Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
File: 1lRDbtMkK925b98TmhJT3rmG39A.mft (raw, json)
Hash identifier: IzvqdGX3xky3TMfPwJuVhW13M5eA6tAhMwq7Itf7rIo=
Subject key identifier: 7D:02:0F:77:61:0F:B4:C1:B6:66:73:9D:7C:3A:26:7F:DE:99:48:2F
Authority key identifier: D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
Certificate issuer: /CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Certificate serial: 0198D439BAAB0DE3AD58DF759F2D8F2447F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 00:00:09 +0000
Manifest this update: Sat 23 Aug 2025 00:00:09 +0000
Manifest next update: Sun 24 Aug 2025 00:00:09 +0000
Files and hashes: 1: 1lRDbtMkK925b98TmhJT3rmG39A.crl (hash: IC63ehWgOBtv5p8qkol4PGNizA0P5LZT0YfwxbkhLwk=)
2: crDjLxmHdcT6e7WUgga10c_NWik.roa (hash: 1lxS7SYauMom80FADoSQnixC1wX1TWhmXujQ5ZWWnRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:39:ba:ab:0d:e3:ad:58:df:75:9f:2d:8f:24:47:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Validity
Not Before: Aug 23 00:00:09 2025 GMT
Not After : Aug 24 00:00:09 2025 GMT
Subject: CN=7d020f77610fb4c1b666739d7c3a267fde99482f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:75:a7:b4:f7:c8:b1:7b:01:3a:f0:68:9b:13:
c5:0d:58:af:a6:7e:93:47:a2:eb:50:ee:5d:c1:c9:
55:a7:28:5a:f4:6b:64:3f:77:52:7e:6a:0e:a0:3a:
50:af:b8:7f:d7:ac:65:99:d1:a4:60:5d:7b:3f:15:
c0:19:56:b7:27:9b:3b:55:a8:63:70:52:92:3c:8a:
f6:c9:10:09:35:ec:64:be:2e:b1:36:d4:85:1a:ef:
98:c8:03:de:5b:a6:63:fa:cf:72:b6:8f:16:14:91:
6c:be:eb:37:72:d2:98:60:75:39:93:3c:92:bb:43:
c8:37:7d:74:4e:4f:13:d8:c0:fc:6e:9a:20:b1:80:
ac:11:68:aa:65:6a:e7:46:6a:79:71:c4:d2:c2:a9:
78:13:23:61:21:e0:00:b8:2c:ef:79:e2:04:8c:c0:
20:0f:8c:86:89:ab:5e:91:58:f5:a3:06:5d:87:da:
9b:0e:ad:2c:93:5a:05:00:f0:08:db:34:df:e7:b9:
6a:77:0f:5d:57:63:56:95:7d:ed:76:d3:8c:db:a5:
7e:55:f0:43:46:8e:ac:2e:8e:72:7b:82:b6:c3:33:
05:20:5b:e2:70:3d:75:45:20:63:08:fe:7e:c6:8e:
1b:3f:12:8b:a4:8c:f6:0c:4c:d8:43:6f:a0:58:4e:
78:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:02:0F:77:61:0F:B4:C1:B6:66:73:9D:7C:3A:26:7F:DE:99:48:2F
X509v3 Authority Key Identifier:
keyid:D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5e:ff:5e:91:1d:d2:11:13:a2:f4:a2:1f:8b:d5:07:0d:08:
5b:c2:87:f5:f8:b7:b1:31:cc:62:20:7f:8d:26:a8:ad:bc:48:
4c:76:cc:d0:75:50:5b:bd:12:30:25:36:4e:60:b3:d2:d3:e6:
3c:b3:38:81:18:77:89:eb:64:04:bc:94:88:7f:6b:cf:4d:3c:
71:44:a7:51:53:3c:94:22:61:ee:46:48:b2:ca:f2:b3:90:31:
a3:e9:04:dc:d7:d2:b9:b2:aa:5c:87:79:d3:b3:8e:4c:5b:a8:
cd:e8:6f:48:fe:7b:fe:13:79:48:75:0d:9b:f9:30:5d:09:cd:
21:10:8a:4b:90:6e:f6:ef:99:1f:fe:3e:05:f3:63:3c:43:25:
96:38:f8:2d:b0:56:0a:e2:dd:00:4e:bc:66:9c:b9:58:43:b4:
3d:80:5e:a7:0c:ff:ed:7d:19:18:ad:c8:e8:04:eb:c3:f3:0e:
5b:0c:71:36:31:17:d6:68:a1:f6:32:29:c8:b9:3c:7c:39:4c:
e2:b4:09:5b:a7:f2:24:c6:35:cc:b8:5a:2c:78:c7:1a:a4:82:
9c:db:05:ca:4d:75:b0:8a:56:26:6a:ff:22:28:f8:b1:53:09:
b7:ad:26:46:dc:38:e7:3f:7d:77:d8:35:b6:68:99:71:2a:c8:
17:9f:f2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:13 2025 by rpki-client