Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft
File: 1V5WEXiBQrMVQorlH2fLus-At-g.mft (raw, json)
Hash identifier: wyostwk1AfmiaVoKbUKBwfj8EUtG709r/SpCFRAf5Mg=
Subject key identifier: E8:DB:95:4A:46:86:C2:34:FA:F4:75:AA:00:19:DC:88:65:25:4B:C0
Authority key identifier: D5:5E:56:11:78:81:42:B3:15:42:8A:E5:1F:67:CB:BA:CF:80:B7:E8
Certificate issuer: /CN=d55e5611788142b315428ae51f67cbbacf80b7e8
Certificate serial: 0198D65FEE021F9CF9E0371A21890377EE83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft
Manifest number: 039D
Signing time: Sat 23 Aug 2025 10:01:07 +0000
Manifest this update: Sat 23 Aug 2025 10:01:07 +0000
Manifest next update: Sun 24 Aug 2025 10:01:07 +0000
Files and hashes: 1: 1V5WEXiBQrMVQorlH2fLus-At-g.crl (hash: Qd1u0WU7sIb+RPk1xGmBDXa19cl+eq5PvfRlbeAfVcs=)
2: y49JuAVDoy-LfsHdEc6QYgh16LA.roa (hash: lgV8xv23uaL4oGyw+8u8NKX5nD6V6ZzdAGMuEZqxGwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:ee:02:1f:9c:f9:e0:37:1a:21:89:03:77:ee:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d55e5611788142b315428ae51f67cbbacf80b7e8
Validity
Not Before: Aug 23 10:01:07 2025 GMT
Not After : Aug 24 10:01:07 2025 GMT
Subject: CN=e8db954a4686c234faf475aa0019dc8865254bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a2:d5:da:41:28:e1:29:dc:c7:df:ea:1d:f1:
5a:cb:ee:d1:c5:0d:e8:9b:03:43:c9:83:ef:2c:1b:
c4:a5:d5:80:76:7e:67:49:15:9c:8b:dc:c8:98:8a:
a1:39:ad:3a:58:e8:3b:3e:81:0f:e7:ab:03:53:b9:
97:09:a9:27:c0:e1:1d:7b:6b:59:dd:97:b2:7f:f6:
cc:b3:a3:b7:f1:65:a0:cb:b5:8c:f0:1b:1b:86:38:
7a:46:8c:dc:3a:a8:63:e4:2d:f2:d0:49:dc:59:f9:
80:2f:68:33:c3:f9:9d:de:ce:65:db:06:0f:ef:f0:
b5:08:de:cd:d6:b5:50:83:70:05:db:72:e8:37:79:
e9:d0:92:61:3c:d1:90:50:fe:46:c3:eb:3b:eb:d1:
f2:e0:26:c9:8c:44:24:f2:d2:9a:50:cf:94:65:7f:
5d:71:b5:4c:6d:65:d6:81:5c:27:8e:42:ae:2f:91:
03:ff:d7:9d:a2:91:aa:6c:c2:15:dc:b5:b9:50:46:
f7:c9:af:c2:bf:19:18:42:be:d7:f2:cc:54:a2:3e:
d9:cc:77:56:a0:7c:f9:33:6d:1f:ec:cf:83:a6:c3:
a3:96:38:8c:82:93:8a:2f:9a:8c:26:9a:41:0d:c1:
1e:ed:7e:24:99:31:d1:e1:91:79:68:db:5e:73:3c:
b8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DB:95:4A:46:86:C2:34:FA:F4:75:AA:00:19:DC:88:65:25:4B:C0
X509v3 Authority Key Identifier:
keyid:D5:5E:56:11:78:81:42:B3:15:42:8A:E5:1F:67:CB:BA:CF:80:B7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:3a:f1:e1:81:f9:40:38:d3:29:08:5d:60:c3:84:bb:47:f7:
a0:46:e4:d3:73:9d:64:c8:36:e0:e1:77:78:5d:58:d7:02:8d:
c5:59:bc:6e:89:bb:a5:4a:e6:e7:2b:1e:e1:ba:0f:49:d8:56:
10:db:50:a9:f9:67:0a:62:e4:d2:39:a1:ee:a1:64:cb:5b:51:
66:11:0e:2b:e4:a9:7c:31:69:5d:26:16:ca:8f:35:76:82:23:
df:dd:40:d3:c5:67:3b:5d:30:27:c9:0f:5e:60:a6:61:d0:79:
06:22:71:8d:7c:a8:70:95:30:58:c7:5c:8a:33:fa:66:c3:a7:
cb:14:50:4a:55:24:d8:fc:2c:3b:e2:19:25:dc:5e:e9:cc:6a:
ff:02:95:c7:3e:74:9d:d1:ca:42:a8:2b:d6:ec:72:9d:af:a9:
6a:55:79:65:bf:f5:3a:b3:ad:f2:9f:ce:ae:95:2c:f5:f4:8f:
5f:a0:3e:2c:f5:1f:dc:a7:5e:40:ce:67:00:ea:51:3d:2a:a7:
92:bd:0d:f6:81:6e:de:0c:c0:06:19:1a:e9:70:f3:95:76:7c:
37:df:4c:18:ed:03:43:6a:b5:a7:85:70:c1:af:8a:0a:78:bb:
6b:0c:43:5f:2e:fd:4c:c8:fd:ce:3e:11:0a:d4:e7:00:1d:f4:
77:c9:51:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:30:51 2025 by rpki-client