Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
File: 1F35i-yCdrgrqC2TdgRHukTRoZs.mft (raw, json)
Hash identifier: pAUnMJrlBNjmKzJdPNxASRRajAe8xJeCg9xl44vqVHg=
Subject key identifier: 61:37:8B:61:90:A9:2E:02:78:CD:8F:08:5B:F4:E2:A7:DB:A8:CA:16
Authority key identifier: D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B
Certificate issuer: /CN=d45df98bec8276b82ba82d93760447ba44d1a19b
Certificate serial: 0198D5F1722595A1CE9492DD95DC3BFCC90D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
Manifest number: 0EC7
Signing time: Sat 23 Aug 2025 08:00:27 +0000
Manifest this update: Sat 23 Aug 2025 08:00:27 +0000
Manifest next update: Sun 24 Aug 2025 08:00:27 +0000
Files and hashes: 1: 1F35i-yCdrgrqC2TdgRHukTRoZs.crl (hash: WKzjecfMLXK9H1JlfUB1+mqNdyFJsUyWzULhnzvx3tk=)
2: g5vLvMzyY6iocE2krG0Z0SJdXKE.roa (hash: 7Uftt+pkf4JmzzrynHDiN+y0M7EXwi7l54WuFyKgcgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:72:25:95:a1:ce:94:92:dd:95:dc:3b:fc:c9:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45df98bec8276b82ba82d93760447ba44d1a19b
Validity
Not Before: Aug 23 08:00:27 2025 GMT
Not After : Aug 24 08:00:27 2025 GMT
Subject: CN=61378b6190a92e0278cd8f085bf4e2a7dba8ca16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:53:ae:ed:d3:b4:be:79:9f:c0:a2:e8:2b:cd:
af:3a:56:aa:e4:a2:52:f6:b8:db:c9:ff:9b:78:48:
13:76:ac:d3:ad:d1:2a:c3:9a:47:1b:5d:7b:54:50:
e5:52:94:ca:20:85:30:87:7b:20:64:a8:40:d9:59:
c4:4b:86:9e:40:2c:89:36:e9:40:5e:f2:1c:9c:2e:
5a:4a:d7:b9:b6:03:a2:18:69:0d:a2:3e:23:c8:cc:
c4:96:55:06:f7:53:bc:76:de:4c:2a:d4:ec:75:f0:
a6:d8:15:f6:d6:2c:54:87:58:bf:ad:7c:c2:d1:a5:
05:13:62:d2:d4:0b:dd:fc:da:e0:fa:e1:cc:96:d6:
ac:2b:2e:a9:41:35:f4:7b:9b:e5:e7:91:a0:ad:c7:
9b:4e:f8:f6:d1:89:88:ae:6c:ed:54:f3:16:3a:1b:
38:e6:07:b5:2a:39:11:7b:c5:58:4d:cb:f6:f5:50:
04:c3:bf:0f:af:14:8e:cb:33:03:d2:15:dc:19:f9:
f4:bc:55:42:58:1a:40:10:c0:d7:31:84:0c:80:9f:
52:c4:af:ef:50:16:b1:ff:46:22:0f:e7:26:88:48:
6b:71:9a:6f:f1:66:fe:3f:e4:c7:68:48:eb:30:d8:
d4:81:3a:cc:09:c6:24:49:39:c4:11:31:53:a8:ea:
88:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:37:8B:61:90:A9:2E:02:78:CD:8F:08:5B:F4:E2:A7:DB:A8:CA:16
X509v3 Authority Key Identifier:
keyid:D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:69:93:b4:4b:84:1c:b9:53:87:6d:c8:a2:48:7d:53:c7:67:
aa:3e:db:a3:b2:4d:7a:38:57:c3:fd:a1:80:c7:cc:79:0a:4d:
27:08:90:ba:93:36:51:3c:7a:68:7b:a6:d7:6b:ca:e3:fd:57:
c0:15:bd:3f:f4:cc:aa:2b:1a:00:e1:19:0b:28:88:32:50:72:
00:b6:c0:72:6d:79:b6:67:7a:74:a1:f5:ad:9e:75:c6:3f:c2:
57:d3:67:49:c9:cb:96:50:41:5d:e8:31:23:3b:86:60:10:9e:
3d:5d:7b:18:54:16:91:a7:3e:55:e2:5f:8d:a0:82:eb:e6:fc:
ab:df:88:4a:fb:59:76:13:3a:63:31:35:70:68:ea:8b:64:2e:
eb:4f:f5:54:02:38:4c:59:88:19:c4:a9:b6:ed:1e:21:37:49:
8b:8b:9a:84:13:64:20:67:95:7f:bb:ae:86:7e:bf:49:1f:6a:
b5:a6:90:26:07:bb:7f:02:f9:5d:c4:b4:5f:7e:40:c9:11:8a:
82:7f:5e:44:16:0e:7f:55:3a:e7:c6:dc:f1:01:8f:25:56:f3:
bd:85:29:3a:5f:76:c3:da:dd:17:dd:5a:1d:1c:86:8b:de:f3:
2b:f8:b5:ad:79:b4:80:89:b1:92:cd:25:04:ef:fc:c1:e1:a6:
1c:c3:90:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:29 2025 by rpki-client