Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
File: 1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft (raw, json)
Hash identifier: JMQGVouv5VTcwAhwvLCdffCeW28PkQfJZkepqPl6geQ=
Subject key identifier: B2:17:21:CF:14:E1:BE:AD:D5:38:E4:BB:2F:FE:FA:99:7B:BD:AC:CC
Authority key identifier: FB:B2:69:52:B1:21:3F:9C:BD:1D:8C:96:71:FB:22:35:7A:D8:D3:22
Certificate issuer: /CN=fbb26952b1213f9cbd1d8c9671fb22357ad8d322
Certificate serial: 01988AA0A66E9C5CF09197BC931BE59EFE1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
Manifest number: 1621
Signing time: Fri 08 Aug 2025 17:00:40 +0000
Manifest this update: Fri 08 Aug 2025 17:00:40 +0000
Manifest next update: Sat 09 Aug 2025 17:00:40 +0000
Files and hashes: 1: 1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl (hash: 7Ff+RTbjLZFGssWQubirUkmsH3i6EH1LLj88vDamhwE=)
2: XF73C-FcSSxJQ-8xYAlTFyAP5_I.roa (hash: rhy91ygxYwJGIax/8YbxBHZVS3S7+RqnvU3dEA+5QuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 17:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:a0:a6:6e:9c:5c:f0:91:97:bc:93:1b:e5:9e:fe:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbb26952b1213f9cbd1d8c9671fb22357ad8d322
Validity
Not Before: Aug 8 17:00:40 2025 GMT
Not After : Aug 9 17:00:40 2025 GMT
Subject: CN=b21721cf14e1beadd538e4bb2ffefa997bbdaccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fa:31:ae:aa:7f:c4:da:f6:8b:eb:b9:47:c4:
b3:7f:5b:3e:e9:6c:96:5d:df:56:0e:78:aa:54:2d:
36:08:f9:f9:db:20:ea:2c:82:13:0a:25:89:7e:eb:
9f:12:b4:00:72:53:44:4a:22:44:9b:e5:99:8a:c0:
65:4d:d8:37:8e:d9:d1:88:09:03:43:ae:59:eb:29:
57:82:17:3e:e4:93:0e:16:af:a3:e3:ec:b2:83:8b:
a7:89:47:c2:7a:61:bd:83:31:3e:1b:d6:7c:7c:81:
53:58:61:1e:34:e2:eb:d0:79:64:a3:99:ca:76:c1:
ab:22:71:4e:5a:6e:60:fb:27:26:e4:5d:90:b1:72:
2c:97:11:ea:81:dc:e8:d2:86:81:8f:e4:b9:3a:96:
1c:09:33:ab:e9:29:36:57:d9:94:56:c0:96:b4:87:
36:86:46:c7:a3:8d:84:74:7b:f7:42:d5:b8:01:bf:
22:1b:ca:06:b9:26:cc:62:da:b0:c8:8a:e5:81:c2:
13:e9:32:50:69:4c:8a:59:64:09:f2:0c:22:99:e4:
9e:ae:c7:00:57:39:41:de:17:4e:4b:de:91:d3:c8:
1b:33:07:6d:e2:f6:ab:84:01:fe:7b:30:fa:36:e9:
0e:26:a7:2f:ac:f8:5a:0b:37:45:3d:a8:f3:1d:fb:
00:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:17:21:CF:14:E1:BE:AD:D5:38:E4:BB:2F:FE:FA:99:7B:BD:AC:CC
X509v3 Authority Key Identifier:
keyid:FB:B2:69:52:B1:21:3F:9C:BD:1D:8C:96:71:FB:22:35:7A:D8:D3:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:35:c3:39:77:f5:9b:97:f7:5d:1c:ea:e2:df:4a:30:2d:e0:
14:54:b5:e5:3b:4e:61:08:c4:75:e8:1f:d3:2a:44:3b:d9:ad:
bc:67:87:bd:de:99:eb:9c:95:66:36:b3:c9:3e:0d:f0:00:9d:
b6:7c:c8:df:0c:c6:25:4d:dc:e7:99:b4:87:79:f4:be:82:e6:
a7:fc:02:c3:7a:be:40:8e:f9:b1:5a:84:fd:6f:5c:d4:e0:ad:
ba:bb:d5:19:1b:d7:a3:72:2d:ff:2e:3c:9b:fb:52:7f:17:66:
af:56:b6:bc:ca:cc:6e:c2:65:c0:44:4d:00:81:fc:27:f8:9e:
d5:31:41:14:83:53:40:0d:49:43:90:cf:4a:5a:d2:73:6b:9f:
09:1e:b5:e3:6c:f6:0b:c8:8f:ba:e7:95:57:22:5b:f7:b6:0d:
17:6a:d5:98:71:b4:87:7e:83:46:19:85:ac:91:64:51:b9:c7:
09:8f:8a:f8:03:72:e5:b9:70:cf:fa:c8:70:45:a6:f9:ad:17:
c3:e3:52:60:54:9a:b1:45:b5:7a:94:cb:88:c0:84:31:00:cb:
af:50:ee:3a:f1:ff:d4:f1:9f:d5:ad:3f:37:52:e5:b1:a1:d0:
17:ae:b5:2c:b6:0f:cb:36:00:2b:e6:4b:06:99:bf:c3:d5:b8:
09:c5:3b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:46 2025 by rpki-client