
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-2d6wpD-CR-iNunaZquveM0sjGE.mft
File: 1-2d6wpD-CR-iNunaZquveM0sjGE.mft (raw, json)
Hash identifier: JF0ix/g6/GGfn3OsZHkSsj2HEhhz8UkXiWWVPcohFTc=
Subject key identifier: DC:F8:60:AF:5C:EE:E7:91:5F:02:64:A1:36:E0:17:10:47:95:4C:84
Authority key identifier: FB:67:7A:C2:90:FE:09:1F:A2:36:E9:DA:66:AB:AF:78:CD:2C:8C:61
Certificate issuer: /CN=fb677ac290fe091fa236e9da66abaf78cd2c8c61
Certificate serial: 0198D472544A9C6D722005B74DAF4C2FE3C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-2d6wpD-CR-iNunaZquveM0sjGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-2d6wpD-CR-iNunaZquveM0sjGE.mft
Manifest number: 1043
Signing time: Sat 23 Aug 2025 01:01:59 +0000
Manifest this update: Sat 23 Aug 2025 01:01:59 +0000
Manifest next update: Sun 24 Aug 2025 01:01:59 +0000
Files and hashes: 1: 1-2d6wpD-CR-iNunaZquveM0sjGE.crl (hash: OwPd+YIYitMk6tbK9nKDrIox+B6seMAvOEol/NRHDe0=)
2: 9IBHLWVOZ0QllouyRgZXZZaYaZg.roa (hash: EjNvIqlv1V/ciVJtAGWjow9nk1g6XEmRzV7siqw9gdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-2d6wpD-CR-iNunaZquveM0sjGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-2d6wpD-CR-iNunaZquveM0sjGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-2d6wpD-CR-iNunaZquveM0sjGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:54:4a:9c:6d:72:20:05:b7:4d:af:4c:2f:e3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb677ac290fe091fa236e9da66abaf78cd2c8c61
Validity
Not Before: Aug 23 01:01:59 2025 GMT
Not After : Aug 24 01:01:59 2025 GMT
Subject: CN=dcf860af5ceee7915f0264a136e0171047954c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1e:70:7d:f4:11:8e:b9:9a:9f:39:38:6f:a1:
92:28:61:45:6e:38:e8:f8:17:d3:39:0a:de:f2:1b:
47:e0:f2:7e:70:d0:a4:52:1e:59:36:99:6d:c7:f9:
e4:d1:b1:f7:db:92:10:fd:5b:1b:1b:5c:f0:9a:e3:
b0:41:7d:7f:f7:ad:3b:6b:e3:59:e1:09:f0:2b:37:
db:66:49:dd:04:4c:9a:d4:2f:63:5a:a9:9a:b4:86:
e8:82:fc:58:4e:aa:94:ed:17:65:63:e8:a4:77:76:
51:28:3b:85:31:60:f7:94:53:07:cf:55:dd:3c:05:
5e:e3:51:ca:d3:75:f4:51:c5:7e:f9:5e:a3:d7:e7:
61:19:c2:0d:b3:7f:fd:88:38:90:2d:c5:f2:a2:d3:
68:9c:51:7a:cc:62:3f:88:c8:10:f9:3d:2c:f7:79:
39:eb:ad:d0:4f:ee:d1:38:e1:ac:74:10:b9:f4:21:
99:98:48:49:50:90:90:3f:0c:33:b0:b5:aa:bb:0e:
9b:3d:44:06:29:9f:4f:d4:17:a6:9d:95:60:d0:88:
9b:5e:78:ac:48:53:05:ff:44:e2:1a:89:5d:43:3c:
e3:ce:7b:b2:6f:cf:f3:e7:39:aa:54:7d:1d:a7:8c:
2d:0e:15:32:b7:e2:07:bc:c0:3a:6f:59:65:31:02:
77:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F8:60:AF:5C:EE:E7:91:5F:02:64:A1:36:E0:17:10:47:95:4C:84
X509v3 Authority Key Identifier:
keyid:FB:67:7A:C2:90:FE:09:1F:A2:36:E9:DA:66:AB:AF:78:CD:2C:8C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2d6wpD-CR-iNunaZquveM0sjGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-2d6wpD-CR-iNunaZquveM0sjGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5a01e2-83e2-4a7c-ac2b-58f6723e981e/1/1-2d6wpD-CR-iNunaZquveM0sjGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:5b:1a:79:04:3a:3e:e4:15:07:e9:f8:0f:1b:ae:11:2f:3e:
bb:56:f9:63:ea:eb:94:3e:4b:69:d5:c8:87:f5:38:50:81:f5:
ee:8d:de:49:76:30:7f:dc:6d:4b:cf:3d:dd:a2:f3:da:ea:5c:
b3:ec:d2:93:41:12:2a:24:5a:85:da:30:6d:e6:ee:77:6a:37:
b4:9f:f7:70:c4:cb:3e:dd:e2:22:47:2c:c7:8d:52:8e:dc:c3:
f0:3f:ba:1b:d6:25:bb:49:d7:26:6b:c0:54:1c:dc:bf:8a:06:
a1:17:bb:6a:5e:43:4f:46:5c:90:3a:ae:01:f1:10:13:e0:6f:
97:9d:e3:e9:4e:1f:41:f7:2e:59:ee:28:0a:52:41:53:d9:c1:
81:a0:92:76:52:2d:e7:13:97:7e:e3:25:53:db:d5:72:16:1c:
e8:c8:d3:0b:d4:65:11:fc:d9:92:27:d7:ff:67:6f:dc:34:5e:
03:e7:ef:a8:2d:af:84:66:a0:47:3e:dc:55:4a:eb:93:63:ff:
61:83:00:1a:4c:c9:9f:a1:c3:0e:27:b8:34:f7:55:62:51:90:
84:bc:ee:48:52:b6:bd:35:53:e6:d0:31:de:96:40:4a:01:c5:
06:01:e9:ec:78:3c:ec:b4:6b:b6:c5:f1:84:bd:ad:7c:2c:0c:
1f:2b:45:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:15 2025 by rpki-client