Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
File: 1lAD4kzs-_jowV_2N90V201_rpI.mft (raw, json)
Hash identifier: /xZlvBDAPbHYBzkoZT3ZZokpmhSpHr82plGPH2tJ6EQ=
Subject key identifier: 05:FC:CC:EA:BC:8F:37:99:F7:B4:0A:30:5D:17:F6:BB:D4:FE:A1:78
Authority key identifier: D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
Certificate issuer: /CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Certificate serial: 0198D5838A2010F32CAC73A7DD703816AEF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
Manifest number: 12DC
Signing time: Sat 23 Aug 2025 06:00:24 +0000
Manifest this update: Sat 23 Aug 2025 06:00:24 +0000
Manifest next update: Sun 24 Aug 2025 06:00:24 +0000
Files and hashes: 1: 1lAD4kzs-_jowV_2N90V201_rpI.crl (hash: 3hHLGPNvNbha/aSQKKChreXwIvDik5gTijvO0LbRTPA=)
2: kLDW8S2AqSM38SEqcZhk6y6H9Zs.roa (hash: 1uyD9ShIaMoUE8tZ7cjyGLh54i2J2KfHSIYSBkC6vac=)
3: wIodltuZamN_XbrkxPEbxEvk-zQ.roa (hash: rVn8wcQMjL6Fr2tjBFZGRxqvuP5jpiydhf+juvmtDHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:8a:20:10:f3:2c:ac:73:a7:dd:70:38:16:ae:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Validity
Not Before: Aug 23 06:00:24 2025 GMT
Not After : Aug 24 06:00:24 2025 GMT
Subject: CN=05fccceabc8f3799f7b40a305d17f6bbd4fea178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:b5:17:24:e4:39:bc:d9:6d:a0:ae:b8:7a:0d:
b2:14:bd:cb:44:8d:e6:51:65:f7:45:8a:c2:8e:c9:
9d:95:00:be:73:ff:30:3a:bb:eb:96:b3:77:a5:15:
64:6d:b7:83:89:d0:d7:88:f7:5d:83:78:6d:5b:78:
03:4b:04:6e:cd:a1:09:59:96:bf:6e:3f:d7:66:df:
f1:ee:70:4c:f8:c5:98:31:9a:42:34:01:77:ce:71:
da:1f:c6:97:85:56:9c:b1:4d:6d:ff:6f:0f:24:89:
59:04:89:8e:a4:85:45:16:1d:61:2d:80:ee:2a:96:
15:9d:ec:f8:11:aa:23:92:f5:22:e8:75:98:a3:13:
93:49:e3:a0:1a:10:1b:b6:3b:f4:49:a5:21:d5:0f:
29:3c:32:a0:ef:eb:65:c1:c8:29:27:81:b8:21:f8:
d5:9d:23:c3:88:dc:8f:39:4a:d5:bd:5b:d8:2a:43:
e6:90:e3:50:f4:c7:0e:cd:ba:9f:ae:55:e6:bb:aa:
8e:b3:88:9a:de:20:e7:8d:7e:d8:77:79:1c:c6:8a:
02:3d:cf:ef:2a:2b:b2:d0:8e:f6:b2:a7:88:6a:76:
7a:e2:a7:03:dd:58:49:72:01:0c:ce:91:f1:19:4e:
7f:84:5c:33:39:c9:3a:5b:c4:06:b0:66:56:10:19:
a9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FC:CC:EA:BC:8F:37:99:F7:B4:0A:30:5D:17:F6:BB:D4:FE:A1:78
X509v3 Authority Key Identifier:
keyid:D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b4:fc:37:2a:2f:84:83:c3:cd:5e:c6:54:51:b9:39:31:5b:
8e:09:5a:68:ce:68:96:3c:74:b2:d6:3d:7e:c8:d4:15:97:24:
16:5e:20:b8:31:82:83:e5:a2:d3:45:dd:e9:92:11:f9:4f:9e:
d9:8b:ea:3e:8f:52:62:95:df:24:fa:82:95:2c:6f:44:26:59:
af:d4:1e:90:26:14:c1:f7:a9:e0:13:e2:0c:28:9b:ee:b3:b6:
ad:8f:b6:7b:ff:af:f9:3f:61:f0:5a:b8:1d:bf:07:f8:a0:5b:
4b:14:10:10:63:c2:b4:3b:fd:af:76:8e:e4:2e:90:36:59:42:
10:85:d3:56:11:18:a6:21:eb:a9:12:8b:ca:b2:a7:dc:dd:a7:
8a:98:ff:a2:e8:3a:e9:23:fe:53:48:c0:85:18:e1:bc:58:5c:
80:30:c9:9a:74:d7:fd:49:f3:c5:11:2e:3f:3b:6f:2b:fc:68:
f8:e1:1c:a3:df:3a:93:2b:bf:f7:f4:74:5a:52:dd:42:53:f1:
fd:7d:ed:f7:3a:3e:63:f9:5f:fa:31:52:40:ff:fe:a7:e6:9a:
89:c9:b2:67:cd:22:31:a2:6a:27:46:23:f3:5d:31:52:9d:f0:
6a:10:c4:39:82:13:10:7b:c3:72:ac:7c:75:79:9a:14:96:51:
00:fe:6a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:12 2025 by rpki-client