Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
File: 1DsiEwqpp3NCVHaewTv-Fx-h4os.mft (raw, json)
Hash identifier: N3rBAwKiVh68jM/KjlKzgq2sVnFBPHcesy63EnrSZ8U=
Subject key identifier: 00:9F:E2:87:4F:32:DF:BB:C1:5B:B1:F4:AF:6F:D4:AA:9F:5D:C2:26
Authority key identifier: D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
Certificate issuer: /CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Certificate serial: 0198D54EB498DB14F4213619A04663FECEA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
Manifest number: 0B53
Signing time: Sat 23 Aug 2025 05:02:41 +0000
Manifest this update: Sat 23 Aug 2025 05:02:41 +0000
Manifest next update: Sun 24 Aug 2025 05:02:41 +0000
Files and hashes: 1: 1DsiEwqpp3NCVHaewTv-Fx-h4os.crl (hash: b6SmX7OmGqOP/J5wpUr2ldoGtgzdhYv0aw+6sRLId6c=)
2: wEdGwXpwYmsgP9g00gzYyHwBX_w.roa (hash: xXn4YaJmCyamPKNCyA6d81IZAPpAi8iJdAjjF+NkEPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:b4:98:db:14:f4:21:36:19:a0:46:63:fe:ce:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Validity
Not Before: Aug 23 05:02:41 2025 GMT
Not After : Aug 24 05:02:41 2025 GMT
Subject: CN=009fe2874f32dfbbc15bb1f4af6fd4aa9f5dc226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1e:fc:36:b5:9c:3e:e3:45:d5:b0:b2:52:88:
ff:de:02:4f:f5:a8:a2:60:fb:e2:1c:c8:71:52:fa:
a9:f4:7f:e8:56:d3:53:3f:c9:45:5c:50:09:b3:1e:
4a:e6:9a:37:1c:c2:50:49:48:44:28:19:61:18:49:
f4:44:32:dc:24:16:c7:de:c1:b4:5b:61:b2:e8:fd:
eb:5b:72:5c:f3:a4:d4:d5:69:79:c3:53:39:fe:4b:
94:a8:bb:bb:71:df:6b:9e:24:b0:c6:77:1f:a3:10:
95:e4:e2:4f:2c:6c:ff:ab:ab:8d:36:7a:f6:94:69:
72:e7:4c:48:dc:e4:cf:2c:93:2e:e2:ac:78:da:88:
64:b7:46:8f:00:ec:b5:b2:a4:0a:6c:9a:52:71:38:
d0:37:f2:cb:d6:71:f5:8a:12:59:f0:31:67:2e:17:
9b:46:73:36:45:16:e1:b6:ed:20:b4:4c:99:7c:04:
8c:79:a8:89:c9:73:b0:19:a9:fd:02:da:0c:08:b8:
ac:6b:7f:c9:a8:1f:3a:9d:0d:34:1e:6f:17:4a:2b:
aa:6b:2c:da:0d:72:e1:0e:a9:23:dd:56:6c:9b:bc:
28:71:ef:2f:74:9f:cf:cf:e3:d0:8f:50:39:88:eb:
9c:df:c5:c5:87:37:cc:50:cc:36:28:d8:a8:48:b5:
a2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9F:E2:87:4F:32:DF:BB:C1:5B:B1:F4:AF:6F:D4:AA:9F:5D:C2:26
X509v3 Authority Key Identifier:
keyid:D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:8a:90:05:d9:fd:1e:f8:52:86:ee:bd:84:c9:19:7f:f1:bf:
11:b3:39:7f:0c:fe:a8:9f:39:54:56:ae:7c:21:54:a0:8a:02:
64:a1:7c:2e:f1:5d:44:82:59:27:e7:c0:00:16:a6:e8:32:53:
ec:33:d3:ff:dd:90:3b:72:8c:f4:fd:4c:4f:29:90:c4:7c:67:
ed:c8:97:06:1f:06:71:70:33:e6:28:dd:ac:46:c1:fd:b5:3c:
13:0a:49:05:fd:39:9c:a6:42:80:da:28:5e:ac:51:94:ae:aa:
a8:89:48:53:fd:0a:b4:b1:6c:e4:25:bc:25:27:c1:3c:62:33:
2a:85:24:df:e3:10:c4:ed:8e:91:bf:57:f7:f3:40:d4:2b:4e:
b6:9e:ed:33:27:c2:14:d3:1e:d3:d6:6f:d2:e2:d0:6c:8e:e3:
1a:e0:cc:c7:73:2f:21:37:36:a5:53:60:3b:ee:13:29:a7:3e:
27:83:16:59:c9:a7:1d:5a:e9:a5:ab:d1:09:de:cb:9c:a9:c8:
28:63:85:52:9f:60:62:b1:81:a3:ad:15:f1:f8:6e:c1:58:c8:
56:e0:88:3f:d8:6b:df:17:74:c3:b7:80:54:56:2d:ec:52:76:
1b:53:65:47:e4:ce:34:89:d6:a1:0f:21:83:24:dd:0e:60:00:
e2:fa:be:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:56 2025 by rpki-client