Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
File: 1COlvl4hykYHMq5I84Wj6hUKK-E.mft (raw, json)
Hash identifier: 9AlewT4e07ZX8tZMxy2aPZaZt6Cs3nVz2c7ZZqeVwpY=
Subject key identifier: D1:15:D9:97:34:4B:B3:0D:7B:D9:04:6C:54:2E:57:0E:7B:A8:89:D5
Authority key identifier: D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1
Certificate issuer: /CN=d423a5be5e21ca460732ae48f385a3ea150a2be1
Certificate serial: 0197C68228763D24ED121FC2A070F5C0D0E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
Manifest number: 088A
Signing time: Tue 01 Jul 2025 15:01:48 +0000
Manifest this update: Tue 01 Jul 2025 15:01:48 +0000
Manifest next update: Wed 02 Jul 2025 15:01:48 +0000
Files and hashes: 1: 19PHc6AFoWW7kX-AfoCW2EsOypY.roa (hash: jP0qljmQA166BWIelGIYbLrJ64dNp9/gZUG1aTwRX4M=)
2: 1COlvl4hykYHMq5I84Wj6hUKK-E.crl (hash: sG6VkWJ/nsMjVUQxOYDSF4JukQWMfyzDHKIrSv7AY1s=)
3: 9daFy4ycHpLHixMJ58Jv9Mkn38s.roa (hash: OvltHgXCMbI42VwzzAwlJz6b+0BZqitij458IanSoJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:82:28:76:3d:24:ed:12:1f:c2:a0:70:f5:c0:d0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d423a5be5e21ca460732ae48f385a3ea150a2be1
Validity
Not Before: Jul 1 15:01:48 2025 GMT
Not After : Jul 2 15:01:48 2025 GMT
Subject: CN=d115d997344bb30d7bd9046c542e570e7ba889d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6f:c1:17:31:34:35:dd:25:ef:17:40:94:78:
6e:a6:36:21:c3:80:a4:5f:83:9f:ef:d0:9c:67:26:
63:f1:9d:bb:ac:bc:67:70:eb:b4:de:7c:6c:ca:4e:
51:d2:8d:9b:e4:01:31:5b:5d:af:33:dd:a6:48:09:
84:ff:e8:00:65:2c:4b:be:09:39:7a:03:dd:db:42:
45:d0:f8:7e:a7:d2:ee:8a:70:2a:82:27:59:a8:76:
08:c5:24:44:17:84:78:07:6d:4b:08:15:3e:cb:1a:
d7:f7:c5:8d:87:ef:df:02:46:4d:50:04:a7:86:37:
c4:5f:40:7e:fb:21:28:1e:57:09:e3:cd:2d:c8:02:
a0:ea:58:01:bc:43:21:e7:9e:2e:92:78:cc:16:f2:
23:37:ed:39:dc:f4:0d:0c:d5:6b:7b:53:36:71:2b:
9f:3a:55:c0:8b:66:0d:3d:de:f7:74:48:49:0a:a2:
55:73:1a:5a:d9:5f:a3:5a:3c:d8:b3:f1:18:82:61:
91:4f:7e:71:5b:98:81:c3:22:bd:5e:ad:78:02:7d:
2b:00:8c:80:cc:09:31:60:41:8e:f2:28:a3:8e:ad:
93:67:87:e7:0b:7c:e2:c9:70:c8:67:ef:59:41:5f:
20:f2:3e:0f:53:f1:6c:3b:c3:63:80:68:98:91:28:
72:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:15:D9:97:34:4B:B3:0D:7B:D9:04:6C:54:2E:57:0E:7B:A8:89:D5
X509v3 Authority Key Identifier:
keyid:D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:55:f4:7b:c0:34:b0:6e:80:d2:f2:be:6a:f0:69:e5:27:53:
96:4a:a1:b1:6c:97:cb:a0:fb:8c:43:8c:85:30:1e:da:c8:cd:
6a:3b:85:36:67:37:7a:78:d6:a6:31:99:39:b6:ee:b1:b0:d9:
1d:91:19:64:42:7e:fe:f8:ed:2a:4c:0b:de:f3:e4:a4:05:32:
65:47:a1:1f:fc:71:e9:3d:64:b0:8f:c1:e3:db:3c:44:15:03:
06:0b:5b:1a:91:02:d3:66:c2:2f:28:78:64:76:64:3e:69:6c:
bd:d4:b1:2a:f2:2e:68:8b:0d:35:2a:c6:fe:23:33:af:a9:d9:
7f:9e:b5:cc:6e:04:f9:40:6d:fa:d9:0f:bc:0f:cc:9c:b6:b4:
d8:6c:fa:17:7f:cc:6f:60:fe:b6:94:20:72:3b:cc:0d:19:0b:
75:74:60:10:8b:28:07:ef:61:d6:bb:57:83:ba:45:4b:d4:63:
f1:ab:74:d2:6e:e6:a6:78:3a:2c:cd:99:43:8d:d2:e4:af:0c:
a1:53:04:b0:41:42:b0:86:d2:bc:e9:93:b9:24:25:62:5c:bb:
60:dd:5f:19:c3:7d:50:ea:85:f7:56:ef:37:3e:90:fd:aa:59:
c4:82:ed:a0:9e:1a:0a:48:09:95:54:ff:af:50:a5:c9:22:74:
74:19:93:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:36:42 2025 by rpki-client