Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
File: 1-vZEdu85RbNE_-442lbKzMXQObA.mft (raw, json)
Hash identifier: oeZUs2F7rkfR41o65YP9UvW19cuSVnBJn2p31U8VAEU=
Subject key identifier: BB:42:FD:3B:A0:1C:50:18:0F:34:29:AA:B9:05:3E:E8:30:8E:8D:54
Authority key identifier: FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0
Certificate issuer: /CN=faf64476ef3945b344ffee38da56caccc5d039b0
Certificate serial: 019881D534A663AED907FBD4C93CB00B9510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
Manifest number: 1623
Signing time: Thu 07 Aug 2025 00:01:30 +0000
Manifest this update: Thu 07 Aug 2025 00:01:30 +0000
Manifest next update: Fri 08 Aug 2025 00:01:30 +0000
Files and hashes: 1: 1-vZEdu85RbNE_-442lbKzMXQObA.crl (hash: fqY6I8yIb5MO7zMm5vDtNtyzLumqGoVODKUFUhN1xFc=)
2: SyEVUI3N-GA_i-uzTD16e1zmM2E.roa (hash: LqMTwONwWzte69tiLUqbC66cMzx5aiQvY2EzU+SnCGc=)
3: jnW4jrIpgrgFGee1gUUQCX9nMQM.roa (hash: Pg7xp2U2lzFs5nMdCFW1WCbmFf1TrwqIn5BPDmSukZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:34:a6:63:ae:d9:07:fb:d4:c9:3c:b0:0b:95:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf64476ef3945b344ffee38da56caccc5d039b0
Validity
Not Before: Aug 7 00:01:30 2025 GMT
Not After : Aug 8 00:01:30 2025 GMT
Subject: CN=bb42fd3ba01c50180f3429aab9053ee8308e8d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a3:bf:22:1e:2c:20:26:6b:55:c5:aa:91:52:
b8:61:cb:95:fd:47:4b:05:d0:53:71:e8:1c:31:fe:
78:a9:fa:8d:e5:46:4b:c7:d1:fc:2d:0a:8f:c2:f0:
45:3c:7c:37:55:27:68:7e:4b:f7:2d:7a:a7:29:1b:
19:e1:7d:cf:00:c4:db:b2:50:e2:eb:74:ee:16:fd:
77:45:86:0f:49:7b:d2:03:ae:bf:ea:cb:4f:f6:13:
45:59:9c:a0:cf:54:be:6e:82:9f:0a:9a:79:aa:d0:
df:90:c4:e1:aa:e4:c7:e3:50:ba:cb:d5:b4:63:af:
a6:18:2a:89:fd:30:c8:4a:07:88:80:02:5c:f7:14:
fc:1c:2d:b5:ef:3e:5c:41:84:5f:58:93:59:0c:0e:
2b:5d:46:4f:89:ef:38:92:3f:1a:51:de:85:bd:18:
94:b8:b0:79:1c:41:4f:f3:16:f7:21:3c:64:b8:22:
da:e7:c8:6d:af:94:14:3c:c8:ee:88:75:ef:36:04:
e4:90:09:3a:61:7a:f0:e9:3c:70:2f:a1:37:39:33:
d8:88:d8:35:01:54:1a:e2:41:1d:da:1f:f8:a0:cc:
ce:99:7c:a0:84:58:e6:b0:2a:3f:23:6f:d2:ff:52:
f3:79:bf:28:1b:5f:ec:45:94:16:52:ae:34:80:93:
43:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:42:FD:3B:A0:1C:50:18:0F:34:29:AA:B9:05:3E:E8:30:8E:8D:54
X509v3 Authority Key Identifier:
keyid:FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:4c:a1:5e:07:21:84:cc:04:57:87:83:41:6c:55:e4:06:71:
23:74:b5:af:e4:b7:51:eb:cf:ff:cb:87:03:11:cc:a9:64:d2:
6c:f5:87:ab:8a:ae:54:63:7b:f8:f7:42:af:88:5d:af:24:37:
b7:3b:41:d4:2b:b2:66:a3:07:3d:53:66:91:08:36:0a:81:9d:
08:de:0a:f2:e0:e3:02:c7:ec:fd:16:4a:81:93:a2:10:a5:23:
a9:b1:4b:6d:57:a8:93:3d:83:17:8c:2f:8b:3c:22:86:5c:ff:
2d:4c:4c:b7:85:c8:d0:2c:23:b2:3b:d6:92:ff:29:ea:74:c0:
d1:8f:7c:cf:32:a9:82:84:05:af:51:80:fc:39:d7:40:88:db:
91:2c:de:b1:c4:2a:0a:69:ea:d4:bf:94:d3:82:ad:95:7a:89:
62:5a:c5:31:a3:2c:58:ee:d2:41:f2:22:26:82:0a:f2:57:8e:
bd:6f:45:31:cb:5e:bf:2f:9d:b2:63:f3:fc:7e:09:62:64:9e:
25:f0:4b:4c:b8:b7:81:81:25:99:fe:d1:1a:32:96:05:02:9f:
bd:cc:47:c8:a7:1a:91:0d:46:f7:82:2b:5f:aa:ed:46:69:11:
1a:2b:96:d3:ca:f1:3f:77:a6:f1:bc:8a:e1:9b:29:d5:c6:2a:
32:66:51:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:08:07 2025 by rpki-client