Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
File: 01kqrEiVItXbGP1jkeA1qXeOo7E.mft (raw, json)
Hash identifier: yngqjL4zB/3kclYGf7933O2V6GsnVRkF0/1SOpK3vpw=
Subject key identifier: 59:56:6D:8D:1B:F8:2C:3C:AE:09:79:66:04:C0:52:C5:0B:AE:80:DB
Authority key identifier: D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
Certificate issuer: /CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Certificate serial: 0198D5F1637984500528C9A961DF8FDC0726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
Manifest number: 138F
Signing time: Sat 23 Aug 2025 08:00:23 +0000
Manifest this update: Sat 23 Aug 2025 08:00:23 +0000
Manifest next update: Sun 24 Aug 2025 08:00:23 +0000
Files and hashes: 1: 01kqrEiVItXbGP1jkeA1qXeOo7E.crl (hash: I2TK604fxfIfYmgM/1Jj2sPJzwafRqBvVbfbtrxpbbk=)
2: Qhw2m_H5wgy1bU1_w7tg_sEon00.roa (hash: OI2KiRz3XriFCi8yNAm0vl8e78xAWnDgkIja/W4YfWk=)
3: ss1gihVVToicSpjIll9T_OSx9gU.roa (hash: FhBaaNRK7eLkeLLuE6sWEDb9sN1AQ9CWDHvMeiUHSs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:63:79:84:50:05:28:c9:a9:61:df:8f:dc:07:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Validity
Not Before: Aug 23 08:00:23 2025 GMT
Not After : Aug 24 08:00:23 2025 GMT
Subject: CN=59566d8d1bf82c3cae09796604c052c50bae80db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c9:65:60:b0:27:86:39:53:31:7f:8b:e4:0d:
26:18:7f:30:08:09:30:f9:84:1b:04:cc:c3:10:62:
3d:c3:00:4a:a3:17:96:02:6a:14:99:75:28:27:88:
07:cb:a0:08:28:4f:c5:49:db:a1:9a:08:66:b1:41:
10:99:4b:97:b2:43:e3:de:ff:f4:e9:15:ed:21:63:
1e:59:b9:73:df:4b:05:98:7e:e3:83:12:89:19:e0:
3b:d8:09:e7:04:50:ad:3c:ed:0e:e2:d0:6a:3f:02:
13:df:b9:28:97:53:fb:2c:fa:1a:2b:4d:1f:45:28:
fb:ad:23:da:5f:0d:7c:a8:ae:e2:78:62:59:bf:23:
ec:c8:f1:36:75:1c:2f:91:a7:29:3a:3d:85:04:26:
6d:db:fb:0d:94:b0:44:97:de:10:7b:0a:20:d2:86:
3f:ef:d0:ef:53:27:03:78:d1:95:b7:e5:dd:3b:11:
7e:b5:4f:1e:0c:31:ec:0b:61:b8:90:04:67:10:7f:
e0:3c:8f:3b:ee:0a:ff:c5:e8:79:98:b4:b6:f0:aa:
c2:6b:bc:9b:0a:fa:71:49:a5:f7:30:ce:8d:48:db:
17:20:2b:78:f7:c8:06:f7:fc:a9:de:9f:49:1a:96:
c7:84:11:7b:2a:7b:dc:e3:8f:5c:3d:64:d7:80:35:
b7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:56:6D:8D:1B:F8:2C:3C:AE:09:79:66:04:C0:52:C5:0B:AE:80:DB
X509v3 Authority Key Identifier:
keyid:D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:8f:df:c6:d7:38:44:3d:68:db:74:20:af:e2:7a:39:6b:92:
67:cc:c8:76:71:08:50:aa:4a:66:c0:a5:df:2c:d4:34:3e:c2:
70:92:c6:db:7a:2d:c3:6d:1a:98:49:43:88:86:dc:60:e0:77:
72:e6:e7:5d:9c:70:53:1e:5e:02:25:84:91:4f:03:91:15:af:
24:4c:50:2d:85:07:b8:7a:66:e7:2c:d9:cb:c2:1a:54:d1:e8:
cb:31:52:67:28:e8:04:da:a0:88:a2:33:aa:d5:48:de:e6:0b:
46:24:e1:1a:80:c3:99:d2:47:6c:d4:dc:9f:d4:10:23:1f:4d:
e0:17:fb:7b:f7:b3:a7:b6:f8:17:1a:b3:f2:cd:82:70:f2:d6:
62:ba:1b:2d:8a:fe:90:d2:e7:56:bf:45:3a:6b:32:ac:2f:be:
63:02:91:b1:55:37:94:c9:47:9f:28:aa:05:91:79:0a:dd:f6:
d4:a7:4d:2c:7b:81:18:a8:65:22:51:81:92:1d:86:25:63:73:
bb:4b:25:22:af:f1:66:72:90:07:18:a1:23:c9:2f:af:c4:1e:
58:fb:bc:97:76:8b:08:7a:70:6f:e6:a1:fe:21:c1:1c:c2:b9:
dc:72:30:fa:a5:10:b3:ae:b8:b7:01:65:47:6c:2d:88:98:61:
09:a1:31:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:17:40 2025 by rpki-client