Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
File: 1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft (raw, json)
Hash identifier: AoEKBIYQoTbrerC5oRPQ/FPo0SLV78E/jjHEwKa8pj0=
Subject key identifier: BC:35:A3:A3:27:82:E1:EF:12:E9:65:D2:0F:A8:37:15:2E:D8:4B:CB
Authority key identifier: FA:D1:86:3C:BD:EC:1B:59:6D:AC:EE:B9:01:A0:85:3D:6C:87:E7:56
Certificate issuer: /CN=fad1863cbdec1b596daceeb901a0853d6c87e756
Certificate serial: 019888B25709637F7F23BAF3F26945532C78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
Manifest number: 1621
Signing time: Fri 08 Aug 2025 08:00:45 +0000
Manifest this update: Fri 08 Aug 2025 08:00:45 +0000
Manifest next update: Sat 09 Aug 2025 08:00:45 +0000
Files and hashes: 1: 1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl (hash: VKJx/HHvla92cRhXblLv4rWR8m5b55n/FJ1o+fzVSmY=)
2: 5QzI9Kx0_zx8sVl6RSClMEylLsI.roa (hash: ouFHr10qAXIAq0kULKbopJbnAAixS5hvvnbbv6zQ1js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:b2:57:09:63:7f:7f:23:ba:f3:f2:69:45:53:2c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad1863cbdec1b596daceeb901a0853d6c87e756
Validity
Not Before: Aug 8 08:00:45 2025 GMT
Not After : Aug 9 08:00:45 2025 GMT
Subject: CN=bc35a3a32782e1ef12e965d20fa837152ed84bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:39:cb:78:71:eb:55:9b:e5:32:d3:27:2e:af:
04:1a:64:d7:a6:af:fa:25:25:08:25:cc:33:31:26:
fc:b9:35:57:34:4f:f9:12:17:b8:90:27:05:c6:0d:
4c:3a:d2:da:b1:c6:78:ea:4b:1a:13:5b:fd:8e:11:
d6:f7:f4:b8:3a:a5:14:72:db:98:2f:f4:69:47:29:
6d:2e:a7:d5:9a:d4:56:e8:e8:e1:db:9c:b5:e4:21:
3f:ee:b2:fd:bd:08:ff:2e:5d:c4:0b:b9:65:ca:c1:
c0:b7:ff:4c:8b:25:e4:d8:a5:c7:df:10:ea:e0:d5:
1f:e7:be:87:72:51:e4:da:c4:71:dc:d3:f1:ca:90:
a2:78:c5:a3:0d:83:2c:00:a7:bf:a1:d6:ea:1c:d0:
bd:66:07:bc:2b:5b:35:d4:40:fe:f1:d8:69:f9:36:
9b:59:40:2b:fb:e7:c2:a4:9a:2b:bf:31:21:05:1f:
3c:5b:10:69:f9:7b:2f:43:a2:cb:69:a0:3a:9a:d5:
51:49:56:18:65:d8:87:9c:ca:e6:94:44:60:6c:9d:
b7:b5:24:47:7c:58:dd:9e:30:5e:15:79:40:e6:b8:
cb:8e:cc:0b:62:92:1e:13:b6:19:a9:36:a4:b6:fb:
73:ec:ea:b3:dc:dd:5c:c9:df:c8:9a:01:8b:f4:b1:
98:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:35:A3:A3:27:82:E1:EF:12:E9:65:D2:0F:A8:37:15:2E:D8:4B:CB
X509v3 Authority Key Identifier:
keyid:FA:D1:86:3C:BD:EC:1B:59:6D:AC:EE:B9:01:A0:85:3D:6C:87:E7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f9:a6:7e:db:3f:74:67:3e:c9:e3:ae:78:ac:cd:27:cf:b0:
24:ce:2a:cf:46:d4:fa:10:ca:27:8c:a8:67:03:67:94:db:a4:
2e:50:99:af:82:14:bb:33:48:e4:28:98:42:c5:0b:69:6f:57:
ec:2b:a4:25:18:68:a4:60:cb:74:74:f8:93:89:af:27:18:ad:
18:6d:23:25:94:47:59:60:03:11:30:bd:5b:c5:a9:f2:29:2f:
9f:5c:30:a5:6c:52:11:c5:0f:e3:8f:d8:a6:a0:48:f2:e4:88:
c2:95:1f:4c:52:78:9b:e3:57:6b:0f:9f:37:dd:c9:7d:9c:7b:
1b:29:57:24:b1:38:ae:5e:92:ac:44:d4:7a:ef:16:ec:e3:e4:
d0:9d:92:b9:83:23:c7:a7:ad:86:14:18:6a:ae:c6:9c:08:ec:
1b:bb:08:0d:f3:8c:63:67:6e:d8:fe:51:f9:7d:7f:7b:82:0a:
4e:a6:f9:ea:da:23:10:3f:cc:49:c6:9b:e5:5c:53:27:4a:d9:
52:35:aa:69:17:b4:7b:9c:0a:3a:77:94:10:c0:25:cd:9e:2d:
23:0c:91:2f:b6:03:f3:a3:fa:e2:fe:dd:b0:4b:84:31:72:79:
d2:ad:07:84:89:8e:17:f4:f1:47:78:b8:23:f1:7e:d2:58:fc:
41:26:1d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:48:31 2025 by rpki-client