Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
File: 1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft (raw, json)
Hash identifier: pkNzs2LRyWgKUwVyhmQsqBEnjbFAd1Zd/fxr/JUMs3g=
Subject key identifier: A2:A4:03:A8:F2:B1:6C:39:D4:81:2A:6D:83:AD:CD:59:51:BD:17:C1
Authority key identifier: D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E
Certificate issuer: /CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e
Certificate serial: 019895921EFF381DD4801D5638BE153AC9A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
Manifest number: 0221
Signing time: Sun 10 Aug 2025 20:00:38 +0000
Manifest this update: Sun 10 Aug 2025 20:00:38 +0000
Manifest next update: Mon 11 Aug 2025 20:00:38 +0000
Files and hashes: 1: 1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl (hash: lpA2VdGr5uhQuUE5jqbLETA5OYIXnzPM0y8y95Qsq3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:92:1e:ff:38:1d:d4:80:1d:56:38:be:15:3a:c9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e
Validity
Not Before: Aug 10 20:00:38 2025 GMT
Not After : Aug 11 20:00:38 2025 GMT
Subject: CN=a2a403a8f2b16c39d4812a6d83adcd5951bd17c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8d:54:21:9e:b9:4e:6f:94:b8:1c:af:20:da:
8f:33:3e:8f:83:59:ed:20:5e:72:f5:75:c1:09:6e:
8d:61:d9:9d:01:4f:a5:32:a3:67:dc:c9:5f:9a:06:
67:27:42:8e:0c:4a:5e:2b:82:86:30:05:b0:1e:0c:
d8:92:45:62:d8:55:f0:d0:ed:6c:8f:63:e7:c6:99:
12:a0:ef:fa:05:2f:7c:4e:0d:2d:b9:64:7e:d3:d6:
a1:54:35:15:dd:46:78:b3:c9:10:0d:2f:6b:ae:b4:
fc:b1:86:62:ff:a2:fe:a8:0c:50:c3:d0:01:df:5c:
0b:92:1c:cb:e5:b7:ce:a2:cc:73:5f:9a:a3:cb:31:
61:6d:c5:31:ca:01:50:f6:4e:31:7a:2c:42:68:a0:
a5:29:7d:49:8a:e6:7f:67:9b:97:b9:bf:e0:ff:21:
05:fb:4a:d3:60:3d:99:78:17:68:1e:d2:0e:2b:25:
6d:c6:9c:f2:34:0c:07:27:88:23:b4:55:dd:98:4a:
01:d0:a8:23:b0:c3:b8:c1:ed:cd:81:3e:e3:50:83:
c2:b3:ac:d8:68:6b:c3:4e:f6:83:21:3a:96:54:1a:
d5:56:0c:c3:3c:bf:30:0b:66:07:1c:ee:88:99:96:
a0:3d:f3:bc:5f:21:06:fa:e2:b6:89:af:d3:bc:3a:
f3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A4:03:A8:F2:B1:6C:39:D4:81:2A:6D:83:AD:CD:59:51:BD:17:C1
X509v3 Authority Key Identifier:
keyid:D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:9e:04:d3:e2:1d:b9:bb:6a:95:df:b9:06:53:f5:2e:4b:f4:
f1:bd:6f:c3:59:58:06:59:28:20:86:a1:38:de:a8:b5:4b:8f:
ff:ad:7b:14:e3:6f:82:61:e7:b4:f1:16:6d:4e:f8:de:d1:ae:
2c:72:88:38:e0:35:b9:3d:e4:9c:4b:27:e9:2c:46:5c:f3:6e:
12:fa:c2:16:cd:c7:c2:49:2c:a3:db:f2:fa:59:ff:4c:e2:5a:
0e:57:73:78:5d:ec:e9:9c:84:85:68:b5:dd:18:26:23:07:2b:
94:25:5f:1b:7f:71:cf:0d:d4:51:77:3d:e6:a2:7c:77:98:92:
2c:bd:44:b1:28:22:88:ea:e3:57:64:b5:18:97:77:bd:c8:a7:
c2:18:f4:43:7a:f2:4a:e7:2e:af:a9:7e:6e:13:c4:fa:84:cd:
66:f2:9f:f6:55:fa:0c:89:8c:29:fd:eb:2c:b3:36:2c:fa:0a:
cc:c5:8b:54:46:d9:61:7e:dc:71:0f:75:cc:1e:06:0f:46:8c:
e3:f0:7c:39:25:4a:0d:22:76:16:b4:a6:ba:77:f6:2f:e4:48:
48:51:df:19:49:8f:33:db:2b:9e:26:28:f1:90:bf:fa:06:ad:
52:e2:59:10:22:f0:1f:b0:f7:f1:61:46:27:e0:5b:fe:31:b0:
0d:e3:fc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:46:54 2025 by rpki-client