Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
File: 1aCF65WtVfs6ayR-lngRKhTYGSY.mft (raw, json)
Hash identifier: aINFWNn5pecegNlOYVfh/2RECB2JGNgfztZg3DQN8vw=
Subject key identifier: 55:97:E9:73:CC:E7:10:35:CA:AD:9B:DE:0D:61:53:B6:16:61:0B:02
Authority key identifier: D5:A0:85:EB:95:AD:55:FB:3A:6B:24:7E:96:78:11:2A:14:D8:19:26
Certificate issuer: /CN=d5a085eb95ad55fb3a6b247e9678112a14d81926
Certificate serial: 0198D4E099ADB7D902BD46C27BD98584BE13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
Manifest number: 0837
Signing time: Sat 23 Aug 2025 03:02:25 +0000
Manifest this update: Sat 23 Aug 2025 03:02:25 +0000
Manifest next update: Sun 24 Aug 2025 03:02:25 +0000
Files and hashes: 1: 1aCF65WtVfs6ayR-lngRKhTYGSY.crl (hash: we/ecU+XxcQk1Whea1bNESp1JseBmwAxqej/yOnWHPc=)
2: Gfuw2x_T8yQVyP6ui29Llxbnd0A.roa (hash: Gjo+1HCWQtVB1KVlZemBlfNk1FD9JNsAIkXhqPnWnlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:99:ad:b7:d9:02:bd:46:c2:7b:d9:85:84:be:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a085eb95ad55fb3a6b247e9678112a14d81926
Validity
Not Before: Aug 23 03:02:25 2025 GMT
Not After : Aug 24 03:02:25 2025 GMT
Subject: CN=5597e973cce71035caad9bde0d6153b616610b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:90:65:23:9d:67:17:97:49:80:36:a8:15:95:
06:ea:6e:78:58:f3:19:42:e0:56:fd:37:06:e9:74:
48:70:41:b6:e6:26:23:9c:c8:0f:26:7b:33:26:b4:
f1:e0:84:93:82:70:6b:2d:af:76:7a:f7:26:a3:a7:
d2:0a:49:94:e4:33:c8:01:81:de:c0:54:b6:e7:4c:
c7:fe:3b:42:f1:f6:94:f9:09:c3:46:7a:fb:36:29:
da:75:e8:c5:f2:87:98:97:e2:1b:e1:2e:4f:de:f0:
9d:0c:cd:a5:20:ae:c9:fc:d5:ec:8c:8f:82:3b:d7:
38:99:60:38:97:3e:5a:a0:34:6c:12:a1:52:e9:ad:
8e:81:02:4f:21:d1:c2:44:0a:38:b0:89:25:0f:f2:
d3:80:20:d2:2e:13:59:fb:2b:09:e9:cf:c5:67:15:
b8:25:6d:1e:c6:0d:67:0c:88:e7:af:dc:2d:53:d6:
ed:92:a3:e1:72:22:78:ac:45:de:98:63:34:59:ab:
26:24:97:aa:a5:36:d9:32:3c:69:6a:a2:8b:22:d4:
a9:76:c8:19:93:4b:e8:dc:1f:2f:89:b3:1c:22:e9:
e9:ac:7a:d7:dc:83:39:cb:a8:a8:8d:d6:5f:00:e0:
b4:c0:2c:95:dd:64:c6:7c:b4:e2:60:3a:6b:c4:1d:
24:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:97:E9:73:CC:E7:10:35:CA:AD:9B:DE:0D:61:53:B6:16:61:0B:02
X509v3 Authority Key Identifier:
keyid:D5:A0:85:EB:95:AD:55:FB:3A:6B:24:7E:96:78:11:2A:14:D8:19:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:0f:8c:68:c7:b4:a1:d4:17:ff:f8:9a:9c:e7:84:b2:3b:86:
46:b7:cb:9e:a9:05:c2:dd:70:43:59:49:a7:53:db:38:89:00:
f4:5e:39:98:cc:1c:13:65:18:e9:6b:9a:7d:73:88:83:82:e4:
5f:1b:cf:ad:60:ec:3b:c1:c1:74:a7:65:32:41:ef:f8:f4:5a:
ed:b9:53:3e:02:4b:f1:fe:e8:9c:e6:3d:e9:45:11:0a:59:f9:
1d:b2:58:38:29:08:05:1a:e9:23:df:36:ea:b8:16:70:6d:30:
a8:85:33:dd:bc:23:89:13:2f:12:38:6b:16:c3:fa:73:41:a7:
91:f5:05:ab:4d:c3:fa:96:89:58:0e:43:45:c2:81:a8:4f:d0:
1a:29:74:9f:9e:1d:cb:c1:c7:4c:d5:b4:ba:c4:7a:6b:95:fd:
3f:51:d5:d4:cb:e1:76:f7:f6:a4:34:bb:98:2a:93:ef:4f:48:
b9:a0:86:cc:b5:6c:78:69:96:ba:ea:b3:32:7d:d7:2c:28:31:
b6:95:8a:dd:14:b9:23:ad:2a:b7:70:50:08:64:3e:f5:99:bb:
c0:ec:f4:f2:5e:54:34:a2:6e:4d:ac:ef:ac:f1:c7:eb:ea:30:
bd:a9:de:1e:5e:d3:ea:f9:dc:c5:fb:05:b6:82:9b:83:66:fe:
1d:27:79:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:01 2025 by rpki-client