Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
File: 1sHCRltPlz-0sMtmKKmLO1iJbUg.mft (raw, json)
Hash identifier: ohL4FfmhY/2HPZHrPxekt2VV1K+FmtAVriw3OeS15/Q=
Subject key identifier: 6B:01:CC:1D:D7:5B:39:05:ED:6F:75:F5:CA:79:39:03:83:45:65:0B
Authority key identifier: D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
Certificate issuer: /CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Certificate serial: 0198D4E0CC68DAC87C1123BDDA38FB2A05D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 03:02:38 +0000
Manifest this update: Sat 23 Aug 2025 03:02:38 +0000
Manifest next update: Sun 24 Aug 2025 03:02:38 +0000
Files and hashes: 1: 1sHCRltPlz-0sMtmKKmLO1iJbUg.crl (hash: jllAIqW9AXC11IZEnITkkDurbW1RntkZNdWPnoWrX+M=)
2: 6LgX5MehzRAabFx-kl7-VX8WvGI.roa (hash: wiQ+g/d9+jLtiOR7pk9wrMApI0W1PUh3CexN4Wm3rM0=)
3: b4DuszRvCuY1HNLPnYT0Co3AUUg.roa (hash: Se60NV9pecSqSW5M0t+IF1TsZ0uCtpO4LnPo+ovkM6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:cc:68:da:c8:7c:11:23:bd:da:38:fb:2a:05:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Validity
Not Before: Aug 23 03:02:38 2025 GMT
Not After : Aug 24 03:02:38 2025 GMT
Subject: CN=6b01cc1dd75b3905ed6f75f5ca7939038345650b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ff:75:93:01:cc:a8:1d:b6:86:82:c1:36:11:
e7:f6:37:f6:fc:f3:28:92:9a:c6:2b:3e:49:1d:68:
c5:70:df:bd:b1:22:b3:f6:71:7e:99:8c:3b:32:ca:
a8:4e:88:1a:7b:e7:e7:25:4a:f8:f8:6f:93:06:50:
af:76:c8:5b:e0:18:30:e0:f9:f7:b3:56:43:3a:80:
bb:0c:dc:24:43:21:76:6d:b4:66:4b:ee:b2:65:ad:
25:8d:a9:c9:7f:80:03:04:95:c6:48:b4:ca:5f:24:
7b:2d:a0:52:5e:1b:d2:1a:26:97:3d:30:0d:89:35:
fd:76:d0:80:c8:90:bf:54:01:29:c0:fc:c7:80:34:
65:80:84:40:bf:8c:d6:a5:89:a0:7f:35:80:5c:4f:
24:39:47:9f:4e:d4:58:29:41:a7:89:09:5a:e4:7e:
82:51:20:f2:de:29:aa:78:66:35:b5:04:56:c3:81:
c0:0f:dc:3b:30:1f:dd:d4:9a:a6:e4:f8:b4:30:a7:
5b:15:f7:5f:39:93:74:a8:27:12:f6:c0:e3:2c:80:
2e:e0:95:1a:1e:00:c2:63:a7:1e:28:b7:95:36:21:
28:ce:4b:3a:33:8f:af:09:98:7c:e8:37:ac:27:6e:
de:c6:f7:42:19:24:08:9d:d3:6e:65:5a:b8:8a:de:
b2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:01:CC:1D:D7:5B:39:05:ED:6F:75:F5:CA:79:39:03:83:45:65:0B
X509v3 Authority Key Identifier:
keyid:D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:e5:bc:a1:21:e4:46:ed:b6:05:d6:a3:5f:8c:90:d7:95:36:
5c:8b:d8:67:0f:f4:8f:67:55:2d:ff:46:0d:c6:4f:b0:c2:96:
32:fa:54:a6:d0:04:a1:ff:ef:f5:5c:c5:55:08:19:9a:19:35:
f2:a4:15:19:65:1f:a0:35:b3:18:81:ee:3d:f1:2e:3d:b5:8b:
05:fb:08:c8:41:f0:bd:84:93:03:8d:5f:e3:38:f0:5e:43:7a:
0c:9d:8c:92:92:06:e3:72:4c:cd:66:3e:29:63:61:05:2a:06:
66:9e:4e:67:8e:85:e2:69:e6:5a:b5:21:49:af:b9:63:05:8e:
07:47:84:1d:c5:9d:76:4a:d1:f4:41:b3:a9:53:71:83:66:2e:
2a:33:36:c7:2f:d1:88:dc:32:12:19:cb:a7:c0:ca:3e:8c:c1:
e0:ae:bb:6b:57:8c:c0:a9:f9:98:7a:ad:79:07:47:90:60:3e:
24:30:d8:99:e2:aa:0f:3d:f5:56:32:ac:66:c0:32:eb:09:65:
9a:ca:a1:f3:87:8f:2a:e9:0d:25:6a:4b:34:4d:e1:ed:ee:0d:
df:51:8a:90:4f:e0:42:d2:32:2d:2d:b6:04:4b:85:60:f1:c3:
15:e7:ae:1f:69:49:91:2e:56:b5:76:0f:a4:43:87:8c:87:22:
3e:37:4d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:32 2025 by rpki-client