Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft
File: 1ROHJRLx8tA3tAHCYDyomU5yHlU.mft (raw, json)
Hash identifier: wRM1nlDrBxXDQvPAAzNqu4jWJkODIZ6OriSmicLioNg=
Subject key identifier: 59:87:0D:48:BE:A5:9B:52:AD:27:56:20:D7:45:63:83:C1:AD:EF:DE
Authority key identifier: D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55
Certificate issuer: /CN=d513872512f1f2d037b401c2603ca8994e721e55
Certificate serial: 0198D7E13A02B21D6568A2CE879C9C6E8900
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft
Manifest number: 1657
Signing time: Sat 23 Aug 2025 17:01:58 +0000
Manifest this update: Sat 23 Aug 2025 17:01:58 +0000
Manifest next update: Sun 24 Aug 2025 17:01:58 +0000
Files and hashes: 1: 1ROHJRLx8tA3tAHCYDyomU5yHlU.crl (hash: Md+s0Y+ZTPgp7PIShAfiXJ31r+fdujKaHmKY5ty/R1c=)
2: 5VEZ7JcFmXiaWyk5RVHAojQYYGI.roa (hash: 3yUSESCkJd78E2LmJL5uepnC54miAABRgJPm19V647o=)
3: CllSsfXgtjjisiube1lsdtc0kX4.roa (hash: IgLYkmfyQAPOJzsCtlO5MW7jkHWE2+u5SDGaPrBxNOc=)
4: qmDrGumGDOW5sLdGxjK5ZVPdScI.roa (hash: pxjIJn6ld0n69osy4iN6fgrz9dhYKfwqt4Ocwx8tfiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:3a:02:b2:1d:65:68:a2:ce:87:9c:9c:6e:89:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d513872512f1f2d037b401c2603ca8994e721e55
Validity
Not Before: Aug 23 17:01:58 2025 GMT
Not After : Aug 24 17:01:58 2025 GMT
Subject: CN=59870d48bea59b52ad275620d7456383c1adefde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0a:f0:fd:97:d3:d2:0d:1d:83:23:37:62:5b:
81:1b:88:97:b3:f2:ed:e2:43:cf:a5:7c:29:ef:da:
4d:06:74:5c:ea:5a:a3:3b:3e:9a:06:64:c4:c3:50:
66:49:b2:bd:85:03:07:e4:f8:99:27:0d:d2:f4:15:
ad:51:ea:a6:9e:89:fa:9d:bc:e0:4a:5b:c3:78:88:
5c:c9:25:cb:62:26:84:ac:1e:76:5c:9e:df:61:be:
c4:93:d2:6e:4b:3d:9f:2e:0b:7c:3f:cb:0a:6c:2d:
94:45:70:3c:3a:20:05:65:0e:cd:1f:31:ce:35:a8:
e0:37:dc:b4:43:ff:c7:12:47:7c:41:8f:f9:ec:96:
7c:ae:8a:1b:68:25:6b:6d:63:b0:61:71:b3:68:0f:
af:4c:e4:3e:e2:97:94:1c:21:1e:69:42:f6:51:11:
45:b0:3d:80:35:5f:9f:23:21:be:01:f8:61:10:e6:
aa:ce:ad:4f:b0:a6:b3:4a:19:60:23:8f:0d:e7:2d:
cb:46:f8:96:b8:7f:49:eb:72:bc:5e:16:a7:9e:fe:
ce:de:3e:58:75:f9:05:25:39:74:67:b2:bb:9b:dd:
5e:13:0d:56:7c:12:53:48:fc:bd:64:e2:1e:fd:25:
33:1b:79:e3:9f:a3:75:82:2b:d8:9c:c0:3d:16:48:
ac:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:87:0D:48:BE:A5:9B:52:AD:27:56:20:D7:45:63:83:C1:AD:EF:DE
X509v3 Authority Key Identifier:
keyid:D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:fa:ec:61:ac:ae:bb:4e:71:f2:a3:20:bb:f0:48:7a:71:54:
7f:2c:6d:38:b0:f9:4f:2d:1e:42:fd:10:b0:a7:67:5b:a9:29:
eb:29:5e:22:02:1d:59:99:09:fc:16:21:ea:3d:4c:ac:25:56:
67:b0:5d:e8:8c:1d:c8:5e:a5:f8:78:ab:83:13:ff:1a:08:fd:
d0:9e:9a:f8:64:df:4d:ee:6c:88:b9:0c:20:c0:a4:2f:4c:9c:
03:98:0b:5b:77:4a:fc:64:fb:62:22:5c:c5:af:74:4a:3f:90:
ad:0e:97:e6:00:9e:c6:01:ec:a3:7d:f9:3c:59:e1:35:85:40:
db:27:cd:e2:73:8e:45:50:58:5f:21:54:0d:02:86:2d:ac:0f:
1a:ee:62:68:f2:cb:08:29:23:9f:d1:81:a7:06:1f:cb:5c:59:
ec:95:34:5f:6f:5d:e2:56:a4:ab:1e:e6:85:d6:cb:9d:93:69:
4a:45:d3:97:f3:13:86:c2:1a:a2:e7:fc:30:4b:cd:ee:ac:34:
fe:62:bd:b4:f6:f8:c3:3b:72:34:43:f4:68:1d:b2:e8:75:5c:
45:d3:5d:0a:ac:5f:e7:b7:ce:10:08:20:18:53:7b:f3:44:88:
6d:7f:72:48:cc:fc:e5:0d:07:dc:9e:ab:76:90:e9:cb:b9:61:
ce:d7:fb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:36:37 2025 by rpki-client