Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
File: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft (raw, json)
Hash identifier: shUUqhHpwlKc4oHixuIBH6NlJxaNww0FGwd9gcLeZK8=
Subject key identifier: 37:03:22:7A:34:90:60:95:2A:7B:44:14:51:23:E6:05:0C:C0:FA:BC
Authority key identifier: D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB
Certificate issuer: /CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
Certificate serial: 0198D4727DA06A677C897D7F8C6A4A5843E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
Manifest number: 023E
Signing time: Sat 23 Aug 2025 01:02:09 +0000
Manifest this update: Sat 23 Aug 2025 01:02:09 +0000
Manifest next update: Sun 24 Aug 2025 01:02:09 +0000
Files and hashes: 1: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl (hash: dmf9NWlvZvWdkwFSqJqaa2l5LHwDRZrfZuDjncl0ulo=)
2: CG9KoNDYQYANjw8jkpEMfgifFYg.roa (hash: a/8GNnkxdjWR/BpDGvDmUNc0bdNHqrlCI9YD9Z7wQW0=)
3: cZUoXKNyODDdYDJJ689IFt9l7Fg.roa (hash: 2dlPle1Oc1/h21vw5YqVsut1uxLZie17Tr86ybW+M80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:7d:a0:6a:67:7c:89:7d:7f:8c:6a:4a:58:43:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
Validity
Not Before: Aug 23 01:02:09 2025 GMT
Not After : Aug 24 01:02:09 2025 GMT
Subject: CN=3703227a349060952a7b44145123e6050cc0fabc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:94:5d:4d:57:be:ae:6d:82:1a:9a:e8:54:c8:
31:18:57:b6:b3:ee:ad:96:f6:b6:64:d6:10:be:e8:
f5:1a:14:87:d2:38:26:25:8d:51:be:d3:9f:6e:f8:
2d:cb:a5:53:3e:a7:75:e5:1c:9f:22:d4:26:66:1c:
f3:3d:66:d3:53:6d:07:11:c0:f0:4d:1c:67:81:f3:
7b:f7:8c:11:3d:57:0b:18:f7:d5:fb:06:bf:1d:99:
d9:15:05:0f:5f:2e:c2:26:b8:54:4f:68:b7:6e:e2:
64:56:38:fb:fb:22:50:6a:32:3f:01:0c:d2:41:03:
d5:85:18:fd:81:4d:bc:b0:2f:d3:fe:53:90:46:b8:
d5:2f:11:94:4d:26:f5:be:5b:c1:f2:6b:9c:23:e3:
f1:e1:38:74:f9:9d:d0:58:d2:c2:31:94:3a:38:50:
bb:8c:c0:69:5c:3e:6c:64:ca:26:4d:49:45:f1:20:
3c:df:94:32:da:a9:4c:09:08:8e:b6:2a:fb:b1:74:
6f:d2:16:45:88:d4:19:7f:ac:9c:02:f4:29:84:91:
9c:05:41:87:31:19:a7:46:88:cd:42:1e:aa:67:b0:
47:92:f7:4f:90:97:26:91:15:f4:b7:12:10:06:b7:
aa:93:3d:97:8c:b2:ec:d5:1e:df:e9:44:55:4f:00:
4f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:03:22:7A:34:90:60:95:2A:7B:44:14:51:23:E6:05:0C:C0:FA:BC
X509v3 Authority Key Identifier:
keyid:D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:00:ca:4a:f5:bd:43:d2:99:15:68:dd:82:60:ef:04:ec:ce:
0f:77:78:8c:71:78:23:38:d0:a7:b6:3b:f4:fd:ec:12:c8:93:
50:c6:b8:30:ef:6b:38:e8:9c:1f:8b:f8:23:9a:92:e7:1a:2c:
66:5f:2e:b7:cd:4b:20:48:be:71:01:c1:bf:da:2a:da:8c:e4:
95:4e:0a:bb:5b:45:b9:d7:17:69:20:6d:a2:30:bc:c8:88:2b:
16:c2:db:c5:ca:de:81:27:d8:f6:3e:e8:b8:f6:08:d7:e9:16:
9b:98:34:2d:ff:04:13:77:07:16:39:4e:07:1f:40:97:05:bd:
44:ff:fe:a4:fc:58:6c:3c:7a:0d:da:cb:f7:47:29:cc:7f:34:
40:56:62:18:77:71:ea:0c:9e:a6:45:7f:6d:ea:ee:96:15:b3:
fb:fc:ad:28:84:e9:cd:64:15:bb:05:30:93:49:1b:3e:ab:23:
8d:2e:26:89:da:0d:b1:f8:e2:35:51:4a:35:55:7c:b7:3c:84:
77:10:60:32:8d:95:1e:b6:9d:bc:d9:1e:84:ce:d0:d1:32:90:
d2:cc:8e:14:41:67:91:da:c9:16:a4:b3:68:fc:62:a7:4b:79:
6d:45:1a:7c:e0:8f:b0:fa:e0:bd:a8:17:c9:6b:c1:0e:9c:c7:
fb:9d:68:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:17 2025 by rpki-client