Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
File: 1FurIIZT1CYevyAvYDYzQRmEYFU.mft (raw, json)
Hash identifier: RdQofUcc4EYDIUi7gMTjnBVeEfjvWis8UzaxB0zxfHE=
Subject key identifier: B3:06:0B:11:41:2D:D0:D1:24:1E:87:DD:4F:15:4B:95:93:DC:EF:20
Authority key identifier: D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
Certificate issuer: /CN=d45bab208653d4261ebf202f6036334119846055
Certificate serial: 0198A04CAFA7ED9C77FF93A527DE9975CC9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
Manifest number: 1299
Signing time: Tue 12 Aug 2025 22:00:36 +0000
Manifest this update: Tue 12 Aug 2025 22:00:36 +0000
Manifest next update: Wed 13 Aug 2025 22:00:36 +0000
Files and hashes: 1: 1FurIIZT1CYevyAvYDYzQRmEYFU.crl (hash: 3NcEMCZ2E4Dzd/6lCE2qnafQ7LTkZ69IVYstRdoeo18=)
2: MwEJqReLtYJIDzQC3nxs7sP0tvA.roa (hash: WyxWLsA6emUiFQU/YyUOL864IemIj/7UtRIviv8JcEw=)
3: iAzdsnC_l6rdd2kZ6hvA3HRXqCU.roa (hash: sMPWtnAj59EVmsTaMYwCg3wIrLPxpEslb0ZjPRwWR6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4c:af:a7:ed:9c:77:ff:93:a5:27:de:99:75:cc:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bab208653d4261ebf202f6036334119846055
Validity
Not Before: Aug 12 22:00:36 2025 GMT
Not After : Aug 13 22:00:36 2025 GMT
Subject: CN=b3060b11412dd0d1241e87dd4f154b9593dcef20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:89:ed:c3:a9:5b:09:df:3c:63:fa:7c:04:00:
d3:0e:4c:fd:15:39:26:19:c1:a4:ad:b3:1c:90:b7:
ec:d3:63:2a:24:20:ec:0f:07:25:08:e1:39:27:b3:
c9:d0:3e:7e:fa:60:54:e9:0f:0a:e6:50:e9:31:6b:
30:c1:8d:8b:16:84:a5:66:6a:a0:0e:0d:e0:9a:a6:
85:d2:88:85:71:54:3e:df:e8:90:7d:5d:c4:37:32:
b7:94:65:1e:a7:4e:1a:bb:46:bc:fb:3a:c7:15:d1:
f9:21:91:68:08:5b:ec:e7:3d:a6:6b:d1:7d:65:51:
cc:90:e0:35:dd:34:58:20:d4:be:13:90:db:e6:eb:
de:79:52:1a:3e:b6:de:08:d7:43:9a:05:66:37:3e:
fd:61:f5:e3:87:bf:1e:0e:8a:6e:0b:43:d9:59:5b:
23:16:8e:b0:10:50:6b:db:2c:47:37:53:90:83:04:
bf:0a:a2:f0:50:d1:9e:a7:a5:51:b5:72:a2:0a:5b:
e4:63:a3:ab:ef:02:d8:03:00:5d:85:5e:ca:35:7b:
5f:a8:d9:d7:b9:a5:94:83:9d:f0:4b:2e:f0:11:63:
db:17:b3:e3:16:2b:87:26:e8:76:cc:b1:ae:fc:1c:
41:40:59:8c:0f:23:9a:ee:77:3b:8c:6f:e5:11:b9:
f2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:06:0B:11:41:2D:D0:D1:24:1E:87:DD:4F:15:4B:95:93:DC:EF:20
X509v3 Authority Key Identifier:
keyid:D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:1d:57:46:4d:d9:4b:1a:f6:ad:77:02:46:f1:8c:bb:e1:21:
d1:e2:8a:75:21:a1:4e:0a:26:27:3a:bc:7f:ed:3e:78:48:28:
a8:24:1b:ad:d1:f3:42:08:a7:f2:a4:b8:96:1f:d6:9a:2f:71:
70:75:65:23:ef:df:a8:a3:60:6b:c2:30:4d:41:c1:10:c1:39:
7a:d4:f0:67:b1:b3:d7:a8:d3:e5:d5:b9:cf:2b:a0:2c:2b:40:
ae:fa:c6:27:04:da:14:3b:58:49:8e:90:c1:32:5c:f6:0d:c5:
cd:bf:db:f3:f5:4b:2b:25:3d:5e:23:0d:0c:aa:24:3d:6f:6f:
f4:71:9b:da:9e:7e:fa:c8:e1:63:a5:8f:77:56:da:95:4c:f1:
0c:f8:14:63:19:80:8a:8c:7b:4a:9e:01:2c:85:49:3b:43:20:
79:2a:01:6a:01:ef:83:99:7d:eb:46:64:90:36:73:4a:17:6e:
c0:e6:d6:c7:66:d7:72:af:c8:a7:4d:46:c9:6c:89:45:09:75:
be:cc:04:61:d9:b8:e5:6d:14:29:bc:c1:d9:d2:3a:0e:fb:0c:
27:52:e9:38:1f:6d:ee:6d:d5:17:10:31:6e:32:ec:dd:f5:52:
c0:83:aa:49:f4:28:fe:db:48:12:cc:15:ba:2c:bc:34:9d:9b:
0f:af:07:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:51:28 2025 by rpki-client