Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
File: 1-3nCbzFXU0UVnIQO0nioeKklZhU.mft (raw, json)
Hash identifier: KwptEDCrIJ2/ATPiJ3wPsfokpy+HDL0gUwAuHx6fAMc=
Subject key identifier: 59:6A:9B:79:EE:00:CA:B5:39:05:FC:42:8D:38:10:AA:FB:8F:DF:22
Authority key identifier: FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15
Certificate issuer: /CN=fb79c26f31575345159c840ed278a878a9256615
Certificate serial: 01987C77AA53B74221E706B0E76C44B9125F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
Manifest number: 1623
Signing time: Tue 05 Aug 2025 23:01:13 +0000
Manifest this update: Tue 05 Aug 2025 23:01:13 +0000
Manifest next update: Wed 06 Aug 2025 23:01:13 +0000
Files and hashes: 1: 1-3nCbzFXU0UVnIQO0nioeKklZhU.crl (hash: OLNHd32M5MDnZkCIODkBfLNAYXhLYI5ToPhJMvv5pCs=)
2: HlfC9yfvGN7DHKK4tv23ZO2ZzTI.roa (hash: lvbBBqCHLb7K+iy+sLWnMQKI6pl/6vd+wtc46LAcd44=)
3: Vxlq2Z39A9F-eaPA57TXXEurwJs.roa (hash: 4xN4zUrQu99FYL0d5xYUEvVHQtyeUZcoIRVpmdGGWqo=)
4: wBLhap3qy1Bc5_-udfUtTUhswUE.roa (hash: yKTNsxF+At82L6AqbVZLyPnofD0bf/S3KDHdg52k6Ec=)
5: wytxdRZXxEWi72ICxppv0nWaK_g.roa (hash: HLAxZnhzpvrbRLPZ50VaAEF9FMDzhmk4qqTXoJRwuoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:aa:53:b7:42:21:e7:06:b0:e7:6c:44:b9:12:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb79c26f31575345159c840ed278a878a9256615
Validity
Not Before: Aug 5 23:01:13 2025 GMT
Not After : Aug 6 23:01:13 2025 GMT
Subject: CN=596a9b79ee00cab53905fc428d3810aafb8fdf22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:58:df:73:06:4d:cc:85:03:c2:15:22:95:89:
a1:46:0c:96:35:06:86:ce:d4:6a:38:ee:aa:4e:f0:
c5:41:25:d9:1f:84:3a:0a:cc:a1:a6:3d:46:a4:25:
e7:bf:31:64:1f:f5:8e:d1:2d:ee:96:bc:83:4f:01:
28:02:a3:04:51:d1:5e:ac:a8:21:09:d8:4b:5b:48:
fc:93:8d:48:09:f2:a9:92:8d:86:28:fb:cb:c0:a8:
24:43:65:af:3c:53:a5:f0:f0:dc:3c:ba:2a:74:a3:
0b:09:69:f6:29:37:b7:fa:b0:fe:62:c3:4f:4e:f1:
81:e3:b2:97:61:3f:36:58:9c:94:6e:58:a6:cd:82:
eb:ad:ae:77:27:0a:ae:70:98:01:0c:bd:9c:5a:cf:
15:af:0c:d9:ee:2c:48:97:4c:b7:00:6c:06:eb:f1:
df:ab:73:5e:74:07:bc:78:2f:79:a4:89:29:58:aa:
b0:05:af:87:09:f7:8d:6a:4b:d4:fd:1e:3e:5c:ed:
3b:0a:14:46:9e:5a:41:72:39:ef:bf:cd:4c:8e:79:
ab:c4:62:0f:62:27:06:fc:4d:0b:88:ce:16:64:7f:
41:62:89:ad:72:32:b3:af:f9:eb:aa:a0:51:f0:5b:
e1:fe:06:7c:5c:08:29:b4:eb:c1:79:28:f4:a6:58:
a1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6A:9B:79:EE:00:CA:B5:39:05:FC:42:8D:38:10:AA:FB:8F:DF:22
X509v3 Authority Key Identifier:
keyid:FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:de:38:44:0f:b5:d7:db:a1:d9:fd:60:a3:1a:2b:93:5d:38:
78:bc:dd:09:44:c0:1f:70:d2:29:ec:7f:cf:77:5f:76:96:8c:
3b:38:36:23:b1:6a:66:e9:ae:e8:63:6b:4c:2d:4a:b3:c2:4d:
a8:12:ab:2f:4c:c9:1f:84:df:1c:c5:06:30:10:ee:60:5f:42:
01:e1:bf:6d:cb:2f:0a:af:75:4c:38:ae:32:77:b1:95:88:4c:
5b:94:16:9f:f0:ed:d3:a9:ca:52:5c:d0:02:e1:a0:10:1b:e8:
f2:2e:c7:21:df:67:01:9d:55:91:ac:f5:76:18:6d:8a:bc:8a:
0a:62:cc:b7:56:65:e8:e9:00:cf:80:44:32:41:18:7d:e1:33:
e1:8f:4a:d7:bb:5a:4c:37:2f:51:0d:96:cf:70:de:a7:13:c9:
be:3a:b7:2f:e0:ff:a6:82:5d:b6:60:8c:4d:a2:80:58:38:85:
d6:9a:5b:d0:38:ac:b1:3d:a8:16:d2:bd:ea:4e:26:be:3b:60:
2c:6f:0e:51:4f:6c:7e:19:3a:7e:81:f8:7c:58:1d:a8:93:11:
81:f7:d8:37:0f:3b:be:29:47:cd:45:a5:5b:3c:a8:db:9b:6d:
22:16:5a:06:86:b0:3b:f7:a4:cd:07:f7:67:be:47:7f:2f:40:
f9:95:f6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:54:58 2025 by rpki-client