Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
File: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft (raw, json)
Hash identifier: Q+QTdgDMiCFq+2cBqhBwynkF62IcmjZ3UFFu4k5UYAI=
Subject key identifier: 78:44:AE:E5:1E:4A:E3:7A:7C:98:57:E5:B5:A1:91:F7:44:09:23:A1
Authority key identifier: F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
Certificate issuer: /CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Certificate serial: 0198D5BC59A6E172B71DECAA0064EDCCE873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
Manifest number: 057B
Signing time: Sat 23 Aug 2025 07:02:27 +0000
Manifest this update: Sat 23 Aug 2025 07:02:27 +0000
Manifest next update: Sun 24 Aug 2025 07:02:27 +0000
Files and hashes: 1: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl (hash: os3eykwQCOfFwsGfEc9UitWuslr7o7TDVFrQqHIQwRs=)
2: S2hU1G91sKiWUh8YeDBY-hdp4ZQ.roa (hash: vffsi4me5kbuxqBTjwviA+XxgoZKSQ7xUMSzQTNSOQs=)
3: vexU20eqD75GiV-RYHWmgxEH73I.roa (hash: nDoTWPqSH3IWThsKOgFZF4UZDo4G9OwYH0ta4b9ZP0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:59:a6:e1:72:b7:1d:ec:aa:00:64:ed:cc:e8:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Validity
Not Before: Aug 23 07:02:27 2025 GMT
Not After : Aug 24 07:02:27 2025 GMT
Subject: CN=7844aee51e4ae37a7c9857e5b5a191f7440923a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ab:41:a2:f5:04:2d:9f:04:17:bd:fc:5f:fd:
d6:25:3f:c4:e7:dc:a2:a0:cb:cf:3f:2e:b8:87:9c:
ef:b2:86:fa:ed:ad:58:87:7c:b7:bb:7c:b0:b2:21:
4f:6c:be:a6:e4:cf:2b:0a:a6:f6:ee:f4:82:a6:67:
ad:6c:2b:4e:8d:d1:91:66:30:8d:5f:4a:d7:f4:b6:
91:c2:8e:9b:35:1f:40:23:ca:5a:df:20:af:66:4a:
96:5c:ae:bd:35:8a:e5:26:bf:aa:2f:f0:27:75:a6:
50:13:58:66:53:38:cd:39:86:2e:d5:57:f4:ba:d5:
e8:88:53:12:6c:4d:a3:44:cd:eb:0f:0a:f8:91:9d:
b9:41:4a:31:9e:70:43:6e:fe:a4:9d:a0:8c:96:a9:
49:00:19:0d:61:bf:25:30:fd:c6:15:75:1a:41:ef:
92:55:cb:7a:47:78:f2:d9:01:41:db:e2:f0:f2:97:
57:3d:82:9f:d9:ca:90:32:e3:c0:91:a8:97:b7:51:
0a:bc:4d:42:9d:fa:80:37:17:7e:e5:5d:ce:f4:08:
3a:da:48:be:b8:20:f4:a6:d8:e8:1b:9c:3d:5c:2a:
5d:de:ce:16:55:4b:3f:df:c5:d8:b9:10:69:20:55:
fc:5c:0c:d0:11:31:36:0d:17:14:9f:cc:4d:e9:f6:
ef:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:44:AE:E5:1E:4A:E3:7A:7C:98:57:E5:B5:A1:91:F7:44:09:23:A1
X509v3 Authority Key Identifier:
keyid:F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:33:54:c9:56:c8:f3:29:1e:0a:47:72:f9:70:9a:53:7e:dd:
86:a8:a3:e8:bb:c5:e3:9b:85:03:a9:ef:88:69:1d:aa:d5:4b:
d7:0a:8e:eb:6c:f9:0f:98:85:f3:a5:fb:af:d0:d8:d5:9d:b8:
05:0d:4f:b9:20:08:98:d6:4f:63:3b:5e:25:19:25:1e:30:5b:
e8:21:20:1a:4e:08:0e:d4:db:6a:b9:fd:39:6b:d7:93:db:68:
4e:5f:00:b6:0d:22:68:ed:92:24:0a:1d:d6:4d:be:36:dd:bd:
0f:24:76:4b:24:29:7e:58:3f:00:04:5d:2f:46:ce:61:6b:29:
90:e0:35:07:a0:5b:4f:a0:86:c2:43:58:ba:fa:d5:79:76:05:
d9:ad:f5:14:0b:88:13:aa:aa:50:67:48:b9:50:52:89:6f:03:
22:e5:63:b6:13:00:2e:57:6d:51:25:fc:b5:d8:89:56:70:21:
0f:83:a7:f0:21:95:b4:a3:41:c3:2d:83:90:f7:af:ca:21:4a:
e5:18:4e:e5:40:f9:12:0a:64:c3:b4:1d:93:4b:3a:e1:ea:86:
94:0e:e5:34:08:5d:20:46:88:8d:e0:d4:e6:51:dd:3f:c7:a2:
73:34:9e:e4:62:af:4d:87:cf:bf:15:33:0a:6a:72:1c:41:29:
f7:8f:19:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:18:43 2025 by rpki-client