Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/9a2d86-0f5e-446b-ad29-f8af2d0ae28c/1/1kBlpUFdmUI5AUXyJHkB2TZFidc.mft
File: 1kBlpUFdmUI5AUXyJHkB2TZFidc.mft (raw, json)
Hash identifier: W/qInh3q0pVplA2L16ny69c01CajdibM0HJ6Jwy7rS8=
Subject key identifier: 58:04:F1:CA:26:37:8C:CE:B8:F5:6F:26:CC:9A:14:FF:A0:E8:4B:4E
Authority key identifier: D6:40:65:A5:41:5D:99:42:39:01:45:F2:24:79:01:D9:36:45:89:D7
Certificate issuer: /CN=d64065a5415d9942390145f2247901d9364589d7
Certificate serial: 01987FAF90F85313E665E25255AC5B7EA4D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kBlpUFdmUI5AUXyJHkB2TZFidc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/9a2d86-0f5e-446b-ad29-f8af2d0ae28c/1/1kBlpUFdmUI5AUXyJHkB2TZFidc.mft
Manifest number: 0AF1
Signing time: Wed 06 Aug 2025 14:01:08 +0000
Manifest this update: Wed 06 Aug 2025 14:01:08 +0000
Manifest next update: Thu 07 Aug 2025 14:01:08 +0000
Files and hashes: 1: 1kBlpUFdmUI5AUXyJHkB2TZFidc.crl (hash: g3Qe1d2k1Xy74dUG3UJgspjttxmy6v+gWamrvjtTebA=)
2: 6rPFWOjVfpn28_M8t16r5KAzkLA.roa (hash: wER3Gq8nSGCzekLgZFtgVD/F8/GF6EezM87XvHZecI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/9a2d86-0f5e-446b-ad29-f8af2d0ae28c/1/1kBlpUFdmUI5AUXyJHkB2TZFidc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/9a2d86-0f5e-446b-ad29-f8af2d0ae28c/1/1kBlpUFdmUI5AUXyJHkB2TZFidc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1kBlpUFdmUI5AUXyJHkB2TZFidc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:af:90:f8:53:13:e6:65:e2:52:55:ac:5b:7e:a4:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d64065a5415d9942390145f2247901d9364589d7
Validity
Not Before: Aug 6 14:01:08 2025 GMT
Not After : Aug 7 14:01:08 2025 GMT
Subject: CN=5804f1ca26378cceb8f56f26cc9a14ffa0e84b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:46:4b:ce:c2:0f:aa:89:72:bc:0e:72:2e:54:
44:7a:6d:86:95:f0:11:81:6a:a2:7e:fb:c9:2c:53:
af:7b:b6:d5:04:a8:3a:4b:37:43:b0:d1:5d:13:ce:
62:47:3b:3f:77:8e:06:cb:2d:16:17:0c:4b:2a:53:
e1:72:63:97:49:48:f2:73:2c:72:75:56:98:57:bd:
d7:89:90:82:10:02:b2:b1:da:61:78:bb:05:4f:e4:
eb:03:16:89:a0:32:1d:55:0e:60:97:eb:68:48:14:
c1:78:7a:31:fe:5c:c9:d1:4f:2a:55:56:d8:57:f8:
19:7d:55:40:03:e9:1a:5f:c3:a1:13:cd:c6:7d:24:
cd:4a:38:1c:2a:c9:12:7c:64:75:5b:88:c5:15:18:
72:5f:fa:be:3a:5d:bf:ef:7b:63:c4:a5:31:c3:16:
2c:67:bf:eb:b4:12:9c:04:2f:45:98:2c:f7:4d:68:
3a:2e:d4:77:0d:03:8b:4b:ef:f1:36:ca:be:86:9d:
d5:0a:9c:03:49:f5:f1:4d:86:54:52:d1:fa:f3:33:
a6:33:37:42:cf:b8:6d:70:d2:f4:09:93:8f:1c:21:
43:9e:d2:f2:32:49:ba:c7:9b:cc:13:12:a9:2e:52:
11:f0:b0:d1:3a:9f:2b:ee:4d:0e:0a:a7:ef:42:21:
a7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:04:F1:CA:26:37:8C:CE:B8:F5:6F:26:CC:9A:14:FF:A0:E8:4B:4E
X509v3 Authority Key Identifier:
keyid:D6:40:65:A5:41:5D:99:42:39:01:45:F2:24:79:01:D9:36:45:89:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kBlpUFdmUI5AUXyJHkB2TZFidc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9a2d86-0f5e-446b-ad29-f8af2d0ae28c/1/1kBlpUFdmUI5AUXyJHkB2TZFidc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9a2d86-0f5e-446b-ad29-f8af2d0ae28c/1/1kBlpUFdmUI5AUXyJHkB2TZFidc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:af:36:e4:4d:f2:b1:4a:4f:62:2f:9b:04:56:31:b8:ec:b9:
a6:b5:fb:9b:80:d2:11:d0:0e:4b:2d:9b:f1:57:37:9c:4e:e3:
2e:29:e8:b5:1f:c5:2a:b5:ce:4d:f1:ad:a0:41:95:8b:61:72:
b6:e4:9f:a0:f8:5e:d3:46:f5:e9:5d:b5:ed:2f:9e:0b:cd:50:
4c:3b:60:2a:4f:aa:5d:ae:68:d5:ab:a5:37:22:c3:da:17:27:
16:76:a2:da:61:a8:ac:3c:11:a5:8f:9a:a8:17:87:f6:dc:f7:
07:9d:71:c0:ef:74:72:6a:98:f0:f0:3a:00:d1:97:c7:d8:e6:
01:1c:c1:08:86:6b:89:06:29:61:23:cb:ed:e3:a1:ba:9c:48:
a7:f5:28:14:0b:58:a8:a1:1f:f5:b6:f0:23:80:f7:e3:4f:48:
98:7d:52:f7:71:ee:b6:8e:97:15:cc:cc:36:e3:dc:89:67:94:
17:01:36:ad:be:4e:be:2b:a2:ed:a4:25:34:26:ca:da:ca:a9:
5b:5f:68:88:e7:f8:c5:aa:e2:ba:d5:e5:23:2f:5a:34:e8:38:
10:2b:be:6a:67:da:90:df:7d:b2:f0:d7:1b:0c:c4:a7:1f:37:
01:00:bc:29:65:e6:5e:5b:19:58:1e:a8:da:85:1a:0b:08:4e:
bd:05:21:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:49:16 2025 by rpki-client