Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
File: 1-75S2DTiaNxpiDApL95LY8faOS4.mft (raw, json)
Hash identifier: ch7Cwg8zdYAxClcR8xIylDHu6n/XZrxqNl5gModmTpQ=
Subject key identifier: 60:14:B8:7B:C6:3D:92:8C:86:E4:EA:E2:16:DB:27:46:D6:D6:2C:F2
Authority key identifier: FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
Certificate issuer: /CN=fbbe52d834e268dc698830292fde4b63c7da392e
Certificate serial: 019873E3BA64EB0592DEBF5D44F179D7C1D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
Manifest number: 0B98
Signing time: Mon 04 Aug 2025 07:02:40 +0000
Manifest this update: Mon 04 Aug 2025 07:02:40 +0000
Manifest next update: Tue 05 Aug 2025 07:02:40 +0000
Files and hashes: 1: 1-75S2DTiaNxpiDApL95LY8faOS4.crl (hash: NwKWqMZu5PMCfD9HsKneGPO6Yiyt5kSxnDMBiEUDIv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:ba:64:eb:05:92:de:bf:5d:44:f1:79:d7:c1:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbbe52d834e268dc698830292fde4b63c7da392e
Validity
Not Before: Aug 4 07:02:40 2025 GMT
Not After : Aug 5 07:02:40 2025 GMT
Subject: CN=6014b87bc63d928c86e4eae216db2746d6d62cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:57:8f:43:83:48:64:fd:74:8e:92:3f:de:9e:
fe:f0:42:4b:d0:a0:ea:47:22:ea:05:a9:50:26:97:
1e:60:41:e7:14:eb:23:b8:16:12:b3:f8:90:3d:ba:
51:b0:37:a4:b2:b8:bc:67:19:fb:5b:10:21:3f:ac:
55:55:b4:47:ec:41:bd:a3:e1:38:bc:47:d4:c7:9e:
30:63:5d:95:f2:5a:ed:d1:13:c8:27:24:3a:ac:fc:
2a:f2:fd:75:82:fe:2f:a9:ff:d9:35:e2:4b:e9:dc:
f2:64:47:d9:88:1d:bb:6f:9c:5b:e6:dc:98:96:ee:
a2:f8:a5:b7:93:84:80:29:1a:5c:8a:30:bf:dc:16:
d2:35:7a:4e:ca:5d:f5:88:78:30:66:cf:f7:f1:9e:
2e:83:75:c0:19:c1:f7:b3:51:ff:7d:8d:59:d9:2a:
4b:b8:1e:d9:7d:15:3b:4f:09:2b:e4:39:2c:56:81:
b0:40:79:43:10:a6:8b:fd:a0:f7:2e:5b:36:86:db:
51:8a:16:ee:52:3c:b9:98:7e:b5:b4:90:29:6a:81:
c6:a1:73:af:b3:b5:11:bc:94:7c:d5:67:45:4c:14:
07:07:eb:7e:70:d4:74:d0:b4:b6:ca:40:f9:43:8b:
b6:3d:c2:87:d8:61:ce:a0:c3:4c:f3:f9:29:6c:2b:
82:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:14:B8:7B:C6:3D:92:8C:86:E4:EA:E2:16:DB:27:46:D6:D6:2C:F2
X509v3 Authority Key Identifier:
keyid:FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:80:34:0a:a6:48:4a:ea:16:37:9f:d8:24:01:c8:39:5a:26:
13:f0:46:1c:ac:8a:b9:a0:a7:48:eb:05:8b:46:22:da:ec:45:
a3:1f:1b:84:42:1b:d0:81:4c:52:27:25:e7:ee:34:87:39:8d:
1f:3b:a3:83:e0:db:3c:24:7a:88:3b:99:cb:54:4b:32:a2:4d:
89:bf:ba:64:88:d0:5a:85:82:a8:96:0c:c2:30:eb:9e:6c:b2:
76:10:18:0f:ee:69:c5:ea:91:45:31:68:43:f2:6f:19:e4:d9:
0b:2d:f1:70:79:01:df:38:df:0e:8b:d6:76:4c:4f:15:b2:b7:
f9:71:5b:34:37:31:11:09:94:fe:4b:6c:93:9e:48:63:84:4e:
04:8b:51:6d:ec:86:32:fb:92:1f:23:20:4b:d9:ce:f0:3f:21:
35:8a:bd:74:21:4a:bc:d8:ea:62:6b:a4:70:05:66:e7:87:40:
66:28:78:52:25:40:6f:00:9a:04:33:29:5a:77:18:5f:f7:a8:
5d:53:b8:68:bc:b4:87:a5:30:fe:0f:c5:78:90:bf:e5:57:e0:
a9:a7:5b:eb:cd:51:9f:b9:3f:22:e9:5e:0b:ee:a6:a6:1c:c3:
68:9d:ed:7c:fe:87:6f:4d:29:c6:66:b7:70:3b:c3:5f:8e:0e:
38:43:bd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:52:48 2025 by rpki-client