Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
File: 1-U3y-PWhPGRTaJFOPb5Coko22l0.mft (raw, json)
Hash identifier: slK0RD752s4SKqwA3A79nRFNuZnFGt83l6Pe+IeSBmQ=
Subject key identifier: F3:5F:02:A1:74:AB:F0:3D:71:E4:76:B8:AA:CB:4B:E9:93:0D:4C:C4
Authority key identifier: F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
Certificate issuer: /CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Certificate serial: 0198D5BB7B63A671C8466E8F83F68688F9C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
Manifest number: 0898
Signing time: Sat 23 Aug 2025 07:01:30 +0000
Manifest this update: Sat 23 Aug 2025 07:01:30 +0000
Manifest next update: Sun 24 Aug 2025 07:01:30 +0000
Files and hashes: 1: 1-U3y-PWhPGRTaJFOPb5Coko22l0.crl (hash: kYMMQ5RJIqpb7NCXM1OzlrYc2eSlmP3qoSU/1wZyoFA=)
2: 6ZlUqBOWy6SfY78F6eyD54lMPAY.roa (hash: SE9+hxx8Z232AXhES9ATqyXkhpq/sJNlQEl+ue1Fkso=)
3: bxOTocJnEMQaZpcfRu6SqZ9nVWk.roa (hash: 24LpjnsSFmDuGUExqtfPTVWojNEGWlT3a13WwNuUa60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:7b:63:a6:71:c8:46:6e:8f:83:f6:86:88:f9:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Validity
Not Before: Aug 23 07:01:30 2025 GMT
Not After : Aug 24 07:01:30 2025 GMT
Subject: CN=f35f02a174abf03d71e476b8aacb4be9930d4cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b4:16:5b:7a:c6:60:63:cd:a8:ef:00:93:bd:
34:74:79:11:ae:12:ed:59:88:11:d0:7b:98:6e:8e:
fc:ef:a8:06:e2:b0:ef:8f:9c:d7:11:ff:de:79:37:
67:62:14:5a:a8:ef:a7:69:d5:87:e9:58:31:dd:1f:
13:25:4f:6c:43:72:18:4a:fb:d8:93:53:ac:56:77:
b8:ed:67:98:0d:c8:be:ee:9b:cf:bf:e3:e0:1b:52:
8a:51:dc:57:de:4d:8f:ab:6a:8f:65:23:ed:14:6f:
c3:52:01:be:97:e8:e3:98:cb:bc:3f:38:4f:7a:01:
0b:9b:e0:8e:ed:33:38:30:c8:4a:eb:e9:f4:f0:0b:
c4:e1:e5:97:c1:0b:67:7f:06:c0:5d:ef:53:37:bf:
82:1f:f7:20:59:40:03:fc:59:55:5b:a1:e1:e8:dd:
fc:27:01:07:a1:da:1c:c3:45:e1:7e:81:4e:78:c1:
87:cf:50:4b:d7:5c:f7:dd:04:58:40:74:2a:db:fc:
c8:83:81:69:82:d7:06:c4:15:a6:13:55:c5:ae:59:
c3:f8:92:e6:d1:e2:a4:5b:40:8a:c8:6e:e2:58:a8:
57:28:18:df:9b:06:3f:cc:4d:fc:1b:06:93:89:23:
6c:55:62:ec:19:c6:76:af:06:7a:8c:b5:68:6a:0c:
65:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5F:02:A1:74:AB:F0:3D:71:E4:76:B8:AA:CB:4B:E9:93:0D:4C:C4
X509v3 Authority Key Identifier:
keyid:F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f3:a4:16:43:9b:88:c3:ec:91:79:12:35:40:9a:4d:80:0e:
1e:8b:b9:dd:90:3f:7b:67:33:ae:ae:3d:03:16:f9:e2:80:04:
a9:cd:54:2a:da:62:15:70:90:aa:b4:da:93:60:c1:87:52:98:
ae:89:4a:81:f9:08:1c:4a:2a:fe:cc:75:84:43:0a:62:6b:28:
42:93:f4:34:bc:0e:f5:80:0c:2d:c6:59:f7:a0:ca:11:be:20:
5a:51:2e:26:b5:29:4f:b2:95:f1:15:b6:cd:00:6f:c5:13:22:
54:38:3f:8c:22:cf:35:a9:14:a4:5b:5d:5a:ae:ea:c5:31:5e:
b8:f3:50:b5:bd:22:7a:5a:dd:e0:8f:fa:7a:ff:c6:85:72:99:
90:8b:22:43:9e:59:ab:99:28:07:9e:df:60:b4:8c:d1:22:f8:
2d:ff:d3:c6:e3:49:63:e4:96:40:22:93:2a:ed:19:fe:7a:41:
20:e4:16:da:2f:ed:4e:ef:a1:d7:11:1d:00:8e:a7:98:d0:e1:
ac:b7:9a:6b:79:1b:50:ad:97:08:a0:e4:bc:fe:ce:a9:ae:fb:
df:d2:89:f7:59:e8:0a:64:8f:1e:80:44:c6:55:70:21:c9:a9:
a5:9b:bb:0f:95:30:a3:61:10:87:10:0f:e0:c9:fd:1e:63:bd:
5f:bd:27:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:11:14 2025 by rpki-client