Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
File: 1hCKSF368GqTH1Q8CFoAnGrqLZw.mft (raw, json)
Hash identifier: KTm0y2dW3pX3QzQvmpGS1BjmXgQIyIcADFTIdd8HQJo=
Subject key identifier: C7:5C:73:44:66:1A:91:AD:F9:48:CB:92:21:92:F3:C5:66:E3:5E:10
Authority key identifier: D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C
Certificate issuer: /CN=d6108a485dfaf06a931f543c085a009c6aea2d9c
Certificate serial: 0198936D2337BFCF5145F4337C58D94243D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
Manifest number: 0931
Signing time: Sun 10 Aug 2025 10:00:59 +0000
Manifest this update: Sun 10 Aug 2025 10:00:59 +0000
Manifest next update: Mon 11 Aug 2025 10:00:59 +0000
Files and hashes: 1: 1hCKSF368GqTH1Q8CFoAnGrqLZw.crl (hash: JkogH3O+MHrwlnFxwSHwd+/awOsXSpddpGaGVU6QOLQ=)
2: XYlDbmNEweM6LqFALkkvUh2W9lE.roa (hash: 9gP6l/HCX+2ev9Uk9YYU1pfiHW7Ig/5Pk5coTY/utmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6d:23:37:bf:cf:51:45:f4:33:7c:58:d9:42:43:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6108a485dfaf06a931f543c085a009c6aea2d9c
Validity
Not Before: Aug 10 10:00:59 2025 GMT
Not After : Aug 11 10:00:59 2025 GMT
Subject: CN=c75c7344661a91adf948cb922192f3c566e35e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bc:32:03:45:4e:6b:9c:b3:ff:26:7e:3e:cf:
85:87:5d:91:b2:31:ab:f7:86:41:d7:4d:52:22:f3:
6a:1e:97:ad:b9:28:77:4c:39:49:2b:74:f7:db:e8:
1e:33:79:78:d5:5a:14:59:50:d0:07:51:c7:9f:e8:
1e:7b:27:de:71:50:9b:79:8d:c5:9b:92:26:c6:d4:
05:0c:d9:7a:9e:b9:1d:64:b9:16:8f:5a:d9:85:7c:
d1:8a:55:e9:53:a9:c2:5f:a8:43:22:20:99:95:48:
d6:d2:d8:48:25:99:83:ec:fa:aa:77:2d:ca:51:a0:
e2:4f:68:98:49:17:c5:08:92:f8:df:9b:5f:1a:e3:
da:44:83:24:47:0e:89:44:9b:28:f2:f9:1e:f0:8e:
e9:58:61:2a:13:ed:f9:ee:a1:97:71:68:ba:d0:83:
c2:03:e5:7a:68:54:45:d6:9b:ab:bb:6f:d0:ef:2b:
c3:a0:bd:9b:98:55:c3:51:dd:96:e9:65:a3:78:2d:
90:a3:1f:44:1e:00:69:92:92:9d:39:e4:f1:0e:73:
c5:bf:48:1e:12:a2:3f:36:21:99:40:b5:e5:8d:5b:
10:98:e3:62:76:2b:4b:fa:8b:e9:13:a2:25:91:23:
45:b2:ed:26:5e:f4:99:e2:f4:c3:37:e3:dd:51:dd:
4e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5C:73:44:66:1A:91:AD:F9:48:CB:92:21:92:F3:C5:66:E3:5E:10
X509v3 Authority Key Identifier:
keyid:D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:5d:d0:0e:e4:f3:cb:da:f1:90:81:ef:44:32:97:9b:af:06:
81:5c:83:73:29:8b:42:93:4d:f6:e4:1d:13:49:f0:20:0a:97:
a6:ad:1a:f0:08:63:77:8f:7a:29:4e:33:98:e8:68:dd:ee:91:
50:f6:e4:28:1e:35:88:e1:26:3a:87:79:15:b0:66:0f:31:30:
71:b0:79:cb:88:b3:2a:6c:b8:38:bf:4f:ac:5b:46:ff:4e:52:
a7:1f:d6:c7:d5:13:0a:8b:0c:0a:07:5d:53:75:8a:f8:72:ee:
81:60:07:d0:d3:71:12:dd:7d:93:4f:12:80:44:c4:1d:73:a7:
e8:ab:b9:6d:1d:b5:75:15:00:05:c9:fb:15:e2:7e:4d:f2:f0:
88:64:23:0d:57:ca:70:6f:79:80:98:0f:69:a2:c9:cb:12:21:
99:d4:16:c6:f9:a7:a4:f2:cb:09:58:08:e7:51:c5:17:2c:93:
6a:bf:02:fc:af:7a:10:b1:c4:d3:1f:9c:bf:b7:a1:30:dc:5a:
1c:ab:68:5e:e3:2d:f1:f1:82:d9:22:cc:fa:a1:ff:c6:49:05:
e0:df:e0:09:84:b0:aa:0e:91:b6:f5:41:bb:96:f2:8e:ca:2f:
73:cf:b8:22:58:ce:3f:61:cd:05:09:06:07:b0:e1:57:6f:0a:
2c:c1:e2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:53:52 2025 by rpki-client