Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.mft
File: 1vLhQsRNXVG8fkLKBxD2tk7xEJE.mft (raw, json)
Hash identifier: zz2CkEIsHq80IGiD0iD5agRp/LR8cL2BtAGsp4Xx9TI=
Subject key identifier: 00:82:0D:15:8D:49:28:0C:96:46:B5:8B:C8:82:DE:79:14:0A:D4:82
Authority key identifier: D6:F2:E1:42:C4:4D:5D:51:BC:7E:42:CA:07:10:F6:B6:4E:F1:10:91
Certificate issuer: /CN=d6f2e142c44d5d51bc7e42ca0710f6b64ef11091
Certificate serial: 019873E2DEB9F4B613854A8021F0F8E0AC7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vLhQsRNXVG8fkLKBxD2tk7xEJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 07:01:44 +0000
Manifest this update: Mon 04 Aug 2025 07:01:44 +0000
Manifest next update: Tue 05 Aug 2025 07:01:44 +0000
Files and hashes: 1: 1vLhQsRNXVG8fkLKBxD2tk7xEJE.crl (hash: mJZ6E5XHIB0MFxCapqCk7lx3KmFGxh/D9SglkRhxaUk=)
2: LYJYFx2T8LJuRb12iyxKMr93evo.roa (hash: YqeTPnX1EtI+d0+m7mdzwt1Rn2TJyLXd1g7Ztcm9f4Y=)
3: Xj3oVMUCt01u8YFkgqP2XNxNOYc.roa (hash: 6auuGJzllRElAKkh+2dzfD1kSlIMjRra0ICkRJJ17wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vLhQsRNXVG8fkLKBxD2tk7xEJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:de:b9:f4:b6:13:85:4a:80:21:f0:f8:e0:ac:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f2e142c44d5d51bc7e42ca0710f6b64ef11091
Validity
Not Before: Aug 4 07:01:44 2025 GMT
Not After : Aug 5 07:01:44 2025 GMT
Subject: CN=00820d158d49280c9646b58bc882de79140ad482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:88:9d:c9:89:dc:ae:6a:77:9c:6f:31:d8:f2:
70:43:19:9c:84:96:d3:28:a6:bd:66:9a:91:d2:e3:
11:c6:91:64:7e:0d:c4:8e:d0:53:63:7a:d2:50:75:
68:36:d1:2a:e4:84:ce:c4:51:2c:9f:66:aa:eb:89:
e4:50:d0:1e:0e:61:05:d2:38:cd:3d:44:e7:3d:6f:
cf:8d:43:bf:2b:65:25:5d:b6:75:28:d8:73:f4:31:
2a:f6:dd:5f:d0:ef:dd:23:9c:58:7f:1b:34:0b:f8:
e7:d9:5b:1b:c5:d4:d0:21:f1:f8:0f:2f:67:25:0a:
27:e3:a0:2f:3b:54:54:0f:5b:a1:73:3b:88:68:f3:
92:5c:59:9d:8d:b8:1f:22:9f:81:d9:73:49:6b:5a:
f8:23:8d:96:0a:ca:72:7b:9b:74:24:3e:14:60:3e:
87:ba:27:bd:6b:c5:09:63:68:06:f4:86:7f:dc:08:
48:2f:dd:57:9e:4d:ae:df:86:6e:a5:c6:7f:d5:f9:
5d:b8:ed:07:eb:44:50:e1:34:9c:b0:26:9e:8c:a5:
78:c7:2b:66:57:dd:c2:92:0d:df:dc:a5:23:ba:b8:
74:ff:88:06:7b:16:a6:45:50:e4:dc:55:3e:92:6d:
ad:fe:f7:a5:c3:a0:15:15:0e:ca:51:dd:1d:e4:8a:
c2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:82:0D:15:8D:49:28:0C:96:46:B5:8B:C8:82:DE:79:14:0A:D4:82
X509v3 Authority Key Identifier:
keyid:D6:F2:E1:42:C4:4D:5D:51:BC:7E:42:CA:07:10:F6:B6:4E:F1:10:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vLhQsRNXVG8fkLKBxD2tk7xEJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:63:c8:ff:8c:79:d3:7d:ff:57:17:77:de:92:b2:11:01:c8:
81:e2:84:e8:c6:d0:57:3a:28:ea:a5:72:6f:84:91:99:89:1b:
ab:b3:9d:05:06:a9:1c:13:c6:84:34:4b:13:26:bf:be:77:f8:
87:68:d1:ba:c0:0c:12:49:22:82:80:de:ca:38:0c:df:91:60:
89:87:b4:e6:03:a5:aa:05:71:e4:c8:36:8a:3a:c9:53:be:a0:
7c:42:c5:44:b7:fd:a7:5d:a9:80:74:db:42:0a:90:a4:54:97:
c5:e3:68:f5:ef:5a:a6:6e:bf:0a:76:37:ce:a0:cf:50:d0:73:
73:9b:fe:96:9e:06:89:07:cc:4e:09:a4:89:c0:57:f0:cc:2a:
b3:8c:1c:d8:e3:73:4b:d1:05:3f:a5:25:c2:9b:87:90:ed:35:
66:c4:fb:72:9c:45:0a:4b:42:f4:c1:3e:67:a4:a1:35:33:5e:
45:80:e2:84:c0:2f:66:03:3b:c6:c8:31:e4:21:a4:13:c5:4f:
af:04:34:ae:fc:27:56:40:d3:6a:4e:fe:51:80:37:06:af:d3:
20:bf:d7:7b:1a:8c:4a:48:78:4c:c2:18:e2:f9:e6:90:8d:36:
02:18:b0:64:05:48:f0:0c:a9:53:df:60:c4:b1:95:f7:11:a8:
5c:02:c0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:02:26 2025 by rpki-client