Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
File: 1DySR0_tODyV-izNg9YU9X5WPYI.mft (raw, json)
Hash identifier: 3+VrqcmznoYM8UdLkJTy8kQNoqdYlDHkOLeionkVPIw=
Subject key identifier: 90:AE:DC:88:15:42:B7:75:CC:71:34:1F:88:D9:9E:C8:BA:67:01:DA
Authority key identifier: D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82
Certificate issuer: /CN=d43c92474fed383c95fa2ccd83d614f57e563d82
Certificate serial: 0198D54DECFAC4752F1F759F7D73AE8EEF74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:01:50 +0000
Manifest this update: Sat 23 Aug 2025 05:01:50 +0000
Manifest next update: Sun 24 Aug 2025 05:01:50 +0000
Files and hashes: 1: 1DySR0_tODyV-izNg9YU9X5WPYI.crl (hash: xmhZvJWJsJYU8iPOh7EK3vjIBrr6w1teef5PaMbFVq4=)
2: YeNb4uILFMttwTAEJ0OqaURJezM.roa (hash: TrCAXhjpMq5IYAz3anoVsFKGrU1fVwfTtHHZACZFwhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:ec:fa:c4:75:2f:1f:75:9f:7d:73:ae:8e:ef:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43c92474fed383c95fa2ccd83d614f57e563d82
Validity
Not Before: Aug 23 05:01:50 2025 GMT
Not After : Aug 24 05:01:50 2025 GMT
Subject: CN=90aedc881542b775cc71341f88d99ec8ba6701da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1a:3f:69:d4:32:bd:63:5e:c1:bc:a7:a1:1f:
7e:b1:9a:96:aa:a1:a5:5e:40:38:1e:77:47:b4:7d:
75:6b:ac:d4:4a:a1:07:d3:da:7f:f3:07:d7:b5:5d:
f1:71:1c:95:11:2f:89:03:ac:0f:4c:61:b9:de:2b:
00:93:bb:ff:55:cf:6c:ac:b7:e9:ee:a8:d3:3a:42:
84:02:8d:b9:01:7c:13:ff:3c:67:78:2b:c7:2c:81:
63:32:96:c8:31:c5:42:96:83:9e:38:9d:53:af:ad:
ff:52:e8:85:41:81:f4:b2:9b:76:38:ff:45:75:67:
58:ba:4a:19:56:54:3b:81:f0:bf:83:d7:e1:26:08:
92:83:a6:5e:39:fe:39:b3:fc:c9:fd:89:96:b2:e0:
03:98:54:ba:d1:bf:54:33:e5:11:99:24:8e:0d:67:
e8:f4:84:e0:0e:94:c7:9e:2a:4b:ef:86:d3:a8:44:
41:8d:ca:19:27:57:66:7e:f3:fb:0b:13:af:1d:4b:
b5:1b:c3:74:da:d4:6c:fd:6f:e0:85:85:a0:81:a1:
68:fc:7a:9d:c6:11:18:ac:c7:66:21:dc:98:54:00:
b6:e6:75:d0:aa:9d:e6:5b:ea:c5:b3:ab:ca:19:19:
c0:c9:39:40:52:f5:88:6e:79:09:9f:bc:c8:4c:8d:
97:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AE:DC:88:15:42:B7:75:CC:71:34:1F:88:D9:9E:C8:BA:67:01:DA
X509v3 Authority Key Identifier:
keyid:D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:03:9f:3c:5b:0a:f9:37:8b:72:47:d6:ea:ca:e7:48:8c:1b:
3d:d3:58:62:44:1c:92:d6:51:1c:89:8f:d2:33:d0:48:1b:57:
2f:2f:79:c3:04:59:62:da:7a:78:0e:bf:22:c2:ee:e5:10:89:
08:e1:a6:88:cf:9f:e8:54:99:89:b4:7a:b8:24:00:51:cd:f6:
1f:43:fc:3a:9e:4e:05:2c:7d:0d:e6:ac:2c:0e:fe:66:23:60:
a6:0c:28:d8:44:9b:e5:c4:d4:a0:d5:59:96:b4:c9:9b:1c:0c:
c8:1e:41:22:93:15:fc:34:21:83:dc:8e:2c:37:78:c6:38:a3:
4c:7f:1d:a3:86:95:dc:10:8e:ab:e9:99:f9:ff:1b:b2:49:7a:
fb:c9:3d:a4:1b:d5:31:e3:e5:06:fc:53:f1:82:97:1b:8f:c8:
c9:1b:ca:b4:22:b9:28:1c:06:83:4f:d5:c0:8a:0e:c2:06:a1:
dc:8b:68:df:5a:22:66:ed:a9:a5:69:56:59:1b:61:1a:32:8e:
0b:50:d3:4b:ea:19:35:b1:ae:a3:d7:64:65:1d:6f:d0:ae:30:
af:01:9c:59:90:51:1c:7c:cd:0b:d1:43:bf:62:60:86:76:ee:
f4:39:51:b9:90:be:7d:a3:d8:48:73:34:50:cd:0a:e0:a4:04:
6e:61:76:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:27 2025 by rpki-client