Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
File: 1-rZRJK62A6DdXFzuGgq2UhOX22A.mft (raw, json)
Hash identifier: lxzhgYecTzPAEOV3yopoZy0jetiJAfDJty9Z9OJXPiI=
Subject key identifier: 35:6D:60:FB:9A:C0:4A:D7:AF:D5:63:20:B6:59:05:D8:5C:F9:83:73
Authority key identifier: FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60
Certificate issuer: /CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60
Certificate serial: 019892C826BE8017ED15A172686A2801792D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
Manifest number: 0981
Signing time: Sun 10 Aug 2025 07:00:47 +0000
Manifest this update: Sun 10 Aug 2025 07:00:47 +0000
Manifest next update: Mon 11 Aug 2025 07:00:47 +0000
Files and hashes: 1: 1-rZRJK62A6DdXFzuGgq2UhOX22A.crl (hash: y6mf1aqcRvJkF5dbvJfqtgWkSR3VI+9xXAzmaB+fKps=)
2: p41jrQB80nM3Fi93nL78jR6iBMo.roa (hash: nJZUqGT5BG1vu4ck1mxKQBzWxDOQCEnlZy8FawGaQcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c8:26:be:80:17:ed:15:a1:72:68:6a:28:01:79:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60
Validity
Not Before: Aug 10 07:00:47 2025 GMT
Not After : Aug 11 07:00:47 2025 GMT
Subject: CN=356d60fb9ac04ad7afd56320b65905d85cf98373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0c:d1:49:88:35:66:56:5b:4e:e1:6c:af:5f:
d6:a8:34:4d:d6:bf:75:f1:9b:01:b2:0e:e4:76:17:
77:9f:21:8a:ea:03:2d:86:90:23:2c:de:4f:d4:20:
08:d4:f6:8a:91:11:0e:11:bf:3d:c9:5b:e5:4d:19:
1d:0d:79:34:e1:9b:b6:e7:6c:44:7a:26:b8:e2:e4:
fb:a6:ee:94:36:c4:66:04:80:24:fd:05:22:e2:fe:
72:b6:b2:34:8a:e3:3e:e2:12:f6:80:46:b2:93:c0:
81:b4:90:77:1a:e5:b5:94:38:8a:d5:e0:83:a9:65:
91:63:bf:76:83:25:53:6a:9f:2d:cd:f6:10:c8:e3:
e3:80:38:85:a8:dd:dd:45:27:5b:72:05:50:0f:3c:
cd:32:5f:15:ba:03:d6:a9:7e:cc:fe:e5:ef:73:5f:
c9:d4:2e:bc:9b:4e:3e:89:61:f3:78:bd:05:ab:a7:
11:5a:3d:a8:45:ea:6e:63:90:67:aa:ea:96:33:5f:
b4:95:7e:13:f5:8f:fe:9c:de:2d:9d:af:87:75:0e:
94:33:49:b0:a4:21:bb:0f:e3:7e:f5:ec:94:90:6f:
46:47:bc:09:65:62:81:70:10:7b:c4:9e:b6:86:35:
f0:af:09:a3:a3:7d:73:8d:47:c0:de:be:24:0e:12:
b5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6D:60:FB:9A:C0:4A:D7:AF:D5:63:20:B6:59:05:D8:5C:F9:83:73
X509v3 Authority Key Identifier:
keyid:FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a6:43:2b:ea:93:ed:60:53:a6:26:11:4b:9b:d7:c9:a5:40:
81:0d:0e:b0:70:1a:fe:f4:f6:2e:8a:eb:88:42:43:c1:28:2d:
0a:68:ae:08:d4:32:be:42:ff:a7:bf:d8:ac:62:5f:68:eb:b9:
d3:e5:6f:2b:0d:f9:1f:11:82:e6:15:b4:bc:bd:33:d7:9a:50:
9b:2e:ee:35:3b:36:96:10:85:ec:3a:77:a6:96:96:43:52:15:
b0:b7:c6:7e:63:b5:b4:64:9e:c7:74:21:38:39:68:38:93:e1:
18:22:b7:be:b6:1a:de:92:de:13:c7:75:40:01:b6:a6:11:42:
48:b2:47:43:26:2e:15:4a:09:0c:48:d3:6e:b9:83:b7:a9:a5:
14:c0:db:9d:52:c7:a6:40:4b:f9:8e:b6:51:2f:fc:75:cf:2c:
7f:14:07:96:b8:1c:0a:0d:d5:57:df:c8:5a:0d:0d:b4:4f:59:
b9:f0:4b:59:58:ba:54:b4:67:da:f2:5c:7d:58:09:d8:7a:30:
bf:07:a2:a1:d7:26:3a:21:7a:42:02:11:cf:fa:ea:a0:25:18:
24:5c:10:dd:db:d7:7d:49:8f:6c:34:3d:13:6c:c1:3c:49:b0:
78:75:41:29:ad:3c:85:62:c5:09:48:1f:3f:23:9a:4d:7a:98:
e4:07:f6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:45:18 2025 by rpki-client