Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft
File: 1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft (raw, json)
Hash identifier: 85bTHUZCf2iE0HoInxVKrjlodUD0efvC1udG/TFZ/hY=
Subject key identifier: FF:05:C0:14:81:D1:CE:AC:9A:AE:CC:81:22:50:F5:6D:07:6E:6D:34
Authority key identifier: F9:5B:27:C1:D5:43:AE:1E:FE:83:A1:41:BE:12:44:4E:92:41:8F:F3
Certificate issuer: /CN=f95b27c1d543ae1efe83a141be12444e92418ff3
Certificate serial: 019892FF3C7F2C876ADC8A617CC9F5AD1DAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft
Manifest number: 1629
Signing time: Sun 10 Aug 2025 08:00:57 +0000
Manifest this update: Sun 10 Aug 2025 08:00:57 +0000
Manifest next update: Mon 11 Aug 2025 08:00:57 +0000
Files and hashes: 1: 1-VsnwdVDrh7-g6FBvhJETpJBj_M.crl (hash: /bkyAs0G4US0V/PmSivZvtlS7+Aot9XcmvTFy2aaXvk=)
2: pnLsiL6edNAl7saH4pXx8QzVPbg.roa (hash: 8OC0V00+GEMst/Tun4ncEnTTBHaJJRqRf9fvQjD99nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:ff:3c:7f:2c:87:6a:dc:8a:61:7c:c9:f5:ad:1d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95b27c1d543ae1efe83a141be12444e92418ff3
Validity
Not Before: Aug 10 08:00:57 2025 GMT
Not After : Aug 11 08:00:57 2025 GMT
Subject: CN=ff05c01481d1ceac9aaecc812250f56d076e6d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ce:11:3e:c1:7d:96:0b:da:6d:ad:d9:ed:df:
5e:62:7c:71:ad:8a:b9:96:e3:76:06:55:43:23:9c:
c9:f5:34:66:80:0a:47:cd:fa:08:05:1c:fa:75:00:
e1:42:83:68:94:82:88:4d:3d:af:fd:c7:54:a2:6a:
51:5a:64:71:01:3a:f0:e7:c7:df:c2:e8:cc:96:3c:
fd:b4:01:68:19:11:a3:f3:bc:35:a8:49:9b:7f:7c:
f8:7f:dd:26:f6:70:29:5d:40:69:78:68:05:b1:02:
84:ed:9d:b8:e0:44:37:84:be:ec:c4:d3:59:ea:a3:
39:3c:ba:e9:6c:c9:b3:d0:81:de:20:50:c5:f2:c8:
62:05:a0:52:c8:e0:65:ab:1b:d0:ae:22:82:41:7b:
63:c4:28:fc:76:cc:6d:e2:57:4d:98:4e:eb:67:20:
ab:17:77:8f:d2:8c:ff:36:db:b9:d0:20:8c:ad:a3:
00:75:dc:80:f8:c2:0d:b3:b3:b3:bb:28:fd:16:2e:
69:9a:ae:c6:11:e6:ef:3e:e6:a6:36:c6:20:d8:08:
70:f7:c5:04:60:a1:98:c6:a9:1a:fa:2f:21:c7:f5:
fa:aa:f9:38:fa:4f:d9:df:2c:94:f2:1b:be:f6:17:
30:5d:1e:d2:c3:41:8a:28:f9:07:4e:35:2b:d4:3b:
9b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:05:C0:14:81:D1:CE:AC:9A:AE:CC:81:22:50:F5:6D:07:6E:6D:34
X509v3 Authority Key Identifier:
keyid:F9:5B:27:C1:D5:43:AE:1E:FE:83:A1:41:BE:12:44:4E:92:41:8F:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:7e:d2:54:fa:38:9a:ee:17:e7:5a:5e:f5:3d:ad:e1:cc:5b:
14:7f:7f:0c:5b:e5:a5:f2:0c:c4:33:4a:63:d6:72:cb:64:62:
b0:c9:b5:cc:18:31:ee:18:29:e5:49:61:74:65:f0:55:09:c3:
b3:e6:b6:d7:46:da:84:8c:57:60:a8:30:68:87:5e:39:4b:2e:
1b:75:b7:13:3f:1b:90:2b:ce:94:0d:aa:8d:10:48:70:90:ef:
fa:30:2b:3b:4e:e0:8f:0b:53:ed:9a:0c:b9:d5:74:4e:1a:33:
d3:e0:41:8b:10:eb:5b:ee:09:47:c0:00:4b:bd:69:6f:d3:dc:
71:d9:cd:b9:b1:6e:28:41:9f:b9:64:e8:2f:09:8b:55:9a:35:
e7:07:ee:84:30:25:af:8b:6e:d8:ee:f7:e6:a3:17:9f:40:5f:
97:e8:c1:db:33:c8:ac:76:0f:3d:d5:db:f0:b0:6b:bb:fd:68:
75:8c:df:05:91:1d:36:8a:00:00:6a:34:72:fc:f1:81:25:62:
54:16:01:30:46:39:62:1f:6f:d2:b8:8e:ac:98:e2:63:2a:82:
6a:b8:5d:6c:f4:00:05:4a:d5:dd:b4:b6:50:09:7f:8f:10:da:
6a:35:d5:13:3c:e0:a0:5f:4f:35:4c:e6:d7:0b:fa:08:d5:5c:
33:76:8e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:34:45 2025 by rpki-client