Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
File: 1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft (raw, json)
Hash identifier: Sfc/zUGciUtW6fanR/zJDJTN5lqUqux1t2s8SnMsGgY=
Subject key identifier: BE:A8:B1:C2:DF:A4:50:18:5E:9D:C0:4F:F3:26:44:F8:63:6F:08:2A
Authority key identifier: FA:C0:F0:DA:39:A2:2A:79:F8:0C:1F:37:9B:66:8B:90:F6:D7:47:08
Certificate issuer: /CN=fac0f0da39a22a79f80c1f379b668b90f6d74708
Certificate serial: 019872CF4B0A5B1619482BB5AA02F2FDE2AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 02:00:44 +0000
Manifest this update: Mon 04 Aug 2025 02:00:44 +0000
Manifest next update: Tue 05 Aug 2025 02:00:44 +0000
Files and hashes: 1: 1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl (hash: hoWfl1U/qT05F8AUQ2Q2xlQd3fM7c2hwXI5rE3yRgK0=)
2: IU1kfq4weOzN7OdLshfRhNPWBJA.roa (hash: dD5C1zuWgoU/8heEjF9DtJJhbPxUK71KXWz/l+dejRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:4b:0a:5b:16:19:48:2b:b5:aa:02:f2:fd:e2:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac0f0da39a22a79f80c1f379b668b90f6d74708
Validity
Not Before: Aug 4 02:00:44 2025 GMT
Not After : Aug 5 02:00:44 2025 GMT
Subject: CN=bea8b1c2dfa450185e9dc04ff32644f8636f082a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:aa:6e:1b:5b:00:cc:66:de:a7:4a:2a:be:08:
9a:be:43:77:c7:06:bd:10:5b:ff:35:e0:38:3d:b6:
f9:55:67:50:35:08:fa:bf:76:78:8d:f9:6b:6a:9e:
41:88:97:39:2e:6f:41:3f:71:c4:80:37:59:66:53:
c6:bf:1b:33:b5:28:b2:5e:bc:00:95:b0:ea:13:ec:
70:59:62:55:39:9d:a9:6b:21:d3:86:be:03:2b:5f:
fc:6b:a1:5e:d4:0f:2c:d2:b7:55:7f:7e:46:07:f2:
00:7e:b7:46:72:99:b6:b1:d2:d2:44:52:30:d9:c4:
d9:c9:b6:be:73:52:cb:c6:a8:bc:35:20:05:c5:71:
ab:60:eb:30:52:1f:65:24:cf:4a:2f:54:ad:3d:82:
be:17:63:e2:4b:73:c8:95:35:60:01:a3:31:34:5b:
39:d7:34:1a:38:e5:ab:e9:38:51:b3:d3:ea:ec:b3:
53:f5:64:23:ef:93:08:cb:d4:36:fd:3f:b7:99:c4:
96:0b:92:44:0e:c3:f8:40:25:bd:12:fd:94:a3:3d:
2d:03:b7:18:94:0b:2f:3d:48:cd:3e:72:ac:fe:a0:
f6:7e:9f:12:08:2b:53:4a:bf:d7:d6:11:24:7c:eb:
52:f8:9c:74:8b:ec:76:80:69:47:b4:83:ce:e2:2e:
15:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A8:B1:C2:DF:A4:50:18:5E:9D:C0:4F:F3:26:44:F8:63:6F:08:2A
X509v3 Authority Key Identifier:
keyid:FA:C0:F0:DA:39:A2:2A:79:F8:0C:1F:37:9B:66:8B:90:F6:D7:47:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b2:6d:45:e9:60:a3:f3:69:90:73:90:ec:27:78:c1:1a:52:
ce:0d:2c:32:fc:76:0c:a9:99:56:ac:5e:35:e7:91:45:23:f1:
4e:19:b3:73:c8:50:07:4e:a8:f6:3a:da:3a:fe:ec:7c:1b:88:
7d:b0:6a:62:cc:d6:f3:58:af:df:1b:67:ed:41:a6:ff:4e:12:
8b:43:f4:99:cb:77:c8:f5:f1:b9:3a:fd:c4:86:a3:32:be:bf:
29:62:33:99:78:a3:80:45:bd:22:4d:e0:43:3a:f1:79:fb:c1:
4c:ef:c5:31:08:74:9d:85:c7:b9:ad:d4:5f:e3:c9:84:8e:d2:
68:c6:a0:da:96:8c:cb:5b:93:1b:08:56:79:d6:44:e8:35:44:
74:92:61:2c:d8:f4:0c:74:a5:8e:d1:ae:de:6b:52:b4:18:ed:
51:c8:a3:eb:57:c2:2b:d8:86:de:23:50:4d:c9:b2:3e:bb:a6:
6c:a8:1f:79:61:cc:6b:4a:33:02:3b:13:27:69:c6:99:30:17:
59:7e:be:2e:6a:36:6f:07:2b:78:b1:b0:ef:31:9a:75:59:cc:
dc:0a:be:2a:8c:d5:1e:c2:9a:48:28:bd:95:38:3a:f3:8c:43:
69:6f:f5:ab:cd:53:85:57:61:44:2c:d8:e8:b7:1a:39:9b:7d:
08:52:5e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:48 2025 by rpki-client