Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.mft
File: 1nYY00F5w-pSMwJkoZZBh7I83SQ.mft (raw, json)
Hash identifier: IdX+ExqvCOQVSkhbL4iodtOWKc/vKgtpSJrtQfawSYs=
Subject key identifier: 89:45:D4:8F:3C:93:1C:7C:27:99:45:CB:27:96:87:DD:7E:1C:32:04
Authority key identifier: D6:76:18:D3:41:79:C3:EA:52:33:02:64:A1:96:41:87:B2:3C:DD:24
Certificate issuer: /CN=d67618d34179c3ea52330264a1964187b23cdd24
Certificate serial: 0198D4DFF3C30787843570F916F5AA8924A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nYY00F5w-pSMwJkoZZBh7I83SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.mft
Manifest number: 115D
Signing time: Sat 23 Aug 2025 03:01:43 +0000
Manifest this update: Sat 23 Aug 2025 03:01:43 +0000
Manifest next update: Sun 24 Aug 2025 03:01:43 +0000
Files and hashes: 1: 1lITG_UqnfavYQ_xoQlV3wFv38U.roa (hash: EEjmi7deVkOh9RZ1Yb2ahklKAUhFdcMk/pd79vay4U0=)
2: 1nYY00F5w-pSMwJkoZZBh7I83SQ.crl (hash: vWpC/+0z5N4lfm/lwCjKdUIfS+KA+Jq4jxjRs8EK3UE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nYY00F5w-pSMwJkoZZBh7I83SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:f3:c3:07:87:84:35:70:f9:16:f5:aa:89:24:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d67618d34179c3ea52330264a1964187b23cdd24
Validity
Not Before: Aug 23 03:01:43 2025 GMT
Not After : Aug 24 03:01:43 2025 GMT
Subject: CN=8945d48f3c931c7c279945cb279687dd7e1c3204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4d:ac:53:8b:f6:ed:87:a9:dd:df:c4:21:18:
50:f3:ef:95:f5:bb:28:15:69:3a:b0:71:15:b6:5f:
8f:76:f1:9f:a7:f4:19:f3:96:94:6f:62:ba:de:5d:
80:ca:c7:70:78:94:e4:75:6e:10:18:fb:61:2c:cc:
0a:ab:cb:cb:11:2d:56:19:8a:d5:8b:90:74:29:9e:
cd:1d:16:bf:07:0c:62:ce:3c:13:79:77:11:b0:ef:
66:ec:ce:f5:9f:30:8d:db:74:0d:fc:08:48:ac:0e:
7f:91:24:cc:f0:54:cf:29:81:2d:ef:f9:74:7a:d0:
3d:36:c9:b2:76:8c:91:60:8e:92:ff:4c:21:a2:87:
5f:3d:11:d5:bc:5a:b4:c5:be:cb:99:ea:93:f4:d4:
59:4f:48:da:62:d1:5c:09:ec:3e:e3:f9:51:9a:57:
d1:42:b5:b2:a2:d0:c5:fc:d9:54:d6:1e:37:58:67:
9f:c3:1e:e6:b6:4e:44:98:84:b5:f4:c9:9c:03:b4:
0f:b7:28:2d:13:dc:aa:ed:61:87:f8:d2:ba:2b:b3:
3a:6b:b7:76:ca:72:6a:3f:71:58:ab:87:21:d6:14:
a9:c6:14:45:9a:b8:ee:f0:e8:f5:32:49:66:ff:4b:
3f:68:82:b5:1c:09:a0:8d:73:a2:42:23:0c:8a:98:
67:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:45:D4:8F:3C:93:1C:7C:27:99:45:CB:27:96:87:DD:7E:1C:32:04
X509v3 Authority Key Identifier:
keyid:D6:76:18:D3:41:79:C3:EA:52:33:02:64:A1:96:41:87:B2:3C:DD:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nYY00F5w-pSMwJkoZZBh7I83SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:59:7b:69:88:a8:41:ff:66:06:7f:16:b2:6d:f7:3f:bc:73:
d2:03:8e:97:34:db:85:b1:2f:d9:b9:66:98:11:e1:4d:d2:15:
24:35:c0:71:a6:aa:07:59:17:d0:87:9f:9a:89:a1:51:ae:54:
98:ec:96:3e:96:96:9d:11:b9:7b:22:98:a0:c9:19:7a:36:55:
3a:47:4c:10:1d:92:59:78:84:70:48:81:d1:f5:65:0c:65:01:
a6:fa:d3:a7:8d:c0:c7:3a:14:8f:b5:d1:fc:7b:bf:2b:57:6c:
95:7f:93:de:4c:3a:ec:6b:9c:60:31:e4:91:5f:28:e6:e1:a7:
a4:72:f3:cd:07:dc:57:67:41:83:4e:98:0d:f2:7b:2b:a2:85:
72:a0:af:05:8d:f5:e6:1a:65:76:dd:f3:7c:f5:55:94:a8:fb:
26:c0:6c:ed:0a:c0:2e:7f:dc:2b:46:73:b6:fa:4d:df:96:9d:
07:4a:67:74:94:c9:57:95:0c:89:cb:21:0e:e7:cc:93:5c:f0:
77:64:ed:be:38:af:78:d4:d5:e7:ed:1e:9d:23:87:f9:ae:81:
e0:5d:68:76:0d:e9:70:81:00:3a:86:aa:78:86:1d:13:3d:d1:
6e:1a:8a:93:31:02:b2:50:8a:a1:54:9c:f4:3d:38:a1:59:82:
29:5b:84:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:34 2025 by rpki-client