Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
File: 1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft (raw, json)
Hash identifier: wfSldmBeZQ+p1XLVsaj16bSwDKTSYpZFdE/X61+EztE=
Subject key identifier: 40:3F:CE:28:BE:A2:24:F3:3C:92:1C:73:6A:2A:14:CB:FF:A0:39:6F
Authority key identifier: F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71
Certificate issuer: /CN=f83faec93d403f3713823fa39c7d27c62e921471
Certificate serial: 0198D4E08AEA913BD47A20C7BACA250200BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:02:21 +0000
Manifest this update: Sat 23 Aug 2025 03:02:21 +0000
Manifest next update: Sun 24 Aug 2025 03:02:21 +0000
Files and hashes: 1: 1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl (hash: ju4OCbVb5twdt5ThGmfAspe3BEQBnMKHuHiwjBfvuvA=)
2: 72LdJQQ_XzgvUHseE2sST5RXq_4.roa (hash: kR5iFtf9EPBMZTsPkYiIRyrCHP6r5lMPF7yM/ECFgng=)
3: lput6Z6vJPdy08jemWLG6WZi0oE.roa (hash: muWWXK/VbX5K0RlIXjBqeo4nzxA9w0OVj29rsOGgE/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:8a:ea:91:3b:d4:7a:20:c7:ba:ca:25:02:00:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83faec93d403f3713823fa39c7d27c62e921471
Validity
Not Before: Aug 23 03:02:21 2025 GMT
Not After : Aug 24 03:02:21 2025 GMT
Subject: CN=403fce28bea224f33c921c736a2a14cbffa0396f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:70:22:c6:c8:a2:87:26:6a:12:ea:9b:ef:27:
89:1a:48:6d:7f:da:6c:ac:0e:d5:8a:f6:be:16:94:
c5:71:82:00:eb:e2:67:f8:34:6b:4e:76:85:d4:eb:
43:c0:73:c1:c0:81:56:7b:48:3f:ae:f0:ca:01:a4:
db:c8:ea:23:ca:5b:96:af:ed:c4:c7:93:bf:59:66:
40:a8:05:67:b7:52:f2:f2:9c:13:1d:a6:b8:e0:8d:
fe:49:ec:52:12:36:49:57:d7:3b:ce:53:8c:cc:e2:
27:71:91:d5:3b:76:09:11:15:31:60:f6:b6:b7:32:
9a:63:3b:d1:50:3c:52:5f:b0:54:8e:c2:ad:44:f3:
5f:f2:ad:2b:5c:96:18:f8:21:d3:7b:b6:ff:c3:f9:
31:d6:7b:f3:c7:ea:4a:53:f2:3b:e1:8c:bb:4a:f4:
6c:00:af:64:0e:04:cd:de:4e:9e:cf:61:cc:58:a2:
0b:37:96:33:26:e8:57:b2:91:e6:88:55:de:53:19:
c5:73:6e:89:61:9b:53:84:d6:c8:7b:22:3e:2b:4f:
9f:cf:3a:70:15:81:d1:2c:a8:86:61:5a:08:d6:04:
36:f0:de:72:cf:cc:25:e0:9f:8f:e5:73:b2:da:6a:
5e:7f:7d:75:bf:f2:2b:c9:3d:0a:8c:6e:29:83:de:
5b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3F:CE:28:BE:A2:24:F3:3C:92:1C:73:6A:2A:14:CB:FF:A0:39:6F
X509v3 Authority Key Identifier:
keyid:F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:6d:54:eb:0d:f3:5c:ca:c8:b3:93:ff:0e:88:93:3d:68:86:
0c:30:50:b0:70:59:02:89:f3:fd:e1:18:5c:c2:00:bb:6a:f9:
5a:f3:8f:64:ad:88:b3:c6:f4:15:47:1a:b9:11:2d:bb:90:ab:
f1:79:fe:2c:36:41:75:7b:99:ae:49:1d:ca:a6:70:65:3a:3c:
10:07:0a:26:29:c9:c5:6a:0e:d9:6b:37:66:f5:7f:af:73:8d:
f0:37:39:d9:46:f7:66:90:5e:7a:ba:9a:55:32:a0:f1:4c:57:
b6:4d:4f:f8:fb:8d:15:71:e2:fd:11:8a:03:97:28:8c:e5:ca:
bb:bb:00:88:c3:db:f6:18:07:20:a3:5a:41:45:52:2b:7f:da:
e0:8f:7c:e4:6a:69:9e:22:5e:db:07:f0:d0:4e:c7:15:cc:b7:
9f:ad:c3:ec:7f:cf:ce:c7:56:d3:1a:9a:08:a8:1b:f3:02:e5:
13:51:24:0c:dd:6a:46:fe:c3:33:da:67:b6:b0:99:df:c8:6e:
23:64:f1:cf:c4:c8:f2:70:72:86:5d:c3:ac:10:77:1a:28:d3:
19:10:cc:b4:9d:72:61:ad:0c:d7:04:6c:88:85:ce:ab:b6:65:
50:dd:2c:5f:2c:2d:81:45:de:67:f3:37:8b:03:17:fd:ae:d6:
9b:0b:b8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:45:58 2025 by rpki-client