
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
File: 1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft (raw, json)
Hash identifier: YlOrDfXdZ/H7ur5DzIN2TJg+u1eVssoABDGjVgUR83Y=
Subject key identifier: 62:78:D5:ED:1E:ED:9B:A9:28:F5:10:B5:4C:B1:08:3D:55:46:39:26
Authority key identifier: D6:10:76:22:FD:26:07:2E:2B:99:36:CA:F2:75:70:43:50:22:6C:A0
Certificate issuer: /CN=d6107622fd26072e2b9936caf275704350226ca0
Certificate serial: 019875D18BC30A66200C2E6E6D594B0FBC02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 16:02:03 +0000
Manifest this update: Mon 04 Aug 2025 16:02:03 +0000
Manifest next update: Tue 05 Aug 2025 16:02:03 +0000
Files and hashes: 1: 1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl (hash: XRdZ8iacYDohWM3l5Uf7WycSLi0MW7ecWrbRN5eDRk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d1:8b:c3:0a:66:20:0c:2e:6e:6d:59:4b:0f:bc:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6107622fd26072e2b9936caf275704350226ca0
Validity
Not Before: Aug 4 16:02:03 2025 GMT
Not After : Aug 5 16:02:03 2025 GMT
Subject: CN=6278d5ed1eed9ba928f510b54cb1083d55463926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cc:ad:f6:f1:de:11:4f:8a:37:63:ec:8f:07:
99:85:b8:a3:d4:bb:bd:0c:c4:80:c5:52:e5:22:2c:
95:df:d9:e5:83:e0:df:15:81:c6:4b:19:c6:e3:fa:
41:b9:fa:0c:5e:09:cb:0d:15:71:c1:5d:5f:6f:4b:
af:0f:97:75:2c:1c:1c:38:e9:58:34:de:ae:19:ee:
0d:5e:bb:c2:1e:9e:0a:b5:3d:b4:93:db:e2:06:17:
33:37:9e:91:65:ce:b8:39:c1:29:1b:b1:fb:38:f3:
17:4f:c8:20:74:03:3a:f5:89:74:be:56:6d:3b:16:
d9:3a:e6:77:63:ff:8b:f4:03:64:b9:55:4b:3a:54:
7c:b0:fc:0b:41:f2:60:21:80:c0:bb:69:53:01:b9:
6a:84:1f:c7:8c:6b:f5:1f:44:03:44:02:19:05:13:
9f:b6:35:48:80:d3:e6:72:19:6c:cb:19:10:eb:1b:
65:9a:ef:fb:be:eb:ee:92:ba:64:15:1a:07:1e:39:
7f:ab:5f:05:a0:93:69:ea:b4:90:05:da:95:b2:b5:
64:e1:d2:bf:b6:0f:c3:fd:98:88:d4:8c:43:4d:66:
09:c5:e1:de:fa:1c:f4:ee:71:f5:92:77:3d:64:d3:
89:ec:7c:d9:de:15:10:46:0e:a2:94:f3:ee:62:7e:
5c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:78:D5:ED:1E:ED:9B:A9:28:F5:10:B5:4C:B1:08:3D:55:46:39:26
X509v3 Authority Key Identifier:
keyid:D6:10:76:22:FD:26:07:2E:2B:99:36:CA:F2:75:70:43:50:22:6C:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:68:e9:0e:cc:d8:5c:30:a7:99:56:6c:af:7b:c3:e6:57:77:
32:de:34:3e:2e:c8:0e:53:c5:6c:6d:2b:aa:87:0d:d4:1f:15:
1c:bc:b2:ab:3f:99:27:1d:ed:75:2c:7c:0f:76:25:d1:63:8b:
ac:e3:7b:fc:3c:c3:f9:c5:64:fd:d5:42:0e:1e:e3:5b:74:3b:
64:35:72:43:8a:83:2a:a3:3f:9c:dc:68:05:58:d1:c7:1b:43:
07:9f:af:58:63:eb:56:04:83:2c:18:e4:02:49:30:6d:d4:77:
df:7e:0b:2e:e0:1b:fa:b1:f5:ae:ff:4e:a3:70:98:bb:56:ea:
a4:23:7c:b6:02:80:96:41:eb:9b:4c:95:7a:04:8c:dd:c7:66:
28:41:d9:26:1e:51:39:fb:13:9e:fd:5b:ce:92:1e:04:3b:d7:
3f:3f:d6:fa:ba:99:24:2b:7f:0a:c4:d3:2e:98:5f:d2:6d:00:
da:d2:48:16:96:70:03:f3:c1:37:cc:59:8b:b5:4d:fb:ad:55:
c8:78:0c:a3:97:12:69:c4:ac:98:ff:82:22:03:d8:31:40:6a:
2f:8b:d0:43:4c:ad:72:1a:81:f7:75:03:f8:d9:63:5c:5c:87:
c7:9a:e4:d0:6a:8f:11:97:00:72:97:8e:30:42:50:37:4c:a6:
d0:68:ed:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:58:53 2025 by rpki-client