12:01:25 +0000
Manifest this update: Fri 08 Aug 2025 12:01:25 +0000
Manifest next update: Sat 09 Aug 2025 12:01:25 +0000
Files and hashes: 1: 1-jDy9nL7VLpJd8bhpronExwjH_I.crl (hash: TX79XHGh0J++fmgkZZ/W8QkTCE7MpsT8C6gZ0uYGk1Y=)
2: zlH1YpMBnNZnNtFhgB3H0QDkGsY.roa (hash: YxbEBWdcoPz8a52GzX2VTy8310RPqgqc10/H2kW+jig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:8e:ad:f2:e7:88:9f:e0:54:9b:73:ce:8b:13:a3:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Validity
Not Before: Aug 8 12:01:25 2025 GMT
Not After : Aug 9 12:01:25 2025 GMT
Subject: CN=bd0ad28709488bfc1143c05976f49b88c8912b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:88:75:f9:fc:be:9b:ff:64:cc:07:83:3a:08:
6d:90:77:f4:59:bc:1d:3d:b6:9e:db:f9:03:0c:25:
6e:84:a8:ba:60:c7:c0:c4:2e:dc:4d:0a:27:03:72:
4c:3e:44:ed:8d:c1:bf:87:4a:36:88:54:40:a3:71:
e6:25:8b:f2:e7:21:89:cd:c8:a8:b5:e8:e5:ae:aa:
3b:55:da:47:5f:05:47:ab:9a:cf:25:72:7d:3e:10:
56:19:c9:b0:7c:c0:f2:65:47:39:f1:d0:aa:a0:f3:
9c:07:1c:22:4d:06:d6:a8:1e:e4:52:f4:32:08:89:
80:ee:09:db:60:12:e7:4b:d3:fa:29:53:83:5a:c4:
54:b9:b2:dc:16:ee:40:d0:6f:96:84:b9:1e:4d:ca:
97:1d:4f:6d:3f:13:4e:84:89:5c:a2:09:e1:76:f9:
9b:c3:05:5a:d7:cb:d5:fb:d1:56:f8:b2:b2:41:bb:
e0:b9:51:1b:6c:ba:22:b9:ed:d3:82:7a:8a:84:90:
18:63:71:1c:cc:07:b7:55:34:93:a6:5d:32:e6:7d:
fb:44:0d:87:3d:91:24:b0:ef:b5:95:87:9b:c2:c1:
5f:93:1e:e1:e8:6b:6e:9d:29:6e:a6:c7:7b:dd:c9:
ed:1d:89:da:fb:f3:f2:a7:2f:dd:55:18:69:09:da:
7e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0A:D2:87:09:48:8B:FC:11:43:C0:59:76:F4:9B:88:C8:91:2B:78
X509v3 Authority Key Identifier:
keyid:FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:17:88:b0:85:4a:51:15:b9:cd:4a:98:19:30:5b:eb:ae:a7:
9f:dd:ba:d7:09:c9:40:87:38:1e:dc:a0:6f:b5:bb:89:5a:49:
fa:7b:03:a1:6a:d9:06:1b:42:58:48:92:13:05:cd:be:e0:9f:
62:1d:b0:01:29:a5:6b:e8:84:48:90:05:f2:d7:3f:9a:91:14:
6a:73:4d:e5:b4:9b:7a:31:f2:01:51:73:32:97:25:84:ac:df:
1b:e9:b2:39:eb:9b:c7:e9:2c:64:34:9e:fb:bc:47:1b:ce:7f:
d8:98:8b:1e:29:cc:36:4f:75:73:3e:fc:5e:be:91:3e:35:86:
b3:59:57:85:df:a9:0d:01:4f:4a:ae:1e:59:de:a9:7e:7b:f5:
6a:bf:77:3f:07:f9:e8:3f:03:3a:2c:53:83:6e:91:c4:77:f7:
3b:17:38:14:15:88:07:12:22:fb:10:de:10:ae:a3:f3:83:63:
68:e5:75:0d:4e:a5:c6:23:e9:1a:62:99:22:6a:6d:db:93:57:
7c:e3:ae:e6:30:5b:b6:ed:5f:58:fc:84:13:e5:e3:29:ef:fd:
62:1e:04:c2:47:a7:a3:7f:40:54:1f:ac:e1:04:a4:96:a4:f3:
35:9f:92:2a:5b:ea:8a:b4:96:f3:59:da:21:0a:6e:4c:7e:55:
11:f2:27:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:26:41 2025 by rpki-client