Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
File: 1-h3je7xsBkINpibAu01yMjHpPoQ.mft (raw, json)
Hash identifier: N3p5NSR5s36bfPj9fq0bYMjtanfa1YZosVEvIpGPfM8=
Subject key identifier: 33:58:60:FF:8B:CE:A4:91:34:88:6D:14:AC:2B:AF:D7:57:E4:6A:51
Authority key identifier: FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
Certificate issuer: /CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Certificate serial: 019897EE4C356382FF19DD3BC914A7D4A4F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
Manifest number: 0D9B
Signing time: Mon 11 Aug 2025 07:00:33 +0000
Manifest this update: Mon 11 Aug 2025 07:00:33 +0000
Manifest next update: Tue 12 Aug 2025 07:00:33 +0000
Files and hashes: 1: 1-h3je7xsBkINpibAu01yMjHpPoQ.crl (hash: adGM4tS7JP+nwPbKZx/aVv3EK2KTb0POHTJ8L8jiM/c=)
2: X106OsUC0FAl9jkdnlr5gWlzbbQ.roa (hash: JYZSAqgEH1ZLu6PBGCZjtxMtu36xGzGi2+VOR9jTAy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:ee:4c:35:63:82:ff:19:dd:3b:c9:14:a7:d4:a4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Validity
Not Before: Aug 11 07:00:33 2025 GMT
Not After : Aug 12 07:00:33 2025 GMT
Subject: CN=335860ff8bcea49134886d14ac2bafd757e46a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0c:a0:ec:bf:dc:53:0e:a7:d8:53:64:b9:2c:
7c:f0:19:99:2d:a2:8f:a5:5c:24:9a:6d:09:cb:3f:
c8:e4:63:eb:2a:49:dd:1f:e4:77:d0:b3:95:a6:ae:
01:95:1e:a9:15:8e:02:1a:ea:b3:9d:b7:21:da:25:
34:bb:0a:49:fd:d8:e1:6f:d5:03:bc:63:a8:f0:a0:
d1:fb:28:cc:16:29:bc:ec:06:64:26:a1:0f:78:29:
27:d4:10:e6:00:a1:35:ea:01:99:46:db:b8:42:55:
02:e8:54:94:de:a5:91:9a:3b:fe:3f:ec:0a:2e:d5:
f9:8b:44:37:35:4b:3c:d4:6c:49:91:80:fa:b7:9a:
7b:81:c7:3a:fa:87:0f:18:23:ec:64:97:1f:63:d3:
c9:ab:34:e0:f0:5a:3d:69:36:90:6a:71:3c:06:a2:
8a:b6:1f:c9:ef:84:4c:99:57:65:88:e8:17:4b:f1:
4f:7b:ba:f7:1d:ca:a3:51:62:ea:93:11:1b:74:3a:
f2:7f:dc:c6:b2:df:b3:c5:4f:39:f0:6c:6a:49:e8:
a7:e0:18:14:e8:ca:66:93:01:8e:3b:6d:ee:a5:c6:
40:50:e1:aa:d5:f8:24:2a:94:73:d7:29:39:02:bf:
ae:f9:8d:0b:0f:76:2a:d7:6c:b3:52:51:24:ec:89:
85:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:58:60:FF:8B:CE:A4:91:34:88:6D:14:AC:2B:AF:D7:57:E4:6A:51
X509v3 Authority Key Identifier:
keyid:FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ef:66:79:be:be:d5:c4:b5:f2:1f:6b:fe:7e:dc:8a:d0:c2:
a7:69:31:7e:96:8a:45:03:64:85:87:77:9b:8f:50:67:cc:bd:
d3:fb:ed:3a:c3:73:7e:95:54:34:a1:89:48:ce:4b:60:dc:cd:
77:22:a0:46:e9:84:9c:4a:ac:75:67:3e:4d:92:54:d6:7c:c2:
54:54:f4:bd:d9:8a:21:98:e7:04:a5:1d:45:11:42:9d:8d:c2:
e9:57:d9:94:47:33:11:4d:5b:39:23:53:91:b6:17:30:93:4a:
d9:b4:da:47:89:bd:6e:04:18:8f:c8:60:41:46:81:68:44:e4:
2b:95:e9:27:73:95:62:d7:ef:49:1a:e3:f0:06:33:5f:35:27:
7d:5c:82:56:95:6d:44:45:37:b9:5e:89:5a:53:35:1f:28:db:
b5:14:3b:e1:90:f0:18:f8:7c:87:82:c2:7a:3a:57:af:74:90:
6b:a0:f7:5a:29:fd:65:73:93:e3:fb:06:8a:6d:79:4a:2e:36:
7c:61:62:cf:ec:f4:58:9f:a4:43:76:21:b3:a8:4a:e3:b5:74:
23:01:20:a7:eb:24:92:c7:2d:c2:d8:fd:90:c8:b4:05:d3:82:
a6:e5:e0:e0:b3:21:9f:5b:07:f4:b6:ff:1b:e6:a4:a2:4e:b7:
54:61:c7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:06:56 2025 by rpki-client