
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
File: 1-puJ82fU-5UCh3AfYtSgObf2yyA.mft (raw, json)
Hash identifier: nOmPCV8Ocpa9P6NI9A1dr+S1DUMrdt8mpKzCnVnJCNc=
Subject key identifier: E8:D8:73:1C:EF:35:4B:E7:40:55:57:36:0D:C1:F1:40:D2:41:2D:38
Authority key identifier: FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20
Certificate issuer: /CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20
Certificate serial: 019880C2455826535120AD37161821EB3135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
Manifest number: 142B
Signing time: Wed 06 Aug 2025 19:01:12 +0000
Manifest this update: Wed 06 Aug 2025 19:01:12 +0000
Manifest next update: Thu 07 Aug 2025 19:01:12 +0000
Files and hashes: 1: 1-puJ82fU-5UCh3AfYtSgObf2yyA.crl (hash: ZfvtkIbsIMYkGthtvEGWjslyNcIWK0NF8jlbRWHLIIE=)
2: BkhUnEeKLpdw7zqQsCW8fb_TG_I.roa (hash: krWgcFHtgzZmGIlUNG6InVr0KfezPC+cFYoPcdTkKaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:45:58:26:53:51:20:ad:37:16:18:21:eb:31:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20
Validity
Not Before: Aug 6 19:01:12 2025 GMT
Not After : Aug 7 19:01:12 2025 GMT
Subject: CN=e8d8731cef354be7405557360dc1f140d2412d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3b:45:c7:c4:e0:49:98:57:55:75:00:f0:c7:
d6:48:6f:0d:70:28:d2:23:54:a9:c1:56:96:56:d3:
54:f9:f6:46:08:10:41:69:6e:ee:d8:1f:4b:b7:4e:
fa:42:93:e3:48:99:32:06:15:d0:f8:b6:cb:da:6e:
77:ad:dc:9b:2c:85:ce:fc:97:53:28:8b:7a:bf:31:
b5:58:e2:ba:0e:b8:8e:d4:75:45:69:ad:46:82:86:
37:e2:7d:03:04:d4:7f:ec:f6:66:4c:ae:f7:cb:58:
f9:9f:08:fb:06:db:a7:52:80:8b:87:26:3c:76:bf:
d3:8e:5c:76:8f:83:ab:bc:94:51:52:4a:9c:be:a0:
26:47:73:70:83:ce:bd:de:73:3a:05:36:09:50:0e:
7b:96:21:a0:11:75:29:00:8f:7a:48:e9:e1:c3:c0:
94:0e:fe:db:f3:33:1f:fb:48:6e:a3:07:fc:99:a5:
de:ed:be:f5:11:cc:44:2d:98:c5:c7:f9:60:43:53:
15:78:2d:10:6f:f7:5c:3d:ed:00:f5:20:e5:e9:b6:
28:52:51:6a:54:21:55:08:92:39:fc:92:5b:59:a6:
28:a7:3e:f5:83:2a:42:87:f0:13:78:b0:a4:48:56:
ce:af:b1:31:23:41:a9:fc:26:cc:2c:b7:5f:12:a0:
75:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D8:73:1C:EF:35:4B:E7:40:55:57:36:0D:C1:F1:40:D2:41:2D:38
X509v3 Authority Key Identifier:
keyid:FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:a3:91:37:cd:84:43:eb:17:be:f1:15:72:f7:08:90:90:8c:
f7:78:ff:ac:0d:a8:5d:df:29:b0:88:93:75:b7:cf:a0:44:24:
7e:cf:8a:c3:89:9f:af:d6:17:a0:5a:39:14:cb:69:78:b1:61:
c9:55:d1:f1:90:90:3f:5f:39:16:a8:cc:d5:6d:87:0f:4b:dc:
82:7f:c4:f6:3e:e5:c4:73:f8:01:37:3a:96:c6:f7:74:65:3c:
7c:0a:3f:7a:26:d5:89:34:64:8b:1d:54:48:e0:ea:31:5b:82:
3d:9f:5e:bc:b8:b0:cb:aa:63:1c:86:ec:7e:89:0b:da:1e:ea:
cf:0d:53:73:2d:7f:5f:c7:fe:50:07:0a:4a:8b:43:4f:8c:8b:
60:99:63:f1:ee:ad:37:c9:90:c7:e2:45:c2:b5:b0:49:05:da:
0d:c8:fd:6b:76:a6:63:5e:6a:0b:4b:74:8e:29:bf:c2:36:4a:
10:14:d9:84:b8:77:1a:ea:39:4d:5d:07:c9:0e:e7:a9:41:9f:
fe:5a:a9:60:c5:42:b0:3d:8d:ab:4d:85:01:38:2d:52:69:da:
e2:db:55:97:ad:56:56:eb:c8:58:cb:6a:11:91:e7:2f:9e:2b:
01:44:4a:ab:42:ec:d7:99:17:f6:13:40:db:57:c9:e7:8c:b1:
27:8a:74:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:11:11 2025 by rpki-client