Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
File: 1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft (raw, json)
Hash identifier: ePMxkQIyiIcp9VD7COCcJ6sQJv4jRuEzMmTWZBXKZ1A=
Subject key identifier: E9:F3:E2:78:03:22:04:10:1A:1A:AC:75:0A:64:CF:54:72:9C:59:FF
Authority key identifier: FA:35:85:A1:05:EE:83:C6:45:E2:EE:F1:3D:C0:81:E3:5C:AA:2C:04
Certificate issuer: /CN=fa3585a105ee83c645e2eef13dc081e35caa2c04
Certificate serial: 019896DC10A37748C8787691F1E9D689EF7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
Manifest number: 0355
Signing time: Mon 11 Aug 2025 02:01:01 +0000
Manifest this update: Mon 11 Aug 2025 02:01:01 +0000
Manifest next update: Tue 12 Aug 2025 02:01:01 +0000
Files and hashes: 1: 1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl (hash: DJUgVyrpKAWXs1msYU0qJFCCNhX2Vj/xttUvlc4fKVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:dc:10:a3:77:48:c8:78:76:91:f1:e9:d6:89:ef:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3585a105ee83c645e2eef13dc081e35caa2c04
Validity
Not Before: Aug 11 02:01:01 2025 GMT
Not After : Aug 12 02:01:01 2025 GMT
Subject: CN=e9f3e278032204101a1aac750a64cf54729c59ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:eb:04:95:23:4d:4d:0a:3b:ac:69:27:bb:7a:
9e:26:bf:58:4a:95:41:42:0c:69:08:6a:25:7f:2f:
2b:bd:c4:59:cb:dd:04:5a:ca:d6:70:c5:5c:5d:b2:
1b:8f:b6:bb:88:0e:cb:56:0b:f8:49:ac:7d:34:0b:
65:aa:89:03:44:e7:83:41:df:24:0e:76:bc:5e:ad:
c8:e0:6d:d3:f1:0c:02:b2:c2:1e:8c:54:ce:41:59:
fd:b9:19:da:68:7c:a5:4f:57:9b:e9:ee:a7:c5:37:
cf:78:6a:aa:d0:7a:44:d0:05:10:b1:d7:2c:7a:c3:
dc:bc:d5:68:8e:dc:73:62:43:25:45:63:b9:d5:8e:
cf:53:18:fb:bc:ce:d8:29:08:08:54:30:18:63:49:
e3:03:a8:17:57:81:bd:9b:0c:0e:56:88:6e:d5:84:
8f:70:02:0f:98:c2:c8:c8:62:f7:4c:1f:e1:57:f7:
ff:bc:5f:cd:f0:53:10:dd:57:f1:ae:ca:94:89:e2:
6e:c8:67:51:ca:a8:18:19:23:34:7c:81:dc:ba:3d:
65:61:c4:c6:a1:23:2c:b2:61:e5:ee:b3:42:e0:bb:
56:a4:57:7a:37:1d:e0:a5:1a:9e:15:68:35:7c:87:
86:6f:72:70:1d:06:27:4e:5f:d8:a7:54:ed:92:a7:
d0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F3:E2:78:03:22:04:10:1A:1A:AC:75:0A:64:CF:54:72:9C:59:FF
X509v3 Authority Key Identifier:
keyid:FA:35:85:A1:05:EE:83:C6:45:E2:EE:F1:3D:C0:81:E3:5C:AA:2C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:30:94:af:f0:b2:0d:d3:4d:85:89:64:08:e6:5f:2e:c9:3f:
63:69:a9:65:9d:b6:4b:67:1b:8b:91:85:c8:26:0f:29:12:29:
84:0c:bf:85:d8:ed:7f:bf:cc:f9:59:9c:d6:e6:30:9f:7e:15:
75:1b:57:d4:b0:df:09:8f:5b:9d:ff:66:e5:04:e6:ee:f4:98:
65:b5:9e:4e:2c:04:99:07:29:2c:e2:39:94:24:72:e9:4c:e9:
37:f4:e5:8a:bf:73:43:31:07:5f:de:0e:1a:d4:6d:9f:fb:0d:
0f:c4:74:8e:af:32:14:6f:2f:0d:0f:ab:c5:46:be:41:d0:65:
ca:88:55:95:b9:1f:62:27:d6:60:1c:d1:cc:d4:69:31:15:17:
a3:17:8d:68:d3:b8:61:25:ca:2c:8e:ff:6e:b6:e3:a2:c2:17:
13:39:35:fa:17:f6:79:9f:89:30:77:4d:c7:dd:a3:99:8e:3b:
3b:15:c3:3a:cc:12:cb:41:90:b2:33:97:aa:43:5a:7b:1f:bc:
62:0d:60:b3:43:c0:47:97:21:02:98:ae:10:f1:75:0a:8f:a0:
f3:42:3c:00:91:3c:1a:2d:ad:ae:65:45:fe:a7:5b:10:09:b4:
5a:51:9b:1b:24:ea:32:52:76:f6:53:f6:6f:71:57:a9:8c:89:
39:2a:e2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:39 2025 by rpki-client