Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
File: 1-IesflsonOaBskdMOPeVLMqcD7g.mft (raw, json)
Hash identifier: ySM0xB+Sxy7PiC8QTKFH1kkBNidRP1FZ0ayGWEpSJg4=
Subject key identifier: 10:96:CC:81:C6:8C:D4:88:EB:27:A1:07:BB:DF:6D:FD:DF:AE:CD:F0
Authority key identifier: F8:87:AC:7E:5B:28:9C:E6:81:B2:47:4C:38:F7:95:2C:CA:9C:0F:B8
Certificate issuer: /CN=f887ac7e5b289ce681b2474c38f7952cca9c0fb8
Certificate serial: 0198D6298DE8EE1118C13E23950B31E81F81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
Manifest number: 0125
Signing time: Sat 23 Aug 2025 09:01:44 +0000
Manifest this update: Sat 23 Aug 2025 09:01:44 +0000
Manifest next update: Sun 24 Aug 2025 09:01:44 +0000
Files and hashes: 1: 1-IesflsonOaBskdMOPeVLMqcD7g.crl (hash: 4cvgXy1v1agaJuCW9EQhzL/jO7IWPbaD/Smu03vAruw=)
2: _3Y85B8z2fS2vGq-Hizl4wDXl38.roa (hash: F8o4Ii7BXNvUdtKshefQ1D79z84X0mOy6rEj4bR0/gc=)
3: l_JUSDpWiKHWQgc8BJE4UAGBJ5o.roa (hash: paHUYov4Lui7Eal9Hd8uFDeyAS9pLYAQQDUb/8+rLFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:8d:e8:ee:11:18:c1:3e:23:95:0b:31:e8:1f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f887ac7e5b289ce681b2474c38f7952cca9c0fb8
Validity
Not Before: Aug 23 09:01:44 2025 GMT
Not After : Aug 24 09:01:44 2025 GMT
Subject: CN=1096cc81c68cd488eb27a107bbdf6dfddfaecdf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:20:a7:87:8b:80:b8:08:4f:bc:e7:49:27:fb:
8e:49:6c:44:41:1e:75:d5:04:7e:44:97:0a:e1:ba:
d5:b2:d1:88:88:be:07:8a:2d:76:2b:7f:ee:ee:06:
df:1e:a9:5f:59:c5:b7:84:76:04:3c:37:15:78:d8:
fa:f8:9f:18:4c:15:27:67:13:0d:00:80:c0:f6:ab:
cd:ba:21:dd:6f:39:dc:3d:38:d7:c9:45:81:38:1c:
cb:ea:a7:77:54:c9:cc:18:7c:65:67:8c:3a:23:15:
8d:60:cd:1f:93:e4:f0:9b:e7:77:3e:1a:2c:33:07:
d1:65:e3:5c:99:13:e5:58:99:11:e2:71:fa:4e:9c:
9e:dc:1a:58:6d:4e:eb:20:b8:b9:4e:fa:27:04:7e:
90:9d:5d:bb:11:01:47:a8:b0:d8:31:cf:b1:af:1e:
23:f5:f6:2e:fc:cd:5b:fd:f5:21:0d:35:8f:02:09:
7f:3e:12:99:47:55:db:38:f6:52:43:bf:03:17:d2:
14:2e:f4:8b:d2:56:1f:88:ce:9f:22:22:42:96:c8:
fa:67:f1:ad:bf:63:81:6e:c5:4b:1c:6f:94:ad:6f:
f5:fa:fc:90:88:72:6b:b4:cc:f1:30:b8:af:cc:70:
62:1d:74:c8:46:e8:c8:b8:fc:9b:05:e3:44:e0:cf:
92:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:96:CC:81:C6:8C:D4:88:EB:27:A1:07:BB:DF:6D:FD:DF:AE:CD:F0
X509v3 Authority Key Identifier:
keyid:F8:87:AC:7E:5B:28:9C:E6:81:B2:47:4C:38:F7:95:2C:CA:9C:0F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:86:4f:34:07:58:74:f1:79:8e:0a:d5:6a:b1:85:70:58:b4:
89:27:ac:93:06:a6:3c:4b:43:20:24:31:57:e0:4e:14:7d:f7:
01:8e:82:91:eb:db:ea:9b:21:e1:c1:e7:e2:4c:3a:79:09:18:
f9:a9:a0:69:70:5c:3a:c0:95:95:88:00:5d:8b:ff:96:66:02:
b0:7d:b4:f1:7e:ed:e0:e6:0f:54:3a:13:88:6d:5b:6d:9f:59:
c2:a9:4e:2c:29:30:3a:1a:fa:ec:a0:99:dc:bd:4b:ec:b5:cd:
d0:c1:9a:36:32:87:e5:9a:36:d0:86:6d:40:bd:64:37:33:e2:
b9:57:ad:94:5b:58:cd:41:d0:22:71:10:e4:c8:c6:d5:b9:43:
bd:da:09:eb:2c:98:ec:c7:f2:70:aa:64:bf:e0:40:fc:d0:5d:
d9:eb:e8:6e:14:34:90:ef:83:43:9d:1c:1e:46:80:c2:5a:41:
f4:f4:51:52:4d:06:7c:d9:88:19:97:44:a0:2d:a9:90:fc:a6:
e0:d9:e8:02:d2:1c:42:c2:aa:5a:af:27:0f:a2:3a:f4:c4:e6:
1b:2a:11:20:20:b8:74:35:d0:ee:b3:ad:6f:97:33:3f:c6:01:
83:e0:0d:87:74:24:f8:39:0e:8e:ed:03:e9:28:f8:a1:7e:fa:
11:3d:20:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:34:16 2025 by rpki-client