Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
File: 1fD0usX5pQIvwty8Sj20zGsRZkQ.mft (raw, json)
Hash identifier: GSVi2vZcAFuuhAQe8iw2mEu3r1PLAAu39J7LL71XgSs=
Subject key identifier: 18:FF:6D:46:0E:CA:BF:F0:DD:49:93:C8:D0:3B:F9:BA:8C:B4:E8:C3
Authority key identifier: D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44
Certificate issuer: /CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
Certificate serial: 0198D47383FA18CCFA1D6ED52BB9CA924189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
Manifest number: 1530
Signing time: Sat 23 Aug 2025 01:03:16 +0000
Manifest this update: Sat 23 Aug 2025 01:03:16 +0000
Manifest next update: Sun 24 Aug 2025 01:03:16 +0000
Files and hashes: 1: 1fD0usX5pQIvwty8Sj20zGsRZkQ.crl (hash: A/QUBayMw6A3F5Yjbi59Sym5H3mMC1RtuDQct7sZjhA=)
2: nuwLQIg-lK2envR_t0a0TNPRBGQ.roa (hash: 6zkhxyKXAGxELCe57hpSnoaGWnhmysqwWNpKa980lyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:83:fa:18:cc:fa:1d:6e:d5:2b:b9:ca:92:41:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
Validity
Not Before: Aug 23 01:03:16 2025 GMT
Not After : Aug 24 01:03:16 2025 GMT
Subject: CN=18ff6d460ecabff0dd4993c8d03bf9ba8cb4e8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c2:15:6d:8d:cf:5e:90:0d:77:40:02:4a:fd:
c3:03:4c:15:2d:2d:d7:6d:21:71:36:0c:01:d8:78:
92:73:84:af:f1:60:42:86:bb:84:fe:41:a5:e7:b6:
26:30:70:b4:fa:a9:29:67:c3:3b:1e:48:b8:66:25:
53:5e:17:e8:0f:18:01:35:5e:50:64:7e:6f:4d:e5:
3a:5c:2c:b0:4d:0b:72:71:40:90:53:e9:af:fb:48:
ad:3b:cb:90:36:25:13:24:13:07:be:c3:21:8d:56:
f0:1d:79:82:3f:60:16:73:d2:a3:c3:e3:b3:77:80:
bc:d9:e3:c1:70:a6:8c:2b:72:c4:54:09:fd:aa:56:
a2:b4:66:5f:08:7c:89:f5:20:29:00:52:e0:15:05:
db:c2:a4:bd:cd:aa:76:25:86:f2:17:7a:41:ef:a0:
d2:ef:34:c3:47:69:2d:81:8e:5a:d5:7d:eb:79:ab:
64:4b:d0:64:cf:b2:30:e6:52:4f:db:03:c2:44:6b:
96:b4:7b:31:04:a9:8e:82:db:68:8a:96:5f:3b:22:
5d:23:b5:ea:35:0a:e9:3e:ce:dd:8d:a0:1b:c9:d6:
de:f2:36:7b:67:0c:44:4d:46:04:55:65:0d:fe:1b:
b5:ce:a9:79:b8:d3:f5:d1:31:a9:08:53:f7:d4:bf:
5e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FF:6D:46:0E:CA:BF:F0:DD:49:93:C8:D0:3B:F9:BA:8C:B4:E8:C3
X509v3 Authority Key Identifier:
keyid:D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:1f:04:2b:4c:5d:fb:98:08:25:e9:7f:36:32:19:3c:45:bc:
49:50:5c:0d:ae:63:e8:c1:7c:13:ab:bd:6e:ae:f6:23:b3:78:
58:d8:d7:a1:df:7c:3d:68:dd:b1:4f:3f:1e:e6:fc:96:af:41:
2e:ce:7e:29:00:83:25:0d:11:2d:45:bf:e9:26:95:6f:6c:39:
e4:d1:0c:64:97:ee:48:ff:43:c1:ad:5a:58:1d:36:87:c9:e2:
c7:2d:a0:67:64:27:4e:bb:b1:56:74:1a:69:19:18:18:e2:c7:
ef:b8:07:29:2d:2b:6d:d3:13:9f:59:7f:70:95:cb:b7:34:df:
16:37:38:0d:99:57:24:f0:20:c6:ef:aa:87:ce:fd:24:83:cd:
de:32:bd:4e:df:d6:9e:93:f3:ee:f0:6d:70:51:6c:68:2b:a1:
e7:33:e2:fb:94:d8:76:04:c8:61:28:6a:12:fe:91:b5:ce:a1:
de:76:67:14:17:71:e2:b7:0e:d1:8f:aa:b9:0e:46:5f:be:c9:
27:60:2a:ea:22:c7:5e:79:41:b1:81:f7:03:ce:3d:7f:d6:96:
d8:a0:b1:c9:a5:6b:9f:a2:e0:a9:32:cf:f3:21:8a:68:f3:02:
b1:b1:03:c0:63:a8:fc:3b:a7:c0:c8:a8:27:32:01:b0:11:2b:
e9:d5:b5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:40 2025 by rpki-client