Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
File: 1NF5zknld2uSyGwmwgsLQ_0KbLY.mft (raw, json)
Hash identifier: VkcQJ5psaF/Yg3qvk12ZgUCTe0LHUEkBKyLeFkvs5PQ=
Subject key identifier: 9D:1E:E6:F8:5B:47:43:88:70:35:23:EE:19:8D:96:2C:3D:CB:91:36
Authority key identifier: D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
Certificate issuer: /CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Certificate serial: 019895241764E7F9FAB7F8B01730B2A41907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 18:00:27 +0000
Manifest this update: Sun 10 Aug 2025 18:00:27 +0000
Manifest next update: Mon 11 Aug 2025 18:00:27 +0000
Files and hashes: 1: 1NF5zknld2uSyGwmwgsLQ_0KbLY.crl (hash: BkHAaT0MWLYc1OpsXL4sHgUcV9mYspJx9ivd4RDWbH8=)
2: BrC95qegfOa0TgThzqIEYO52pE4.roa (hash: NQcrpLx6LISXQiUt+m/hCop1708krlvAotMAH3yT+Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:24:17:64:e7:f9:fa:b7:f8:b0:17:30:b2:a4:19:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Validity
Not Before: Aug 10 18:00:27 2025 GMT
Not After : Aug 11 18:00:27 2025 GMT
Subject: CN=9d1ee6f85b474388703523ee198d962c3dcb9136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:18:88:3c:4b:1c:45:1b:a2:58:db:fa:d5:68:
26:80:f0:b5:02:bf:5c:65:c7:dd:52:84:c7:ce:18:
77:d0:0f:e5:0a:b7:f5:8f:29:9f:b2:23:aa:a9:fe:
b7:07:25:e0:03:fc:1e:e5:73:80:d6:35:35:96:71:
55:3f:c6:07:ff:9d:a1:10:ed:2f:67:4f:ac:7b:c4:
57:75:89:c6:32:9e:e2:48:ea:70:72:18:3e:5e:29:
6a:7f:5b:25:2a:f4:fa:67:41:ce:89:c1:0e:77:fa:
ca:4e:e1:70:2c:43:56:3f:38:89:0d:97:33:58:01:
44:55:1f:57:d7:2c:3b:c6:06:4e:a2:82:2a:b7:72:
0d:e1:90:f8:33:31:78:0a:f9:9e:fe:88:e5:9d:a4:
5f:0b:fa:fe:8d:73:28:04:84:d4:2e:2e:fc:fa:e0:
6d:92:13:cc:01:1e:d1:7c:1b:c9:69:66:03:6a:e8:
1f:5b:38:8e:45:96:a2:4e:47:8e:4f:71:01:e3:f3:
6e:9e:45:58:d3:fb:11:dc:04:1e:48:2c:07:87:d7:
17:da:29:2f:d3:cf:73:01:a6:7c:7b:0b:49:1d:be:
b3:ba:cc:cb:06:f5:da:b8:58:de:f5:7f:7a:6d:4e:
28:b2:c1:8e:94:8f:23:7f:97:29:34:23:95:66:1e:
ca:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1E:E6:F8:5B:47:43:88:70:35:23:EE:19:8D:96:2C:3D:CB:91:36
X509v3 Authority Key Identifier:
keyid:D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:f0:7c:75:d9:56:ab:b6:34:51:e6:30:21:06:19:52:b3:02:
3e:af:60:a0:10:31:af:e9:06:77:10:c8:e7:bc:57:d3:2b:02:
3b:6b:c2:5e:28:1c:b5:62:7b:d1:fe:5f:a4:76:92:14:2b:5d:
84:76:3a:da:fc:47:c8:d7:52:9a:30:66:8b:01:6d:59:b3:c8:
44:e9:9b:39:26:47:bb:73:a0:2e:f5:6d:9e:61:fc:cd:d9:39:
eb:92:3b:ab:4f:32:11:a2:99:33:f0:7a:46:ed:31:cf:9a:8e:
ec:26:b6:b3:2f:74:c6:b8:39:1a:d3:81:01:f9:5f:32:56:64:
80:10:b8:f5:cf:28:6d:11:7d:56:df:56:e2:ef:a4:52:c6:e7:
d1:3f:4c:48:b0:b3:cf:4e:4b:ee:d0:82:7d:dd:ca:b5:91:28:
cb:e6:a0:8a:9b:c3:c1:4e:79:05:a0:6c:20:d7:a1:af:65:c7:
3e:8d:c9:1b:2b:94:72:69:eb:e2:00:ff:8a:8b:c7:32:8a:e2:
49:90:84:e9:da:1f:1d:ec:71:5a:6b:59:2c:70:d3:51:32:78:
1b:3d:b4:22:1a:8d:ed:41:71:e2:60:cb:31:40:52:5b:ef:9d:
cf:9a:ff:3f:fe:7f:56:f5:70:4d:e2:48:36:d4:45:83:72:26:
2a:a9:a8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:00:08 2025 by rpki-client