Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
File: 1TX4-scGL3fyS5jNXDtUqJutSDg.mft (raw, json)
Hash identifier: +JXiHaKvPFIDZE22L9l98YRdkuWhEve+49ibG1RkhG4=
Subject key identifier: D9:4A:32:95:8A:2A:E0:15:6B:04:D4:70:11:0F:D7:BB:FC:93:B7:D3
Authority key identifier: D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38
Certificate issuer: /CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838
Certificate serial: 0198D472587BDC5AD76F7E77A986F62955AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 01:02:00 +0000
Manifest this update: Sat 23 Aug 2025 01:02:00 +0000
Manifest next update: Sun 24 Aug 2025 01:02:00 +0000
Files and hashes: 1: 1TX4-scGL3fyS5jNXDtUqJutSDg.crl (hash: OY5+qx7qFGEtZNmEN+AIUDouG4KRbkkZTj4HSuMcuMM=)
2: N3-917WPyl7E_IHoSS2FMLc18wo.roa (hash: VHNMzSlgwcYRKlzGy0Nb6X63KDdiRRNUd0w6+PH3+3w=)
3: oJEvXpEBpuYbcFfcZPDBTEehGY8.roa (hash: b0SdOLZ2AbPJ+0i7CwF2Gja+/00y5/FVMUIAvNs5h1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:58:7b:dc:5a:d7:6f:7e:77:a9:86:f6:29:55:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838
Validity
Not Before: Aug 23 01:02:00 2025 GMT
Not After : Aug 24 01:02:00 2025 GMT
Subject: CN=d94a32958a2ae0156b04d470110fd7bbfc93b7d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6a:20:1e:26:d0:31:6a:70:16:ad:ca:40:47:
ba:67:46:40:d1:5e:57:3f:cc:e8:8c:f8:c1:fa:03:
de:13:30:5e:c9:85:87:08:a2:97:1f:ee:44:a0:6d:
17:44:81:63:8e:e4:e7:88:ec:8d:e5:0e:f8:51:3e:
5c:f0:81:e8:30:1b:f7:80:d3:7b:6d:ca:16:68:cf:
77:6a:4b:5a:28:15:95:81:70:ef:dd:8f:82:8d:6f:
cb:0c:3e:55:31:d4:40:68:5b:83:28:52:71:68:bd:
9a:e4:c2:a2:55:75:5e:f6:ca:d3:dd:1b:f5:45:40:
04:fa:db:8b:49:df:aa:ff:d3:3b:4c:2e:2b:6c:ba:
88:3e:53:4d:cc:11:03:79:f4:5d:a7:40:00:cf:5f:
a0:f3:c0:82:a7:2f:8b:d3:13:37:b9:ea:ec:ee:23:
cc:d2:98:d5:1e:68:4b:a5:6c:04:d6:c0:94:a9:11:
71:40:c2:9a:a1:04:7d:29:65:37:3e:8b:75:06:cc:
c0:f1:d1:26:0c:5f:b6:03:2f:d4:be:fb:de:56:f8:
65:2e:6f:4b:e6:95:76:85:09:37:77:f5:bd:41:95:
3e:1e:ce:b8:b5:d8:8d:59:cd:43:99:81:89:3b:be:
5d:e3:70:b4:4b:48:ae:69:5f:bc:a4:a3:58:00:89:
71:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4A:32:95:8A:2A:E0:15:6B:04:D4:70:11:0F:D7:BB:FC:93:B7:D3
X509v3 Authority Key Identifier:
keyid:D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:62:f0:2e:81:5f:3b:63:98:c4:51:12:a8:03:a2:80:33:58:
94:84:16:9c:be:8b:6f:b7:89:28:2f:ff:c0:92:76:6c:0b:9a:
63:12:c7:96:88:90:e6:89:8d:a1:9e:2a:9a:4b:c7:8b:34:27:
7d:be:c9:73:db:4c:94:85:45:1f:3c:9d:87:db:85:91:5c:c9:
8c:8a:55:c3:9a:31:e5:f2:00:cd:80:8f:b5:e6:d4:90:fa:ba:
e4:3e:94:90:5b:09:99:76:c4:2d:c7:ac:65:6b:73:b8:c4:21:
fa:4d:d7:fa:f9:5a:95:e8:b3:42:2e:50:02:a7:74:ac:21:f5:
5c:05:7f:aa:ed:1d:48:06:77:9c:80:06:d7:b5:fc:1a:8f:d8:
22:1c:dc:05:ba:31:ec:f8:2f:5e:cd:8a:64:28:07:f5:ec:f0:
1d:3a:65:22:af:e3:b8:c7:64:ce:0e:63:94:03:d4:76:24:bb:
4a:69:75:6f:ee:5f:78:4c:e6:b5:e1:5f:71:60:cd:8b:97:7a:
90:58:13:a3:79:23:ec:7c:1f:14:87:f7:2a:7e:96:43:d6:9c:
f0:3e:8f:83:80:97:b5:f0:7e:29:c5:7b:77:e9:75:9e:b0:3c:
c2:bd:55:85:37:da:42:39:e3:4b:76:2b:72:7f:26:16:e5:b8:
56:d2:a5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:42 2025 by rpki-client