Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
File: 18FIdhtnAFMpqokTXTWtI1FzvEg.mft (raw, json)
Hash identifier: 6SGwC3lqBe9MzemQTft0RV7o2K8wDWRNb6B4GsKOtUU=
Subject key identifier: 35:C0:BD:21:F8:4D:09:7E:32:17:9B:EA:B7:E5:AF:FE:4A:39:4B:7E
Authority key identifier: D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48
Certificate issuer: /CN=d7c148761b67005329aa89135d35ad235173bc48
Certificate serial: 0198D850596F5EDCEC6956833AB344B3EB71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 19:03:20 +0000
Manifest this update: Sat 23 Aug 2025 19:03:20 +0000
Manifest next update: Sun 24 Aug 2025 19:03:20 +0000
Files and hashes: 1: 18FIdhtnAFMpqokTXTWtI1FzvEg.crl (hash: Bb6W0aCuC6Jk54OK5MX8DF0+qx+WRwnmXbnKTQHt1x0=)
2: BLbhril53MDVDeifZO2SL2UKKFM.roa (hash: UsTWzBHrl9dfEtBG/7NjUZNeMJlhyin0Rp6YIFRWYAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 19:03:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:59:6f:5e:dc:ec:69:56:83:3a:b3:44:b3:eb:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c148761b67005329aa89135d35ad235173bc48
Validity
Not Before: Aug 23 19:03:20 2025 GMT
Not After : Aug 24 19:03:20 2025 GMT
Subject: CN=35c0bd21f84d097e32179beab7e5affe4a394b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:df:71:07:ae:a2:04:af:c4:fc:8a:47:58:
ff:75:da:b9:3e:a3:26:20:9e:36:5d:b0:8a:94:3d:
33:56:38:87:35:2c:97:b9:97:d5:3e:40:9c:97:44:
65:cd:73:17:c4:f9:bc:92:3a:ea:ee:e0:bc:27:35:
fe:3d:05:46:20:75:10:9b:61:16:e1:0f:76:20:a0:
9c:ad:91:67:7d:d1:23:59:ef:bc:89:a2:6a:6d:0d:
80:ee:c4:d2:24:6e:54:2f:fd:c3:75:a5:c1:24:75:
08:54:c7:58:0a:e9:30:ca:e4:dd:f1:b2:b6:91:b6:
36:57:72:ee:79:0a:29:ea:ec:d1:ad:b5:0a:70:d4:
c9:27:97:e0:6d:e0:22:25:0e:2c:f6:1c:4e:2c:6c:
57:f2:80:1c:ae:b5:30:20:f1:c8:e5:fd:4f:da:06:
e3:39:0b:19:c1:65:0c:bd:54:cc:79:2a:97:5f:38:
df:95:07:be:c8:eb:52:1f:33:01:54:e6:f2:84:0a:
07:cc:e8:11:ff:94:d2:dd:a5:97:66:24:2e:9c:e7:
7a:ec:43:73:8b:f5:76:53:9b:67:bc:1b:f8:0a:d1:
a5:24:61:09:62:25:c3:47:62:85:22:e7:08:33:9f:
85:fd:45:a2:e5:b8:e2:e1:ea:1b:fd:0f:da:97:50:
43:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C0:BD:21:F8:4D:09:7E:32:17:9B:EA:B7:E5:AF:FE:4A:39:4B:7E
X509v3 Authority Key Identifier:
keyid:D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b0:c7:fa:8f:8f:df:9d:e6:9e:62:dc:e4:6e:a2:63:ac:d7:
0a:6e:d2:4a:18:62:d2:1e:e4:8c:4b:3a:b9:2b:31:49:11:55:
26:75:a3:b9:51:4c:f7:75:8c:f1:ef:fa:65:f8:cb:c5:74:e7:
9e:e0:4b:38:9d:a0:14:21:7e:a4:c3:6f:c7:3b:94:5e:af:74:
bb:cb:a5:9a:2b:a2:78:bb:4e:e0:22:57:f6:2f:08:6a:4a:cf:
6d:dd:2e:7d:51:74:f4:da:22:8b:b8:00:fb:39:27:ee:b0:e1:
e3:35:26:4f:7c:42:e2:03:0f:c0:dd:06:af:80:87:43:16:c4:
8e:ff:87:c4:96:d8:30:97:4d:df:da:f7:ae:d1:b6:dc:3f:d3:
ed:f4:73:ac:08:af:f0:c9:2c:c4:f0:c7:da:91:ea:44:66:f3:
cb:ee:ff:e5:39:2c:da:ee:fb:62:c8:da:97:aa:ef:88:6f:f1:
f6:0c:f6:ab:78:5b:bc:6d:da:31:a5:4c:db:a0:8f:1b:8b:d3:
38:a9:c1:a5:05:6f:0d:d0:ff:6a:d0:5b:16:b2:46:07:53:1f:
a6:86:69:8d:e0:b4:99:1c:49:38:98:c3:08:d3:52:ef:a2:3a:
ac:28:01:22:d3:17:85:e5:65:48:50:71:e9:5b:01:23:7f:1c:
2e:2d:39:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYUFlvXtzsaVaDOrNEs+txMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3YzE0ODc2MWI2NzAwNTMyOWFhODkxMzVkMzVhZDIzNTE3
M2JjNDgwHhcNMjUwODIzMTkwMzIwWhcNMjUwODI0MTkwMzIwWjAzMTEwLwYDVQQD
EygzNWMwYmQyMWY4NGQwOTdlMzIxNzliZWFiN2U1YWZmZTRhMzk0YjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc3fcQeuogSvxPyKR1j/ddq5PqMm
IJ42XbCKlD0zVjiHNSyXuZfVPkCcl0RlzXMXxPm8kjrq7uC8JzX+PQVGIHUQm2EW
4Q92IKCcrZFnfdEjWe+8iaJqbQ2A7sTSJG5UL/3DdaXBJHUIVMdYCukwyuTd8bK2
kbY2V3LueQop6uzRrbUKcNTJJ5fgbeAiJQ4s9hxOLGxX8oAcrrUwIPHI5f1P2gbj
OQsZwWUMvVTMeSqXXzjflQe+yOtSHzMBVObyhAoHzOgR/5TS3aWXZiQunOd67ENz
i/V2U5tnvBv4CtGlJGEJYiXDR2KFIucIM5+F/UWi5bji4eob/Q/al1BDAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXAvSH4TQl+Mheb6rflr/5KOUt+MB8GA1UdIwQY
MBaAFNfBSHYbZwBTKaqJE101rSNRc7xIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMThGSWRodG5BRk1wcW9rVFhUV3RJMUZ6dkVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9lOGY2OWEtMTczYS00NDc1LWE2ZmIt
MDExNjUwZmJkNGM0LzEvMThGSWRodG5BRk1wcW9rVFhUV3RJMUZ6dkVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9lOGY2OWEtMTczYS00NDc1LWE2ZmItMDExNjUwZmJkNGM0
LzEvMThGSWRodG5BRk1wcW9rVFhUV3RJMUZ6dkVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABbDH+o+P
353mnmLc5G6iY6zXCm7SShhi0h7kjEs6uSsxSRFVJnWjuVFM93WM8e/6ZfjLxXTn
nuBLOJ2gFCF+pMNvxzuUXq90u8ulmiuieLtO4CJX9i8IakrPbd0ufVF09Noii7gA
+zkn7rDh4zUmT3xC4gMPwN0Gr4CHQxbEjv+HxJbYMJdN39r3rtG23D/T7fRzrAiv
8MksxPDH2pHqRGbzy+7/5Tks2u77Ysjal6rviG/x9gz2q3hbvG3aMaVM26CPG4vT
OKnBpQVvDdD/atBbFrJGB1MfpoZpjeC0mRxJOJjDCNNS76I6rCgBItMXheVlSFBx
6VsBI38cLi05SQ==
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:09:46 2025 by rpki-client