Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
File: 1dWXuXOtoQUvZbPqHeHkguI_PSo.mft (raw, json)
Hash identifier: eBfE6Qv2cMXpq7P99lF12FtBWS6UmwREHfytKjfCgIk=
Subject key identifier: 8E:97:63:59:26:FE:1B:0F:FF:1D:45:49:BB:EF:4B:55:10:A3:EE:C4
Authority key identifier: D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A
Certificate issuer: /CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a
Certificate serial: 0198D5BC54B2B01C93F8AF18F502ECA0E4CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 07:02:26 +0000
Manifest this update: Sat 23 Aug 2025 07:02:26 +0000
Manifest next update: Sun 24 Aug 2025 07:02:26 +0000
Files and hashes: 1: 1dWXuXOtoQUvZbPqHeHkguI_PSo.crl (hash: SKFZ651lKc4ZfxfRnYIht0UX5TBlPPaPZ8PfORXd8fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:54:b2:b0:1c:93:f8:af:18:f5:02:ec:a0:e4:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a
Validity
Not Before: Aug 23 07:02:26 2025 GMT
Not After : Aug 24 07:02:26 2025 GMT
Subject: CN=8e97635926fe1b0fff1d4549bbef4b5510a3eec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f2:11:32:de:15:33:12:f5:59:d9:3a:32:68:
52:cf:37:88:de:f8:d8:1f:b2:3e:79:8d:1e:a0:34:
db:81:64:5f:44:86:53:21:84:59:d8:bc:27:1f:c0:
bb:63:88:71:da:2d:a3:cf:0b:0e:50:6d:cc:69:c1:
79:42:82:5c:4e:53:90:f9:13:d5:bf:88:83:bf:52:
f9:20:e5:4f:d0:36:9c:e9:ee:8e:12:db:43:bc:28:
a8:25:9d:53:ac:ef:91:22:88:14:92:91:40:bc:6e:
e6:c4:58:3b:b9:07:d0:da:20:d7:da:c6:58:32:26:
eb:da:17:0d:25:82:6f:c4:ca:e7:ed:36:f0:a2:0e:
c9:df:7d:3b:f2:76:7d:14:4c:fb:be:2e:2d:20:22:
b8:78:09:c8:8b:fa:a6:fb:31:09:b6:b3:80:66:f9:
21:a4:94:52:80:47:84:7a:30:89:47:32:18:88:12:
7a:cc:fd:e4:cb:25:ff:02:a5:cd:80:80:82:c5:9e:
09:9f:7d:61:f0:86:bd:f4:1e:6c:28:f4:e4:81:1f:
08:65:4c:b6:b2:17:53:8c:1b:d9:c0:7f:e6:33:be:
30:cb:0f:97:1b:23:a4:33:67:c7:90:95:05:c3:bd:
96:dc:c8:0c:06:26:2e:fe:e1:3b:d6:86:0b:cc:33:
42:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:97:63:59:26:FE:1B:0F:FF:1D:45:49:BB:EF:4B:55:10:A3:EE:C4
X509v3 Authority Key Identifier:
keyid:D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:89:10:dc:09:f8:7d:b4:ef:55:b5:48:d7:0e:f8:b0:c5:da:
f8:da:52:50:b1:56:a9:7e:ba:1f:f2:86:7e:90:1b:44:2c:3d:
f3:fc:fa:39:0b:86:5d:b5:52:98:0a:97:dc:8f:88:93:e5:7f:
b3:9b:67:1a:2b:7c:66:2a:34:ed:ab:e3:aa:78:45:65:ba:83:
62:b8:9a:79:9d:8d:11:b1:2e:cf:a3:8e:66:94:6c:ad:6f:94:
0c:2e:48:57:b7:9b:0e:68:e2:d9:9e:0b:9d:34:28:ab:a6:2e:
f9:39:c9:94:2f:c8:f9:b1:0e:24:94:3d:7f:16:86:e9:91:1a:
18:2b:8c:8e:5d:77:64:98:bc:cd:28:c0:f2:35:90:e7:9b:5d:
63:1d:ef:57:3b:1b:06:4d:5f:c0:6b:e1:5d:f7:23:35:3f:df:
0e:d8:1a:4e:ed:3d:89:ab:17:8c:37:18:d6:f5:42:4b:79:48:
ff:51:c8:f5:e0:f4:fa:38:e6:df:20:b3:26:af:d9:a2:67:16:
f4:ab:0d:05:ad:c0:46:03:ed:35:6d:c6:94:95:02:9d:77:72:
8a:76:89:8c:c2:d9:15:32:ec:45:8c:7c:74:db:dc:76:d9:5f:
f4:7a:2e:42:f8:05:8b:b5:08:82:f7:8a:2b:e5:73:4f:5c:e8:
e6:17:a8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:42 2025 by rpki-client