Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
File: 1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft (raw, json)
Hash identifier: 0moJYuRQYsPkOsfNLBh32R12v0dX9XaQusfMJWdvQds=
Subject key identifier: E8:18:13:E9:E3:69:3B:26:C0:B3:5C:F9:55:72:2A:BF:AB:04:49:1A
Authority key identifier: D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
Certificate issuer: /CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Certificate serial: 0198D5158AE3D662A104D7871704667C8A2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
Manifest number: 0CD9
Signing time: Sat 23 Aug 2025 04:00:15 +0000
Manifest this update: Sat 23 Aug 2025 04:00:15 +0000
Manifest next update: Sun 24 Aug 2025 04:00:15 +0000
Files and hashes: 1: 1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl (hash: T8xFmk0lLeA8FufR4xaJsSA7+JJKjF5VUmT9ssZkD9c=)
2: 3ZY4SnX1yy3L1vAgX9voAeMkVFA.roa (hash: tg2AmRn5Z2Y+ThyLPd/HKMkLP9Uc9wkQQiNjIF3J+mw=)
3: ugCHO46pUQzd5zqdNawWJEPystY.roa (hash: BahKiNdd/pZ/56ATzb3cvkxPGvUYcM+QZnAs5IV/tZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:8a:e3:d6:62:a1:04:d7:87:17:04:66:7c:8a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Validity
Not Before: Aug 23 04:00:15 2025 GMT
Not After : Aug 24 04:00:15 2025 GMT
Subject: CN=e81813e9e3693b26c0b35cf955722abfab04491a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:47:99:72:65:73:04:40:f2:7e:82:27:ac:5b:
d9:d4:d2:bf:e5:93:2f:96:bf:f4:c0:5c:36:9d:99:
33:f8:29:1b:bf:d4:fe:e7:08:0b:26:2c:9b:32:22:
da:32:73:4c:7b:62:15:2d:fe:fc:05:3b:f7:e7:3c:
fd:36:61:8a:7d:c4:79:6f:78:65:07:31:c7:8c:bd:
17:45:b6:9b:28:3f:75:ff:07:43:d2:63:51:e5:5f:
7b:e9:4a:45:60:75:55:2c:58:b2:27:6f:9e:a9:59:
dd:4e:a9:51:73:b9:82:e2:12:0e:7a:1a:d6:a7:1c:
42:de:30:79:19:ec:44:e7:08:93:cf:d7:87:c6:70:
a2:54:aa:cb:4a:dd:41:a8:69:2c:46:82:e4:a7:21:
e5:61:55:57:c2:9c:cf:92:30:5c:c8:39:e2:57:d1:
d1:86:9f:83:3d:d6:6d:11:dd:20:af:f0:c8:80:ac:
54:b3:93:04:01:60:47:d7:60:c0:61:9a:fe:3e:94:
94:17:bd:39:d2:34:e0:42:81:17:5c:12:57:1b:fa:
d2:eb:b8:90:fb:e6:1a:85:62:0c:cf:fe:6c:81:2a:
c8:6b:85:de:37:95:21:3f:70:fb:35:e6:6b:3a:6d:
21:39:c2:3a:25:ed:bc:f3:bd:71:93:34:0e:0c:b3:
55:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:18:13:E9:E3:69:3B:26:C0:B3:5C:F9:55:72:2A:BF:AB:04:49:1A
X509v3 Authority Key Identifier:
keyid:D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:7f:43:ed:20:0d:41:87:95:38:0a:37:39:c4:40:89:8e:39:
49:0c:bb:77:b3:63:83:09:db:4e:cb:0b:90:09:d0:ab:1a:c3:
74:d1:33:bb:f5:ba:23:8d:e8:83:92:8f:05:57:f5:75:27:d0:
e7:d8:eb:6f:fd:af:6f:c1:9d:a7:9c:61:a4:8f:af:54:3d:04:
00:f6:a7:e6:7a:f3:7b:13:61:3e:6e:2e:f4:ad:1e:2c:58:a4:
da:24:59:d2:80:b9:9c:52:de:0d:06:1b:b5:60:93:6b:8a:37:
24:2e:2c:9e:99:b2:58:f3:dd:67:97:fc:ad:6d:f8:e7:3d:4e:
cb:d6:4c:6c:dd:9d:d3:dd:9c:76:ab:c7:fb:9e:d4:e6:0d:6c:
af:69:0c:8b:02:0f:ea:8a:1f:b3:ce:9c:d5:c2:ac:5d:cd:87:
a1:e6:5d:d1:ae:c3:6e:28:27:fb:eb:77:d6:39:76:82:7d:15:
13:ab:3d:e9:b9:96:b3:53:3b:91:cb:b7:1a:f1:97:ce:7c:99:
1e:6a:e2:80:71:e3:59:7d:0c:13:eb:2c:dc:17:c5:cd:88:66:
13:c3:ba:ee:b4:a4:88:ed:f7:76:a8:25:04:70:0f:20:15:36:
da:17:31:fc:2c:b0:c3:cf:59:4d:e9:4a:90:d3:96:f6:29:35:
3e:fc:a0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:44 2025 by rpki-client