Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
File: 1fBlyL23j_KU98VFSXHb-r-2wYQ.mft (raw, json)
Hash identifier: lsdMgGrnIXYUycCuf+e/qSZ7lrWpRDQYDs4U/+L76DI=
Subject key identifier: DC:E3:FB:17:FA:FA:2E:6D:B7:ED:05:3F:B1:BD:B7:93:68:0A:FB:25
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial: 0198D51616ABD987BBC5519FF7B265FC306E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
Manifest number: 1143
Signing time: Sat 23 Aug 2025 04:00:51 +0000
Manifest this update: Sat 23 Aug 2025 04:00:51 +0000
Manifest next update: Sun 24 Aug 2025 04:00:51 +0000
Files and hashes: 1: 1fBlyL23j_KU98VFSXHb-r-2wYQ.crl (hash: X/iqwJHi/7kwzt3bitTqctuktH3ssbd0F5Mhz6NCUXk=)
2: m2QQfUK06vFb9PgOjuRKEEy3_-M.roa (hash: r2c9NdRmbfXSJX1yrfGNpKRrDXEdWsNsnb45Hs3S/N0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:16:ab:d9:87:bb:c5:51:9f:f7:b2:65:fc:30:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Validity
Not Before: Aug 23 04:00:51 2025 GMT
Not After : Aug 24 04:00:51 2025 GMT
Subject: CN=dce3fb17fafa2e6db7ed053fb1bdb793680afb25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d8:19:db:2f:8d:9a:eb:3c:85:df:86:7e:d5:
93:69:4b:2a:a8:e5:2f:b2:81:65:d7:5a:2e:96:31:
ec:ac:16:9d:51:73:c2:ea:97:74:80:68:b0:08:2d:
a8:c4:13:06:30:c1:46:e4:9c:73:d8:46:76:14:42:
d5:09:74:44:52:3e:26:71:d7:16:0b:78:1a:b9:89:
17:fb:0a:f3:a7:f1:7a:e4:16:16:43:a2:0d:90:b7:
ae:72:8f:b9:fe:55:90:fb:cf:1b:73:81:50:26:12:
16:ce:e5:e1:35:54:89:9c:c4:98:39:1a:9a:55:f0:
b9:c9:c7:6e:a6:d9:94:fe:5b:41:e8:ee:43:14:11:
8c:75:3c:a7:ae:d0:b1:1a:70:57:c6:f3:e3:95:63:
07:ea:37:5b:39:49:ff:01:5f:84:e4:02:d0:d3:90:
2e:85:f7:33:e7:66:39:8a:91:86:6c:e4:01:f6:b5:
ae:84:91:6c:3c:c2:f2:05:05:05:64:d7:46:7f:0d:
db:b6:44:0f:48:e6:24:eb:67:0f:59:3a:f4:c9:a6:
5e:d7:7d:a2:d5:f0:dc:5a:bb:dc:a9:26:5d:40:d5:
7e:d2:01:ec:c1:a3:68:22:94:c8:ea:94:f1:b9:ac:
27:75:25:fc:b0:b2:38:1b:4b:cd:1b:e1:78:9a:f4:
9d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E3:FB:17:FA:FA:2E:6D:B7:ED:05:3F:B1:BD:B7:93:68:0A:FB:25
X509v3 Authority Key Identifier:
keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:cc:8c:26:1b:d0:91:09:16:c8:5e:64:49:e5:1e:65:28:1d:
5c:eb:45:7b:aa:f7:20:af:8d:d5:d0:57:10:e7:bb:dc:bb:23:
92:e6:9c:25:54:86:d2:b4:38:2a:7c:a3:f2:a8:bd:9d:6e:93:
df:81:c6:f7:c2:45:a9:06:f8:fa:87:76:2c:1f:73:12:37:20:
86:af:78:5f:19:4d:93:e4:7d:5a:da:4a:f5:f0:aa:43:3a:69:
06:d4:94:1d:34:72:a8:62:60:f1:2c:f1:c9:ea:f5:10:7a:ff:
75:1e:3a:70:33:22:ea:70:5e:ab:16:8a:cf:1a:25:53:d4:5e:
aa:0e:0f:c6:a5:78:e4:53:cd:85:a2:41:e0:81:b0:a6:49:be:
15:04:6e:56:c6:7d:0e:75:c7:58:f3:81:7e:ae:47:48:8c:c5:
60:89:b4:98:a7:3f:e7:a4:60:71:7f:97:6d:f6:28:64:21:1d:
b5:02:ac:a5:a1:09:9d:27:a6:32:19:f3:5c:2f:ec:c3:9a:0a:
e0:2b:82:62:76:b2:7a:ad:78:ae:f1:94:c2:42:cd:09:3b:d9:
e5:ca:47:03:ba:04:e1:5d:dc:5d:3a:d5:b3:9f:2f:8c:8f:3d:
4b:d8:72:98:ed:2e:62:68:8a:8d:3c:e2:1e:85:4f:c2:c5:65:
71:d5:09:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:58 2025 by rpki-client