Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
File: 1TOwlDCwSPBSbvapN3dOfwYgNzE.mft (raw, json)
Hash identifier: NkqZ2gCafVf8X5wxxoT4kARLp4xq+dE9BO5oi5ZZVC0=
Subject key identifier: 41:93:EC:67:32:23:8E:80:AD:D6:83:79:AE:57:87:4A:71:F0:52:A5
Authority key identifier: D5:33:B0:94:30:B0:48:F0:52:6E:F6:A9:37:77:4E:7F:06:20:37:31
Certificate issuer: /CN=d533b09430b048f0526ef6a937774e7f06203731
Certificate serial: 0198D66004A9D666F0ED386EB4CCC7D64201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
Manifest number: 098C
Signing time: Sat 23 Aug 2025 10:01:13 +0000
Manifest this update: Sat 23 Aug 2025 10:01:13 +0000
Manifest next update: Sun 24 Aug 2025 10:01:13 +0000
Files and hashes: 1: 1TOwlDCwSPBSbvapN3dOfwYgNzE.crl (hash: PemhLNjfWiVDgeqkfMPBCEvmJlCeH8RcVWxnjM77Rv8=)
2: b2-2zA239FER4wC7CBSDQ_s6itc.roa (hash: ttiQIOl1DGhdd6BIOrtS+dGFnQqKAzV6ghp1LfZsaAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:04:a9:d6:66:f0:ed:38:6e:b4:cc:c7:d6:42:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d533b09430b048f0526ef6a937774e7f06203731
Validity
Not Before: Aug 23 10:01:13 2025 GMT
Not After : Aug 24 10:01:13 2025 GMT
Subject: CN=4193ec6732238e80add68379ae57874a71f052a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:58:f6:e9:a4:73:fc:cf:23:f0:94:b3:9c:ab:
0d:44:ca:ce:d3:a8:ca:54:cf:78:eb:9f:ea:93:dd:
4b:c2:e9:43:01:a3:90:a8:58:5d:65:8e:16:ce:8d:
7f:ef:b3:af:3d:49:63:04:2b:77:1a:62:71:56:b8:
57:15:6a:72:a9:43:5c:26:dc:be:24:c2:3a:8c:c3:
87:d6:96:6e:37:ce:79:c2:f2:f6:13:a2:48:b3:f3:
34:c9:9d:3d:5b:d3:01:d3:98:f8:41:cd:14:6f:c1:
76:56:47:3c:92:83:2d:3f:01:40:4e:71:70:5d:e5:
a8:fb:39:6c:75:55:ff:eb:a7:db:d2:42:5b:ab:a9:
94:12:12:8d:fc:60:a2:5e:61:70:ae:96:e6:2d:d3:
3f:5f:86:e8:b8:4b:8d:d9:40:35:62:59:84:c3:79:
83:be:42:34:1f:9e:9b:b6:39:65:a1:60:27:9c:92:
28:fb:f1:44:fc:a1:8f:db:80:fe:75:7e:27:f3:8a:
a9:31:76:8d:19:4e:4f:ea:04:30:6d:71:8e:7f:24:
f5:bb:c9:ce:08:22:f8:60:0e:e0:8e:8d:83:d8:8f:
a6:73:9e:7c:d9:da:7d:9a:71:b8:7c:4e:59:0c:4e:
01:9f:f8:00:79:98:b9:7e:1c:f4:ce:ab:b7:03:29:
22:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:93:EC:67:32:23:8E:80:AD:D6:83:79:AE:57:87:4A:71:F0:52:A5
X509v3 Authority Key Identifier:
keyid:D5:33:B0:94:30:B0:48:F0:52:6E:F6:A9:37:77:4E:7F:06:20:37:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:1a:5f:eb:2b:0d:3c:5c:cd:4c:af:54:88:c4:47:fb:dd:ff:
64:95:91:68:85:66:b2:52:1c:ae:ad:a0:9c:00:b5:14:61:9d:
65:b9:7e:41:d0:b9:a3:de:50:d1:5b:39:b3:aa:15:32:ae:a4:
fd:ce:f9:5d:00:6a:c0:fb:6c:2a:fc:d3:bc:8f:7d:bc:ee:68:
57:21:20:5c:0c:ee:05:f1:44:11:67:34:1b:9e:67:3f:36:c4:
1e:ea:92:fb:d8:75:b2:db:66:d2:22:23:c8:b8:39:01:65:e6:
cf:54:ef:4e:26:33:10:f6:37:df:5f:72:f5:e2:91:ab:09:1a:
62:60:2c:0e:34:ac:22:d9:f2:91:c7:1a:b7:3f:15:9f:d3:7d:
5c:ba:38:ed:fb:29:1b:a8:80:58:d0:d2:80:93:54:50:8e:dc:
39:e3:5d:2d:df:3b:be:8e:50:90:7e:e4:8a:f8:d6:0f:bf:d8:
7b:b6:b1:91:0d:a9:2d:8d:a4:67:37:f1:c0:95:2c:dc:a4:de:
35:32:b7:49:78:5c:e0:ac:04:ab:57:50:d3:61:70:d2:c2:ee:
85:87:1d:0a:a6:8e:4c:ff:5c:cb:63:44:7c:64:ab:65:f0:03:
77:c8:cb:35:ec:98:32:a6:7d:86:5b:e4:d9:1b:51:a0:72:ad:
61:88:b0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:45:08 2025 by rpki-client