Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
File: 1O219t5yQ2FIs1pZA38jNBUN2zY.mft (raw, json)
Hash identifier: ZNor2qwqEDaDN44Jyh7wdfHFDGFyLKjZuK7otw1ZNTg=
Subject key identifier: 23:99:4E:12:40:AB:80:CA:B7:3B:8D:AB:E7:D0:1B:12:EE:17:65:E4
Authority key identifier: D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36
Certificate issuer: /CN=d4edb5f6de72436148b35a59037f2334150ddb36
Certificate serial: 0198D5834899A13FAB62F86C84196830EDC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 06:00:07 +0000
Manifest this update: Sat 23 Aug 2025 06:00:07 +0000
Manifest next update: Sun 24 Aug 2025 06:00:07 +0000
Files and hashes: 1: 1O219t5yQ2FIs1pZA38jNBUN2zY.crl (hash: SNpbiwHmN83mB0/hhkbI2LIK0HOXCzsjt8JDJUMMAvY=)
2: CUxoxoHUFgCcWdXLBL1XTZtblHU.roa (hash: nuVV0ajPUp0XSEkxw4hsRxKF9YmW1aG+8tY3rAw4VUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:48:99:a1:3f:ab:62:f8:6c:84:19:68:30:ed:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4edb5f6de72436148b35a59037f2334150ddb36
Validity
Not Before: Aug 23 06:00:07 2025 GMT
Not After : Aug 24 06:00:07 2025 GMT
Subject: CN=23994e1240ab80cab73b8dabe7d01b12ee1765e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bc:1f:d6:8e:e8:aa:28:12:e8:88:7a:9f:f9:
d1:75:5f:d6:93:9c:08:37:49:2d:3b:91:f6:2f:d2:
49:3c:ed:c3:d4:56:cf:3e:e0:e6:43:b5:a1:ab:6e:
8b:ac:cd:1c:c9:5b:92:32:57:11:5c:c9:7f:0f:8a:
7f:2b:40:43:49:6d:76:f2:1c:28:c4:ec:79:2b:cc:
78:04:79:5c:f3:06:74:c4:8b:83:9b:26:ff:15:6c:
c2:e2:fc:46:15:ad:59:46:8a:77:44:d2:63:64:69:
78:1c:3d:d8:47:43:7e:6b:29:91:66:7c:5e:0e:97:
b2:cd:29:bb:26:43:dc:bb:db:bc:1e:8f:18:95:bc:
82:03:96:8e:51:5a:52:9a:61:cd:9a:7b:54:ab:ba:
31:0c:a1:ef:91:a4:a1:01:40:35:14:49:3a:ea:d2:
ed:4e:b6:39:c0:4c:ed:a9:53:00:42:f3:39:9e:2e:
e6:4c:35:f6:bb:87:7a:62:bb:eb:c4:68:08:ad:58:
36:b9:43:c6:cd:f1:73:4a:c8:59:67:a8:00:fc:72:
26:ba:d3:da:0a:48:f3:ad:0c:c8:4a:4c:1a:11:44:
0d:26:3d:19:93:59:a1:32:e6:9b:d6:3d:3e:0a:b6:
d1:88:bf:25:21:c0:22:5a:03:ef:a2:92:eb:88:7d:
5d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:99:4E:12:40:AB:80:CA:B7:3B:8D:AB:E7:D0:1B:12:EE:17:65:E4
X509v3 Authority Key Identifier:
keyid:D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:3e:6e:68:87:bc:f5:ac:4a:99:b2:36:74:ff:66:8c:eb:04:
b1:78:f6:8c:c8:04:45:7c:2b:0d:91:ee:94:21:0d:a2:5e:d1:
ee:04:99:a0:3a:cc:93:4c:e1:3e:93:0b:5a:34:e9:a8:c2:7f:
a3:b1:84:90:42:0c:b2:7d:9c:aa:c9:62:54:6d:de:6a:ef:85:
97:e1:45:80:95:37:64:00:dd:fc:b5:12:93:2d:9e:a1:4e:50:
8f:3a:ad:10:d5:53:22:2e:5c:59:90:ca:52:94:35:96:d8:0a:
5a:a6:8e:56:ee:80:d3:34:61:07:f3:96:99:c2:9c:7a:cb:ac:
87:3e:8d:5a:ef:dc:0d:f0:cc:c5:7c:9c:40:25:01:f3:e0:7b:
66:cc:e8:52:bd:bf:23:36:7c:6e:f4:76:c4:da:bd:09:7c:16:
3d:d2:59:28:23:91:13:9f:35:9f:11:a4:6c:b7:d6:1e:da:38:
75:cf:48:fd:69:bb:ee:12:69:3a:3c:c6:b7:0e:a1:1f:e9:52:
b9:96:8f:65:98:f5:9f:dd:03:2b:b5:51:19:8f:fb:a4:ca:0f:
78:c9:ea:1d:36:f1:78:e5:d9:4c:81:51:73:fc:3c:44:25:c2:
67:88:90:b5:63:ae:61:ea:43:7b:96:e9:82:93:64:15:53:2b:
77:fe:75:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:53 2025 by rpki-client