
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
File: 1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft (raw, json)
Hash identifier: 3FQ3b2KxjXSMZZtOU64RuCpVgPIq9Uwu4+RCo0bj6vg=
Subject key identifier: 63:05:6E:54:4D:F1:27:1D:81:96:9D:3E:BE:85:9B:91:15:45:13:2B
Authority key identifier: FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94
Certificate issuer: /CN=fa129ccbb8c241a9c9b1ff20730a264956b50294
Certificate serial: 019880C2419EFE9A01DC80D7FE99C54C162B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 19:01:11 +0000
Manifest this update: Wed 06 Aug 2025 19:01:11 +0000
Manifest next update: Thu 07 Aug 2025 19:01:11 +0000
Files and hashes: 1: 1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl (hash: x7gN7LuJsgdhhhr8IbiPOUOvPaqJHExYazBhZwm1WyE=)
2: LiDek8ukAeDalnCmjHOSOx8ybkY.roa (hash: XaMtoZ+RB8cq+ljNgiN30o7Aneys4CKgmujbsMdFNUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:41:9e:fe:9a:01:dc:80:d7:fe:99:c5:4c:16:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa129ccbb8c241a9c9b1ff20730a264956b50294
Validity
Not Before: Aug 6 19:01:11 2025 GMT
Not After : Aug 7 19:01:11 2025 GMT
Subject: CN=63056e544df1271d81969d3ebe859b911545132b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d5:86:e8:12:0a:51:26:e4:fd:f4:91:b2:00:
0a:52:ac:b2:6a:5c:64:10:b0:4d:22:f7:71:59:3b:
6c:a9:a0:88:15:f4:ee:36:05:0b:dc:82:eb:13:f5:
ee:db:d4:65:f6:c5:02:aa:34:d5:31:06:1f:1f:a0:
9a:24:a7:10:3a:8e:9a:d0:f9:66:42:c6:c9:0a:60:
e9:25:9b:a3:2b:de:fd:2f:7b:bb:1e:85:97:ac:87:
f8:c8:80:d3:9d:95:98:b5:9f:03:b2:99:37:e1:51:
15:7f:68:42:8a:05:91:3a:22:a2:20:ff:b6:50:8b:
e6:9a:7e:14:59:46:7f:73:0b:3b:f7:dd:77:0a:6f:
b3:3d:a5:5b:b4:7b:b7:d7:fa:40:41:17:35:e6:f2:
87:53:90:f0:31:bc:b7:a8:3f:f7:bf:db:91:54:50:
24:73:74:07:a9:b5:8c:4f:13:a0:62:b0:f6:0a:8c:
e5:e7:e8:8d:04:58:fc:48:e6:4e:04:a4:0a:fc:42:
11:55:a7:6b:d7:d4:16:ca:b2:38:a1:ee:58:8f:4e:
ec:4a:92:91:1e:d9:fe:1d:82:d3:e1:5e:f8:b8:2f:
da:b1:eb:19:cf:e2:99:cd:9e:0d:d0:91:a5:49:87:
3f:8d:fb:4b:f2:39:77:ff:74:1e:e7:1e:91:d3:e7:
da:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:05:6E:54:4D:F1:27:1D:81:96:9D:3E:BE:85:9B:91:15:45:13:2B
X509v3 Authority Key Identifier:
keyid:FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:a5:56:69:06:56:c9:17:be:08:f2:a8:4a:db:e4:7d:57:bb:
37:84:fa:74:99:d0:9b:4f:94:6d:55:41:25:0d:50:f9:53:af:
31:a9:07:e0:87:c1:41:a8:18:db:73:b4:d6:e2:d4:2d:db:9d:
f6:3f:44:b2:51:df:ec:76:54:40:7e:43:3d:c2:a0:f5:2e:9f:
a7:9d:c7:10:36:25:d0:4d:7a:b6:81:91:ed:3d:37:93:76:74:
70:7d:6e:49:ff:ba:2c:db:6f:fa:56:2d:d0:da:f7:ea:c9:2d:
5e:9f:f8:1e:d1:d3:27:da:67:83:b6:a1:ce:1f:bf:03:5e:0c:
b1:c0:5e:de:fc:7c:a4:1d:ae:31:f2:20:ee:a8:2f:01:e8:07:
0e:35:3f:b8:9a:c8:29:f2:5d:3c:ca:8d:8e:93:c2:ce:09:d1:
5b:85:b3:b8:a6:c7:7a:2e:6e:d5:fd:41:e1:17:4a:c0:c8:d1:
ef:60:35:a2:66:4e:e2:8e:7a:4e:fe:86:07:52:ef:0e:99:10:
8c:a9:e5:72:19:9d:2e:61:d5:d1:ed:39:ba:62:46:18:b6:69:
61:cf:3e:15:9a:a8:4a:e4:d2:f4:94:79:40:41:23:93:03:34:
ec:f0:b2:64:e4:71:7a:75:7d:57:cd:c4:36:d2:dc:a6:ed:04:
10:78:01:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:18:25 2025 by rpki-client