Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
File: 1flHhtA2aFRAkBo9zlozTPEycqA.mft (raw, json)
Hash identifier: 10ObfgvNiWMabqgvu6xql8rxT88+RVQ/9bFAKXWYu1g=
Subject key identifier: BD:C9:BB:8B:73:44:9C:11:43:DF:82:AC:FE:52:BA:25:43:05:9B:CD
Authority key identifier: D5:F9:47:86:D0:36:68:54:40:90:1A:3D:CE:5A:33:4C:F1:32:72:A0
Certificate issuer: /CN=d5f94786d036685440901a3dce5a334cf13272a0
Certificate serial: 01987450A4B6CCEDF4B6CA574D42B853C1AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
Manifest number: 0A67
Signing time: Mon 04 Aug 2025 09:01:38 +0000
Manifest this update: Mon 04 Aug 2025 09:01:38 +0000
Manifest next update: Tue 05 Aug 2025 09:01:38 +0000
Files and hashes: 1: 1flHhtA2aFRAkBo9zlozTPEycqA.crl (hash: NYJiixIbSmu6qA3NGpQLjsHW7IyWqTyiN4MJXItZA14=)
2: axjnfZLg_Tc1d6ZsOwItmppUeQ4.roa (hash: L++63wCXKAgo0Nta63++qRFUhLIAbDFglc5Q/4n9sQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:a4:b6:cc:ed:f4:b6:ca:57:4d:42:b8:53:c1:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f94786d036685440901a3dce5a334cf13272a0
Validity
Not Before: Aug 4 09:01:38 2025 GMT
Not After : Aug 5 09:01:38 2025 GMT
Subject: CN=bdc9bb8b73449c1143df82acfe52ba2543059bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c4:63:00:df:b3:3c:58:17:77:25:c8:60:0d:
d6:39:cc:9c:f4:bc:8a:c8:7e:c1:05:de:21:08:6e:
5b:76:97:05:66:14:31:28:7b:8a:af:7d:60:71:0b:
98:90:6d:7f:5a:ad:34:bb:b4:56:2f:f5:fa:ca:85:
bd:97:74:08:77:4e:95:44:b1:1f:af:52:f1:c6:6d:
b4:78:26:c9:48:51:fc:25:c5:a0:97:a1:9f:71:24:
67:cb:2f:87:8e:cb:33:07:ee:92:08:14:a3:00:c1:
50:ef:84:d1:f8:04:5d:81:0f:23:d4:18:27:8d:3f:
b5:9e:28:c1:48:bd:40:86:23:56:6b:dd:a6:3c:85:
de:39:1f:34:67:db:62:df:28:36:d9:52:a2:b6:5a:
15:d3:81:ac:17:30:45:3b:cd:6a:77:70:6e:54:0c:
aa:4e:bd:1b:35:fa:bb:6b:dc:29:98:52:3e:6a:f1:
47:f0:cf:62:9c:67:fe:ba:79:0b:31:7c:d7:35:b2:
59:62:4b:29:8f:f8:9f:fc:98:52:23:5d:f6:8e:38:
57:ae:53:ed:af:5e:23:33:51:a2:ed:48:55:0b:3b:
ce:ce:ae:f9:2e:6a:53:81:a4:56:cb:2a:ac:23:1c:
fc:5a:4b:f1:0f:f9:52:7b:df:8d:65:e2:26:86:fb:
bd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C9:BB:8B:73:44:9C:11:43:DF:82:AC:FE:52:BA:25:43:05:9B:CD
X509v3 Authority Key Identifier:
keyid:D5:F9:47:86:D0:36:68:54:40:90:1A:3D:CE:5A:33:4C:F1:32:72:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b5:aa:a1:fb:8e:8d:50:3c:3e:22:70:82:29:de:b8:c5:74:
65:a2:5c:82:ee:74:9f:5b:ca:4c:66:9b:87:0e:3a:b0:b4:fd:
99:19:df:80:97:07:25:fe:8e:ce:59:0b:48:50:eb:d3:85:fc:
c6:5a:03:cd:d5:06:4d:11:68:d4:e5:f3:e5:86:98:0a:32:11:
60:26:df:a2:f4:10:ea:33:39:cd:b7:6a:ad:1a:05:47:5e:c4:
93:2b:6f:74:77:f9:2d:de:86:b7:34:5b:e1:7c:4e:83:0d:11:
36:51:f9:ef:37:ce:d6:d5:66:c9:b3:a9:ef:7d:0d:4c:9b:86:
01:c6:92:aa:77:5e:88:f9:4a:fe:fe:0d:9c:05:fc:8f:3e:c7:
d5:a7:6b:62:f4:ac:d4:e4:c1:56:fa:f3:3d:cd:c6:d8:cd:81:
ca:c3:32:a6:ad:3d:d0:68:d7:3d:ae:11:0f:4a:85:30:c6:28:
28:0f:e3:98:63:d7:9a:ae:d5:0b:73:e6:d0:67:bd:1f:c3:d4:
64:54:5e:37:58:1f:6f:86:50:a5:06:55:66:d9:84:b5:43:dc:
bc:f5:6c:33:89:3d:eb:c6:72:e7:7e:54:7b:9b:f2:63:98:6d:
12:60:64:a7:62:2a:46:56:64:86:8c:20:fb:af:6c:82:3a:f2:
65:8e:73:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:53 2025 by rpki-client