Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft
File: 1-zutfQaFmVztNRCLLhFSWnqrFBg.mft (raw, json)
Hash identifier: fo1gZ4Jj0h7k4IBTJDlVdPo/boYxjpcUgtsY0PnOgOc=
Subject key identifier: 1F:F9:0E:8F:79:D0:E5:39:18:36:37:1D:3F:68:8E:AD:FF:4E:2C:57
Authority key identifier: FB:3B:AD:7D:06:85:99:5C:ED:35:10:8B:2E:11:52:5A:7A:AB:14:18
Certificate issuer: /CN=fb3bad7d0685995ced35108b2e11525a7aab1418
Certificate serial: 019873E1DD9F53D1AC1BE853F8952D9DE158
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft
Manifest number: 070D
Signing time: Mon 04 Aug 2025 07:00:38 +0000
Manifest this update: Mon 04 Aug 2025 07:00:38 +0000
Manifest next update: Tue 05 Aug 2025 07:00:38 +0000
Files and hashes: 1: 1-zutfQaFmVztNRCLLhFSWnqrFBg.crl (hash: iJMprFSzGxfE4m1EeSRsZcgOjUSDqt9iTOaVKYmWuMY=)
2: bS2AXyQj6T-v-BFQFVgN8omhTFI.roa (hash: Hlm2+aXt9COQOoJS5S5Wj7t+eBfLw0yjo9KgiG+EY2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:dd:9f:53:d1:ac:1b:e8:53:f8:95:2d:9d:e1:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3bad7d0685995ced35108b2e11525a7aab1418
Validity
Not Before: Aug 4 07:00:38 2025 GMT
Not After : Aug 5 07:00:38 2025 GMT
Subject: CN=1ff90e8f79d0e5391836371d3f688eadff4e2c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:2d:56:ff:c1:06:df:64:15:3f:ea:d0:1e:
6e:ee:8d:cc:eb:a4:2b:dd:99:3c:3a:ba:14:83:80:
cd:15:da:8b:69:3c:b9:a0:8c:cd:48:c1:57:3d:07:
b2:a3:49:a7:f5:00:79:f8:de:1a:06:3a:63:0f:7b:
be:1f:9e:27:c0:ef:35:e4:f1:72:a8:c2:bd:c1:0b:
42:31:4d:c7:8b:dc:5c:94:fb:20:b6:72:d6:98:5e:
c3:6c:2b:2a:be:58:8c:3f:3f:f0:f8:e6:43:5f:0a:
b5:d1:64:11:57:8b:5f:85:35:a8:c1:c9:39:ca:b6:
b5:41:1a:a7:17:12:1e:c4:0a:6c:36:84:30:b7:54:
f0:c8:eb:d4:83:e8:e0:3b:86:7e:6c:9a:4c:a5:15:
c6:37:97:af:ff:2b:e1:b9:fd:12:c6:a8:ec:27:06:
47:29:a3:81:28:01:5e:b6:ba:8a:37:3f:4c:84:ae:
6d:2d:31:23:5a:a0:cc:55:e5:61:e0:c0:27:f5:6d:
9a:c2:4f:f9:d1:ed:09:a9:2d:20:53:62:fc:7d:62:
88:0c:9f:cd:e4:75:e4:76:ea:22:23:1b:5d:53:fd:
80:ad:39:0b:62:93:23:4a:0a:b4:29:82:b6:4c:8e:
93:bc:aa:84:af:94:75:68:81:d3:87:f8:86:7f:b7:
dc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F9:0E:8F:79:D0:E5:39:18:36:37:1D:3F:68:8E:AD:FF:4E:2C:57
X509v3 Authority Key Identifier:
keyid:FB:3B:AD:7D:06:85:99:5C:ED:35:10:8B:2E:11:52:5A:7A:AB:14:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:bf:87:20:64:9c:48:35:db:bf:52:47:4d:54:86:5c:41:8d:
d4:1e:a6:95:20:9d:a6:dc:54:77:92:0e:40:3f:0f:cd:0d:2e:
ed:5e:5b:54:14:3c:1f:05:86:79:14:da:1d:87:ee:a1:11:12:
51:45:f0:a9:bf:9a:78:d0:c8:d4:1d:a0:87:9e:1f:6d:5a:38:
07:53:20:ee:20:88:06:73:3a:a7:90:6e:1a:0a:90:b4:c6:4e:
8a:6f:e5:28:f6:5a:0d:29:b7:72:c8:f4:9e:44:f7:ed:9e:4c:
a0:b2:6a:0e:eb:24:f4:b5:54:82:b2:e3:50:8d:b9:51:01:ae:
28:58:76:d5:d6:37:25:67:5e:15:a4:eb:65:c4:ff:89:90:22:
8f:d1:76:f0:28:b6:37:44:3d:c5:27:2f:a2:18:62:74:8c:5f:
bb:b8:7c:df:2c:23:73:63:85:3f:2b:75:61:2a:3a:e2:7a:97:
1a:f8:c5:06:c6:4d:30:6c:bf:f9:c1:f8:16:78:75:34:24:57:
e8:1b:e3:fa:f3:d9:96:75:43:df:67:48:bd:06:d1:31:3d:91:
af:20:cd:53:c7:2a:6a:2f:1e:fc:89:0c:46:56:ea:cb:24:34:
5c:86:e9:37:8d:29:a7:55:77:99:04:c0:70:a1:1c:f8:fd:0f:
15:6f:ae:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:01 2025 by rpki-client