
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
File: 1-_zUUVtJMDkhZ1jec45PGujjIkw.mft (raw, json)
Hash identifier: WfQG1/emUDgyNVSGRgmn9KSwfFoDZI+QeqRuLERMOgc=
Subject key identifier: BE:BC:73:CC:AC:5C:4D:DB:CF:1F:68:3C:E1:AF:80:E6:24:3D:C2:2F
Authority key identifier: FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C
Certificate issuer: /CN=fbfcd4515b493039216758de738e4f1ae8e3224c
Certificate serial: 019892FF095C7BE691033CCB2C7E62B990C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
Manifest number: 1049
Signing time: Sun 10 Aug 2025 08:00:44 +0000
Manifest this update: Sun 10 Aug 2025 08:00:44 +0000
Manifest next update: Mon 11 Aug 2025 08:00:44 +0000
Files and hashes: 1: 1-_zUUVtJMDkhZ1jec45PGujjIkw.crl (hash: 6dmabc937hfLrLPh5yxslni90HtIteU9ipdOW9a/oR0=)
2: eWonEOCqO1vviTWWC4HukImo8zA.roa (hash: sMT1P9/4Uirj38sOSO6BfhAmJiAf2rmN1xaNoG1qFVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:ff:09:5c:7b:e6:91:03:3c:cb:2c:7e:62:b9:90:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbfcd4515b493039216758de738e4f1ae8e3224c
Validity
Not Before: Aug 10 08:00:44 2025 GMT
Not After : Aug 11 08:00:44 2025 GMT
Subject: CN=bebc73ccac5c4ddbcf1f683ce1af80e6243dc22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:14:6b:2b:9c:68:d6:20:5c:a0:bd:a9:bd:34:
d2:6e:63:b5:d0:45:47:99:12:58:2a:f4:0b:69:f1:
4f:83:e3:cb:42:48:c6:eb:7e:30:bb:ef:0b:9a:a9:
c9:28:dd:3f:95:59:71:c0:b8:48:1c:8c:95:26:40:
a8:89:50:f2:6e:d1:a4:0d:b7:3b:9d:60:aa:d6:f5:
af:cf:19:18:4f:e4:18:77:6f:9a:85:be:a3:52:58:
27:1b:cd:25:e6:b7:11:a9:2b:28:b2:85:50:ba:af:
ec:d7:1a:27:1b:3d:4b:40:de:ff:f3:29:a0:71:41:
71:6f:68:76:40:dc:b1:bb:d0:f3:ea:b4:36:1e:67:
b2:ad:4d:45:c1:63:c5:5b:0a:92:7c:ca:e0:72:7f:
a7:4a:56:b2:df:bb:89:1e:34:0a:4d:bd:d4:5a:50:
fa:58:c4:9e:b6:ff:66:68:5d:fb:0d:3d:00:91:68:
3b:b8:d4:9a:79:ef:7f:c9:76:03:c7:34:11:2f:90:
ff:2f:ed:2a:93:1d:38:61:55:39:8e:16:d8:7a:a7:
f9:9d:5e:2c:38:fc:a0:8c:ed:b8:e6:cc:b1:9d:2f:
53:d1:80:ca:17:5c:d1:0c:1b:db:bf:3d:58:11:31:
ba:14:01:be:e6:57:d7:fd:5c:32:b4:f2:b7:9b:f4:
61:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BC:73:CC:AC:5C:4D:DB:CF:1F:68:3C:E1:AF:80:E6:24:3D:C2:2F
X509v3 Authority Key Identifier:
keyid:FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:af:ac:c5:5c:7a:c1:00:be:4e:13:d8:4d:52:be:15:17:dd:
ec:06:7f:7a:d9:0b:5b:67:af:1e:43:84:2c:bd:62:bf:a8:c1:
fa:db:91:5c:cf:fc:a4:62:67:5c:62:5e:82:84:af:0d:9f:1b:
8e:27:e4:b5:88:4f:d3:42:5b:cd:df:09:df:60:9c:3a:b8:7e:
a9:b3:ad:75:72:97:73:73:92:c6:70:d8:3b:36:e5:1b:c6:30:
b1:8e:94:a1:db:10:be:11:d9:d6:e1:20:79:4a:84:35:32:d1:
dd:62:99:c7:02:98:0a:1c:b9:a5:66:a4:6c:68:a2:3c:2d:44:
e7:d4:ad:31:5d:8b:43:13:59:f4:42:4f:79:d3:0e:d3:96:6e:
cd:6a:1b:f1:cd:de:6c:ac:78:d3:8c:6a:88:c3:5d:e7:6c:09:
9a:a0:0d:78:55:a3:28:25:f9:b9:c7:94:21:07:da:a7:23:1a:
d1:90:95:29:9c:94:f1:44:e2:b8:bf:72:9c:fa:03:42:3f:4f:
5e:84:6d:a2:65:30:68:12:b1:6f:db:f3:2c:38:15:b5:b3:db:
11:0a:8b:c2:1f:a8:91:97:15:db:33:3f:f6:de:b2:f7:c1:b1:
75:42:84:c5:c2:86:e1:87:c4:3e:42:0a:eb:ff:32:a4:c6:f0:
00:e2:0c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:46:47 2025 by rpki-client