Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
File: 1vgHZgvyzZKu45FEKlNDr3GMGMc.mft (raw, json)
Hash identifier: wM7AlSgkWHs1QkxcrxOzkaU0OxG9hncQIIVwCv8sI3A=
Subject key identifier: 53:72:73:68:FA:7D:D4:32:F5:08:45:BE:22:1C:6C:19:EE:DE:CF:2D
Authority key identifier: D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7
Certificate issuer: /CN=d6f807660bf2cd92aee391442a5343af718c18c7
Certificate serial: 019895C9041A6281D189FF8F2D1179F6A41F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
Manifest number: 15BB
Signing time: Sun 10 Aug 2025 21:00:35 +0000
Manifest this update: Sun 10 Aug 2025 21:00:35 +0000
Manifest next update: Mon 11 Aug 2025 21:00:35 +0000
Files and hashes: 1: 1vgHZgvyzZKu45FEKlNDr3GMGMc.crl (hash: eTGryYUc1tjBB3wTD38eB2PG8ZUSDtrA4tJ++1bZSY0=)
2: KWwJmTARHeAHpXQEJKYr4FNXsos.roa (hash: 1063ws7p1tPR9qPGeDgdtnc+pragLeBe3JdEiKbe844=)
3: axQ4QcGTmWCvhs7XYE0LSyL0bR8.roa (hash: jnmoj5c8hE+D/ASpXs+Aut4m2SL0NpIhMDG7HImlpO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:c9:04:1a:62:81:d1:89:ff:8f:2d:11:79:f6:a4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f807660bf2cd92aee391442a5343af718c18c7
Validity
Not Before: Aug 10 21:00:35 2025 GMT
Not After : Aug 11 21:00:35 2025 GMT
Subject: CN=53727368fa7dd432f50845be221c6c19eedecf2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d0:e9:b0:b5:b4:84:99:47:e7:c2:c9:0b:a9:
75:5e:bb:94:72:9e:09:7a:e4:a1:4d:43:a5:c6:57:
30:fa:82:9d:d2:89:36:c6:97:a9:ef:e4:b1:f8:c5:
7e:85:1c:bb:30:55:3e:e3:fb:8e:ef:8a:b3:06:dc:
28:78:6a:a7:45:70:54:81:e1:19:9e:36:18:85:96:
d4:e5:bb:d7:7f:ce:f8:21:7a:6d:b6:81:c3:24:f0:
ce:1d:86:c0:af:a5:4f:d7:16:54:15:a5:41:3f:ea:
0e:48:91:17:b3:75:1c:1c:93:6c:ae:29:98:6b:31:
e9:a4:64:fe:58:82:f0:6a:13:b0:b1:06:63:e4:cf:
ce:55:77:a7:82:90:43:23:88:50:55:c6:9f:ea:20:
bb:90:82:de:7f:83:30:5c:5e:95:ac:8c:57:00:a9:
64:0a:50:de:04:c3:79:82:32:9f:a0:77:16:f2:9d:
c4:f6:e3:f7:f9:bf:30:ba:ef:6f:c0:50:2d:4f:65:
08:43:8f:0f:f9:48:d6:3b:3d:28:29:07:de:30:fe:
3b:40:21:1b:e2:39:b0:06:85:5f:43:b1:ec:50:9d:
fe:fc:1c:5d:fc:11:9f:2b:af:f8:23:67:1a:0d:62:
be:54:8f:26:c6:de:7c:45:fe:a9:f7:0f:61:dc:76:
08:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:72:73:68:FA:7D:D4:32:F5:08:45:BE:22:1C:6C:19:EE:DE:CF:2D
X509v3 Authority Key Identifier:
keyid:D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:74:d1:da:29:9c:5f:c0:62:c5:49:71:98:e1:85:bf:b2:94:
7f:2d:85:91:36:7b:18:15:3e:81:cc:e9:e0:1d:e6:76:2e:0b:
7a:dd:d5:c7:39:a3:a8:88:52:5c:60:2d:0b:ba:cf:19:86:7c:
df:b3:21:35:6f:d8:d8:21:c4:bf:78:f8:ca:95:30:68:e2:f4:
ac:ab:da:ae:7d:6f:84:16:e9:fb:22:15:af:ae:3b:12:63:95:
03:60:bd:df:c9:44:1f:07:da:81:c0:08:0c:be:3f:7a:30:98:
58:f3:7a:45:98:59:e7:db:ad:3d:19:c1:a5:31:d0:e4:15:d9:
ba:81:dc:ac:2b:15:29:8b:9b:52:f8:3d:75:86:ad:62:ce:8c:
a9:fb:7d:65:2e:f3:d2:b0:6c:35:bb:95:c9:dc:4c:db:54:7d:
8d:b9:5b:20:3c:b6:62:5e:01:b8:7d:84:d1:e2:5f:8d:9f:11:
ff:7a:db:56:a3:35:2d:89:a6:3b:a2:3f:78:f7:0a:a5:ba:3d:
ca:28:82:64:1b:b6:49:ff:76:b4:6c:62:d3:4e:82:e8:13:f8:
43:17:9c:7c:e1:e2:7a:22:cd:d9:e9:95:d7:67:08:af:bc:b0:
96:cc:3b:b8:33:bb:30:70:de:fe:78:b1:ab:b6:ed:58:ee:86:
5d:0c:a5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:15:10 2025 by rpki-client