Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
File: v1M926H4p23i70lx_NUvlEHOCYk.mft (raw, json)
Hash identifier: j+wq+YFmkvAFmXDswwqnnnwu6MyQSrKiaDfH4sJwd4c=
Subject key identifier: 71:FE:2B:B6:CA:24:3E:51:31:B2:1C:5E:1B:7D:E1:D7:18:7D:C0:FE
Authority key identifier: BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89
Certificate issuer: /CN=bf533ddba1f8a76de2ef4971fcd52f9441ce0989
Certificate serial: 0198D65FB0C4387750554A52F440486DC973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
Manifest number: 1085
Signing time: Sat 23 Aug 2025 10:00:52 +0000
Manifest this update: Sat 23 Aug 2025 10:00:52 +0000
Manifest next update: Sun 24 Aug 2025 10:00:52 +0000
Files and hashes: 1: v1M926H4p23i70lx_NUvlEHOCYk.crl (hash: S17OL8Ag3E8G0d9O4wRt7EzDfDUSF8PuDf1+QaXg29E=)
2: wIL-REFz4DYY-rRWvHtgF8VAa9w.roa (hash: 0FFPo6/uMpZSHo3dFvbnUBqikS2pyiKoisgVQpgN98I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:b0:c4:38:77:50:55:4a:52:f4:40:48:6d:c9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf533ddba1f8a76de2ef4971fcd52f9441ce0989
Validity
Not Before: Aug 23 10:00:52 2025 GMT
Not After : Aug 24 10:00:52 2025 GMT
Subject: CN=71fe2bb6ca243e5131b21c5e1b7de1d7187dc0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a7:94:37:0a:e0:54:ad:36:6f:e0:bc:c1:61:
e5:1c:f7:9d:b1:63:7f:a1:91:52:75:e0:26:a4:90:
e9:ad:2f:b3:53:6a:c1:1a:29:b2:cf:41:01:f3:9e:
67:44:9a:de:9c:7d:00:0f:99:77:6f:5f:c9:5d:15:
71:72:d0:ec:c8:60:3a:73:7a:51:ef:a2:d4:20:49:
ed:8c:ff:1f:bb:ab:12:70:4c:3f:e7:5e:72:2a:86:
40:b3:b1:fe:aa:62:06:a2:71:87:9d:f6:f5:49:90:
3c:2a:2f:bb:20:17:ac:52:be:7c:de:e2:2d:78:a9:
8f:f4:1c:66:2c:05:c7:1b:f7:fa:7e:a7:8d:61:00:
46:22:81:8c:1e:35:5b:ca:59:36:8b:84:9c:bc:46:
93:7d:b7:48:d3:a3:4c:f7:48:d4:fb:02:df:e7:96:
4c:d2:d4:96:4a:47:50:b7:f6:23:37:cb:4b:30:28:
bd:f0:88:ea:cf:0a:ea:ad:39:77:a9:21:db:6e:68:
9a:2a:ee:aa:bd:38:ca:3a:3c:e2:b8:2c:1b:91:24:
f8:51:b0:a1:63:1b:b0:d7:ef:e4:6f:66:43:b0:cf:
c8:ec:1a:2e:86:5c:50:cf:94:c9:2d:97:84:79:3e:
b0:78:72:90:45:29:7e:07:fa:5e:32:d6:b3:17:ef:
55:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FE:2B:B6:CA:24:3E:51:31:B2:1C:5E:1B:7D:E1:D7:18:7D:C0:FE
X509v3 Authority Key Identifier:
keyid:BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f8:5a:48:5c:04:28:ab:ee:0c:77:5b:37:74:20:17:72:1a:
89:cf:8d:4b:f5:94:1f:5b:ea:84:3c:89:27:59:37:99:bc:d7:
c6:be:0a:e9:e8:a5:fb:6c:48:9c:f4:cf:90:b1:8d:00:36:f5:
4f:36:bf:a3:fe:8b:36:53:92:dc:af:5d:89:6b:d9:8d:55:8b:
6d:e8:aa:db:9b:1d:d4:6e:57:ea:64:dc:57:74:1e:26:e4:af:
d4:ba:2b:7d:2f:01:75:cd:2e:e3:0f:c7:13:b1:65:9d:01:d9:
92:bb:f5:1e:1c:07:c5:c3:c5:71:d6:13:6f:36:ee:27:8b:41:
fe:72:7e:cb:59:78:dd:bf:47:a9:1f:ed:af:65:72:64:a7:26:
d0:d0:6b:e8:aa:ea:d3:66:75:9a:4e:bb:f2:e7:e1:78:9c:0d:
1e:b5:ac:32:2e:39:71:c3:d6:ac:b6:71:6f:9f:c5:ed:bf:7d:
7c:b3:4e:71:36:87:ba:ce:be:84:f9:79:3e:a5:37:e8:be:ae:
6e:eb:aa:94:3b:4b:99:0b:39:ee:a4:8b:5e:78:2e:be:94:4b:
0c:03:f7:a0:77:c7:ae:a0:13:82:70:9d:f4:b4:86:4a:3d:16:
f6:06:e1:b0:08:2e:86:a6:20:02:15:a0:be:ba:eb:48:82:47:
54:1f:43:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:32:28 2025 by rpki-client