Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
File: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft (raw, json)
Hash identifier: X6ZJQ9A4VheYQg445hfrqNk6z1Ys3NrlX8M03RQs0wI=
Subject key identifier: A1:E5:DA:85:03:C6:F8:38:1D:62:BB:A9:34:47:51:B7:4F:4A:1C:DB
Authority key identifier: D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
Certificate issuer: /CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Certificate serial: 0198D5BB7676FF392ECD8D578F216B76D0D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
Manifest number: 0914
Signing time: Sat 23 Aug 2025 07:01:29 +0000
Manifest this update: Sat 23 Aug 2025 07:01:29 +0000
Manifest next update: Sun 24 Aug 2025 07:01:29 +0000
Files and hashes: 1: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl (hash: fyHr+UKn49joPSZzOuMvBjNNGfF8pICSKULe2GbZnmU=)
2: 9z9dKpnx6EzUcHVGNf_uGpVw9Os.roa (hash: a0dVE6vpgZW3UUjOxu/nfSbGxvoPx4y2RaBLkZkeRbc=)
3: NAkfZdC-lHIooI3gKnWXiaH-HsE.roa (hash: w3/vlIu5NjwEAa3XQiOFjmWkJL3BENVNbQUqUr266qk=)
4: tHjmQ9NOKNWbyApXtXSEVz3gkFM.roa (hash: SBZ1boxaRQZqnvXhV5a0MuSyAE629IVLf7UqxBja6yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:76:76:ff:39:2e:cd:8d:57:8f:21:6b:76:d0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Validity
Not Before: Aug 23 07:01:29 2025 GMT
Not After : Aug 24 07:01:29 2025 GMT
Subject: CN=a1e5da8503c6f8381d62bba9344751b74f4a1cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:59:3b:2b:11:cb:1b:ee:d4:ea:03:0d:fe:65:
64:97:ad:e6:ad:51:1b:35:b7:f6:6c:b9:8c:2b:e3:
1a:e5:59:cd:45:5b:6d:30:10:30:99:b8:99:c3:60:
99:8f:bc:79:ca:08:cc:17:dd:02:cf:0c:9f:b0:a4:
e9:67:01:ab:37:64:2a:2a:04:4d:37:81:5e:61:42:
47:16:a9:65:81:0d:49:db:7d:79:8e:c9:05:c6:0c:
4a:ee:52:31:ca:48:ea:cb:d7:ae:fa:b8:57:9e:88:
7f:17:e8:7f:55:e8:5b:90:b2:c3:8a:41:49:7f:8b:
cd:60:04:14:13:5a:29:58:37:31:40:4c:c8:eb:31:
9a:a5:5e:7b:e3:df:20:2a:39:be:66:dc:05:bb:6e:
21:2f:3f:3c:6b:82:ab:7d:da:8e:29:4b:ff:e2:fb:
70:fc:b1:7e:d1:ef:8f:df:a5:fa:11:40:d9:48:37:
d0:0a:b0:6a:81:e1:65:6b:d2:63:65:fd:7c:ab:ff:
1c:fc:b8:c8:fa:2b:ca:33:3d:1c:dc:23:2b:7a:4a:
ae:63:9d:19:3b:7e:70:83:69:1a:e0:02:3d:e3:71:
bc:11:8f:6f:4c:90:9c:95:ed:5a:7e:95:82:5c:6b:
7e:cf:04:be:f3:e9:76:99:00:35:4c:fc:07:3e:6d:
e8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E5:DA:85:03:C6:F8:38:1D:62:BB:A9:34:47:51:B7:4F:4A:1C:DB
X509v3 Authority Key Identifier:
keyid:D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:54:8a:79:48:c2:64:bc:b2:c1:f3:b0:6c:09:d8:16:18:53:
36:72:87:74:78:98:87:d8:fa:f1:d8:59:aa:6e:26:4d:08:4e:
c7:03:dd:1e:b1:80:b5:87:39:8f:b2:c6:ef:68:50:a0:19:3b:
65:3a:31:03:92:bc:21:04:fa:f2:4f:29:2e:e0:f2:b0:e8:80:
10:81:f3:cd:95:11:a0:d2:06:f9:53:f2:1d:cc:8c:11:55:da:
61:21:ae:17:f9:9e:8d:75:8a:89:d5:d3:5f:63:8f:31:22:3c:
1a:52:36:7d:5b:63:24:a2:59:29:a6:4f:d8:71:f8:35:ed:14:
3f:99:08:37:16:2a:14:c5:23:58:5d:aa:90:95:f9:e9:23:8f:
3d:e7:2b:f5:14:c8:bd:58:0c:72:7e:7a:7f:b5:2b:a1:43:97:
17:84:fb:79:66:a2:d0:71:fb:76:2b:34:b2:f1:38:65:6e:94:
6c:6c:d4:2c:79:1a:a6:01:a5:ae:bd:d9:81:52:83:69:7a:ab:
d1:f4:b4:d6:49:80:d6:b5:1a:44:e8:4e:f9:07:c4:33:12:3d:
ab:24:d8:7b:40:97:b7:a7:aa:e8:75:0c:2f:9c:64:c0:96:ad:
73:69:69:fc:3e:07:e1:4e:9b:46:4b:6c:cc:0c:2a:db:69:f7:
f9:d8:8b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:28:05 2025 by rpki-client