Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
File: 1hVJ9XWwR7y9wz59LTbtqEcf3so.mft (raw, json)
Hash identifier: 0xUNA1Gw3HFlzM2Sn8fN96V591h636l8WMBVLt9xz1c=
Subject key identifier: B1:77:65:04:52:97:C0:34:47:40:2F:13:54:B4:CB:77:69:03:B2:1F
Authority key identifier: D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA
Certificate issuer: /CN=d61549f575b047bcbdc33e7d2d36eda8471fdeca
Certificate serial: 0198D5BB7B2D992495000FC1E7A6E168C633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
Manifest number: 1A
Signing time: Sat 23 Aug 2025 07:01:30 +0000
Manifest this update: Sat 23 Aug 2025 07:01:30 +0000
Manifest next update: Sun 24 Aug 2025 07:01:30 +0000
Files and hashes: 1: 1hVJ9XWwR7y9wz59LTbtqEcf3so.crl (hash: VcoA5XK6Qr2d7ftOFQqrEP/Xykl+DmkHoLKuW7PxOfE=)
2: vBgY54C9wF4igTn_ThI9AD2fAjA.roa (hash: QU8WNIR5SLJr3BG+FWmaZkiRSa43Txva+uD7lv+cdg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:7b:2d:99:24:95:00:0f:c1:e7:a6:e1:68:c6:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61549f575b047bcbdc33e7d2d36eda8471fdeca
Validity
Not Before: Aug 23 07:01:30 2025 GMT
Not After : Aug 24 07:01:30 2025 GMT
Subject: CN=b17765045297c03447402f1354b4cb776903b21f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b1:31:6c:e3:b0:d9:28:59:ca:aa:17:5f:6f:
44:e6:52:a1:aa:1f:7b:1b:9a:ee:a7:93:17:13:b3:
2e:ea:36:69:f9:a8:ee:be:79:6b:00:8d:14:5f:11:
e0:f7:ae:19:82:89:4b:b1:85:f6:fe:fc:25:6b:3c:
73:44:44:21:1a:95:fd:cf:29:43:ae:f7:a1:34:be:
03:92:63:12:36:0f:8e:60:54:32:ab:f3:64:a5:5f:
91:36:15:01:ed:1f:92:b3:92:7b:ff:fa:47:e8:4b:
e3:32:96:31:b2:f9:20:13:f2:b6:61:af:42:54:52:
af:ce:d5:f9:ef:ac:bc:a1:34:b8:95:d1:24:24:29:
36:5a:b8:10:1a:f8:b7:e0:0e:c8:3a:ee:04:2d:0a:
f6:5c:46:42:21:bf:12:b9:8c:cb:c3:06:16:31:84:
25:aa:66:e4:cf:86:d4:ee:83:36:76:34:f4:1f:ba:
5c:83:b7:a3:fb:73:51:80:e3:97:1e:15:ee:ef:df:
ea:5a:33:ef:8c:51:6a:76:68:bf:22:4e:47:23:95:
69:99:86:13:47:f9:a9:7f:8a:f8:59:e5:54:b7:ec:
1a:e5:0d:1f:17:5b:7f:53:cc:89:23:0d:9a:20:20:
0c:dd:46:ec:cf:c4:aa:64:8f:ea:18:e7:ef:55:c1:
a2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:77:65:04:52:97:C0:34:47:40:2F:13:54:B4:CB:77:69:03:B2:1F
X509v3 Authority Key Identifier:
keyid:D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:da:f2:4a:b1:02:28:a6:cc:ec:ae:7f:d1:d6:d9:d3:d0:b1:
21:53:e3:c6:cd:bb:52:3e:9e:c1:a0:39:0a:33:ce:f2:68:37:
73:2b:b1:7f:13:74:ec:5b:f9:23:3f:d9:c0:46:92:87:93:2d:
36:21:f7:38:b6:b9:2e:fc:b0:01:ad:5b:41:8c:e8:b5:3f:eb:
0e:10:84:cb:0b:37:07:a5:72:83:52:7b:19:48:d4:d8:fd:00:
53:f8:a1:08:9f:19:05:96:5c:65:11:39:d6:2b:2a:a5:6e:6d:
2c:56:5c:d9:35:bb:dd:7d:ef:5d:c2:63:d1:29:4b:ac:87:3b:
a7:f2:25:7a:e7:bd:c3:55:d4:41:75:c1:4a:ed:a3:c9:31:33:
c4:8d:ae:b2:e2:bd:4b:be:5d:11:a5:e3:d6:07:d6:11:77:bf:
04:e4:c3:88:a5:83:6a:0f:c0:90:3a:91:2f:50:d2:c2:81:37:
c2:f1:89:dd:e1:39:6a:58:04:7f:b9:e8:78:d0:1b:78:53:fa:
e9:1a:e8:4d:e4:52:5b:a7:b5:ae:98:d4:f9:76:09:3d:e8:f3:
62:62:ac:a2:f4:35:06:35:78:c2:0a:97:66:9f:db:43:9c:ba:
30:eb:77:72:5d:ad:56:ee:d6:73:42:6a:77:1d:3e:4b:4d:4e:
51:f4:0c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:39:48 2025 by rpki-client