Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
File: 1fQ0Wir2tUTNG4541z7AK4iVVG0.mft (raw, json)
Hash identifier: o+CUy/hJGxV2baMYs2j5ogwkpkJI0j8NVDzx5L736NM=
Subject key identifier: EA:AD:65:55:E4:14:B5:0E:1C:1C:85:DD:13:42:8D:1D:2B:E9:88:18
Authority key identifier: D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D
Certificate issuer: /CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d
Certificate serial: 0198D5F18244A17306A083C6E8691895811E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
Manifest number: 02DD
Signing time: Sat 23 Aug 2025 08:00:31 +0000
Manifest this update: Sat 23 Aug 2025 08:00:31 +0000
Manifest next update: Sun 24 Aug 2025 08:00:31 +0000
Files and hashes: 1: 1fQ0Wir2tUTNG4541z7AK4iVVG0.crl (hash: V2wn2BDWmrErsEDyKF6B7NdRveJ/P81ct5YR/QSAZiQ=)
2: 3_rjwimXt_D0WovOwZfA5vsj5Yk.roa (hash: 6MzAFEIp9W8TENsOWFtdVkqyFxS1C7g+fYFthRNeyV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:82:44:a1:73:06:a0:83:c6:e8:69:18:95:81:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d
Validity
Not Before: Aug 23 08:00:31 2025 GMT
Not After : Aug 24 08:00:31 2025 GMT
Subject: CN=eaad6555e414b50e1c1c85dd13428d1d2be98818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:aa:46:32:66:39:de:99:78:a7:dc:10:a4:4e:
b7:e4:de:90:eb:aa:22:c0:16:8a:9c:1e:90:cd:14:
6c:9b:4c:7c:63:55:2b:14:2a:8f:ab:18:4b:88:1e:
a2:4c:b7:78:2b:b7:74:69:c8:d9:91:9a:4e:50:c2:
96:bf:04:83:b1:44:f6:7a:bc:55:f3:ed:68:7c:66:
7b:79:16:90:ee:f1:51:b4:a6:23:1e:d8:54:eb:e9:
f7:13:f9:ab:24:cf:6d:db:fb:14:40:0b:37:a5:52:
88:d5:98:38:1a:96:f8:2a:a4:62:ba:72:40:82:8c:
ec:7c:b3:cb:a3:13:d8:6e:3f:97:d6:21:26:d2:3e:
af:37:3d:5f:cf:d2:cd:8c:ce:66:2a:01:72:fb:88:
0b:e2:79:d3:a6:a7:5c:59:0c:60:d7:a2:06:21:60:
d4:8f:d7:af:fc:9a:df:05:91:6a:25:b9:b9:02:d9:
4a:9d:50:5f:02:33:06:46:36:3e:a1:5d:59:30:7a:
9e:f5:f5:45:98:58:ee:a8:f4:1a:92:b2:ca:94:c8:
a2:2d:4d:61:2f:7f:5c:6d:bd:1c:9f:92:5f:36:ba:
f8:63:f3:d8:62:55:87:ff:88:50:cf:96:8c:b5:73:
ef:43:f8:c4:b2:2c:11:4d:1f:cc:c9:c2:04:1d:d9:
b1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AD:65:55:E4:14:B5:0E:1C:1C:85:DD:13:42:8D:1D:2B:E9:88:18
X509v3 Authority Key Identifier:
keyid:D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a6:b7:e5:c5:d6:ec:b1:1a:54:ca:ba:3c:be:c7:ee:6b:0c:
3a:72:94:23:a0:51:e4:9d:48:f4:10:fe:18:19:0d:a2:e8:89:
11:43:fb:e0:60:47:08:c7:95:20:11:ed:a3:90:bf:c2:c3:40:
ff:ec:f9:cc:c0:ab:24:79:74:01:04:98:c3:f3:85:47:f0:66:
8b:e5:76:74:98:de:68:87:ea:9d:39:47:d8:e9:cc:9c:a3:c2:
d3:90:b2:b6:80:99:ae:aa:9a:15:df:ad:e8:73:6e:b6:e9:ac:
62:00:97:c4:2d:7a:31:78:9a:5c:26:fb:e8:74:87:1d:75:ae:
c4:93:54:58:31:71:ed:1d:d4:4f:45:40:3a:f0:08:5a:8b:ef:
87:06:e3:80:0f:00:26:ab:5d:6c:2e:85:d2:46:f8:92:98:1d:
12:6e:2f:ed:4a:da:e0:c0:a3:4c:6c:5f:aa:76:b2:30:7e:ac:
c1:ed:31:11:23:89:a4:a2:06:6e:f6:05:c9:c2:e8:48:e6:dd:
73:6a:4e:b7:e7:87:85:b1:d1:17:d7:cf:e4:8b:8c:cc:c8:07:
9a:71:5e:5a:24:73:fc:5a:d2:41:ca:40:73:9e:b0:82:22:05:
4a:2b:8e:e5:ae:8c:8f:96:29:ae:25:9c:ee:c1:32:c2:11:95:
a3:4d:d6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:54 2025 by rpki-client