Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
File: 1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft (raw, json)
Hash identifier: GTX2JcigfWusrUWyT/QxKNF3yuYdcuM8ZQOtQh8aRh8=
Subject key identifier: 1E:56:40:59:09:6C:24:0F:2C:A0:FF:68:CD:C8:8B:33:C9:67:E7:C8
Authority key identifier: F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
Certificate issuer: /CN=f811fa5eff370bc36d0e3929625e3414081a2392
Certificate serial: 0198801D8270F62F093D199B9757F3635ECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
Manifest number: 1621
Signing time: Wed 06 Aug 2025 16:01:14 +0000
Manifest this update: Wed 06 Aug 2025 16:01:14 +0000
Manifest next update: Thu 07 Aug 2025 16:01:14 +0000
Files and hashes: 1: 1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl (hash: telW/qccuPzFNT4qzQMqdoqF93oCtiGcbDRPC5RS/3E=)
2: LVIJD49T-mpIvZxU62MTl9m9hkE.roa (hash: YaoE67iYSNEdVd0kQd7kfsjxfRQdded3vy+Kv/LAgPk=)
3: PTqvLbs-crQCXH75GKZKj2e3XH4.roa (hash: LPrD3bTGgphahX9ng5Tkg/VWB+najziQTzD7XFs0iFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 16:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:1d:82:70:f6:2f:09:3d:19:9b:97:57:f3:63:5e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f811fa5eff370bc36d0e3929625e3414081a2392
Validity
Not Before: Aug 6 16:01:14 2025 GMT
Not After : Aug 7 16:01:14 2025 GMT
Subject: CN=1e564059096c240f2ca0ff68cdc88b33c967e7c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:59:dd:91:6a:3b:ee:02:65:1d:71:df:fa:45:
98:4c:98:11:54:7b:82:90:e3:30:f8:04:04:36:ca:
01:1b:32:6e:a0:a3:bf:bb:3c:75:56:81:56:23:e2:
76:53:70:c5:6b:d2:93:9c:0e:c5:db:95:44:73:ed:
75:31:47:db:e7:20:ba:9d:26:84:67:2d:90:5e:00:
45:62:ec:da:72:e0:a8:22:9a:5f:3b:2a:f0:a6:f4:
32:87:84:4e:6b:84:02:63:0b:b7:17:61:3e:cd:ce:
1e:c0:37:29:f0:5e:6b:54:0f:db:19:45:40:43:72:
ea:4e:bd:63:a1:a8:03:e3:45:59:7d:05:f8:22:56:
35:a9:a4:0f:2f:1a:b7:eb:97:e2:ba:a2:fc:e4:8a:
b9:5d:00:bb:c8:4a:bf:ad:20:30:31:e0:fd:95:d8:
e2:fa:9b:55:6f:fe:f8:99:5a:b6:cb:30:42:20:17:
81:69:9e:fe:0d:69:52:d9:ec:6a:17:80:8c:fe:2d:
60:f7:4a:3a:1f:5e:e0:c4:d0:e1:19:6f:05:cf:a6:
5b:69:64:99:55:83:94:eb:96:f8:9d:f5:28:e9:43:
6a:9c:10:39:18:ed:96:39:0a:0e:ee:0e:f3:83:df:
b0:ba:6d:df:5a:a3:7e:7f:6a:f8:a9:b7:dc:3f:7a:
6b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:56:40:59:09:6C:24:0F:2C:A0:FF:68:CD:C8:8B:33:C9:67:E7:C8
X509v3 Authority Key Identifier:
keyid:F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a3:7a:df:e9:f3:08:f4:31:54:36:bd:1f:40:97:29:02:44:
64:38:fe:67:86:79:32:51:2e:6d:b8:e1:1c:ca:d5:d2:fb:31:
54:05:4b:1f:30:01:86:d3:d9:ac:38:e2:6b:ca:32:d7:ed:23:
a1:aa:15:13:46:ba:f8:b3:ce:6d:b4:73:a5:0e:f1:d5:5e:91:
cc:3d:7f:9e:22:3a:0f:41:86:e9:7b:64:d1:0e:5d:03:0e:cb:
05:be:32:58:6e:ed:21:6e:da:df:f2:4d:ef:31:f7:9b:aa:b7:
6a:66:43:7c:3e:26:20:e5:88:e9:f8:2f:3d:20:d0:ab:63:29:
c8:59:b9:38:3e:bc:87:56:4b:99:9c:d4:7c:95:4e:c2:dc:5b:
92:ab:5e:22:b7:a3:54:a6:67:9e:e4:bc:0b:60:9a:c3:9a:20:
5a:77:8a:cc:60:37:db:8a:ac:8b:1e:04:5b:1e:d1:e2:9c:fc:
99:98:ff:a5:a6:5e:9b:aa:01:13:4a:ca:56:61:d4:bb:c0:2f:
7c:db:b7:c1:dd:5f:3d:6c:8a:e4:e2:fa:86:50:ea:fd:87:1a:
c4:ee:72:fe:dd:81:58:aa:eb:17:80:4b:a7:b8:b9:16:34:1f:
25:b2:e7:02:de:f9:87:d4:fc:75:6f:18:74:a6:72:6c:54:66:
bf:2b:2a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:26:15 2025 by rpki-client