Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
File: p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft (raw, json)
Hash identifier: RVO8GmZq3VXTqyJV1AvgBvd9cYZvnjcprJUqugiyAHU=
Subject key identifier: 1F:7B:28:90:B9:B5:BA:05:8D:DE:3F:59:53:B0:BF:E0:81:75:66:97
Authority key identifier: A7:50:A9:B1:D4:54:94:9F:0B:19:30:35:24:D5:5E:62:5D:F0:BA:4B
Certificate issuer: /CN=a750a9b1d454949f0b19303524d55e625df0ba4b
Certificate serial: 0198D660AF1E57A1501522214652D6E6F11A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
Manifest number: 0DAC
Signing time: Sat 23 Aug 2025 10:01:57 +0000
Manifest this update: Sat 23 Aug 2025 10:01:57 +0000
Manifest next update: Sun 24 Aug 2025 10:01:57 +0000
Files and hashes: 1: YzYY5Pk4uD_RFCQ6kGkD8Ksosug.roa (hash: JV37Wu2EuvzzpKn9Z7XGUJb+gi9iNJI/YQAjXDOu0ds=)
2: p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl (hash: UsP8n90oU8wcmdzGLnhLPOajrO7a3sr9Y+Zil05xnXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:af:1e:57:a1:50:15:22:21:46:52:d6:e6:f1:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a750a9b1d454949f0b19303524d55e625df0ba4b
Validity
Not Before: Aug 23 10:01:57 2025 GMT
Not After : Aug 24 10:01:57 2025 GMT
Subject: CN=1f7b2890b9b5ba058dde3f5953b0bfe081756697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:31:b4:c8:a6:1e:c3:64:af:f6:c5:00:34:22:
43:c8:cc:c8:bf:e7:a9:d9:ae:9a:e6:4f:94:57:0c:
6b:88:c7:0a:5f:9e:88:02:a9:1f:8d:6b:32:0e:8e:
13:bc:87:db:77:fe:a1:5a:18:31:dd:66:65:a7:65:
a6:b1:23:38:2d:af:06:c4:ec:fc:ee:7a:3a:6c:50:
6d:1f:34:de:fc:16:55:4b:52:04:db:7c:c1:94:18:
64:d9:d6:19:1a:80:af:e1:62:42:e0:55:86:2b:98:
dd:7e:81:4f:62:28:fa:7b:42:21:ce:a1:c2:eb:d5:
4a:d1:a7:c1:eb:1d:7c:27:3c:84:02:7b:73:be:17:
c7:0a:47:95:a0:28:65:8d:ec:ba:8f:b9:93:23:4c:
bc:ac:9e:9e:c3:01:57:24:e0:cd:33:27:92:33:fe:
cb:42:9d:79:b5:67:92:61:48:28:3f:5e:e5:e5:8b:
71:dd:9b:3d:c6:b5:38:ed:91:44:43:c1:d1:52:4f:
3f:48:65:bc:f1:30:7c:68:a4:98:56:9c:9e:62:e3:
47:73:5d:1f:e3:88:a7:67:70:e3:96:a7:8f:52:ca:
04:47:0d:50:e8:db:5e:9a:89:8b:20:5a:86:dd:ad:
0f:cb:74:7e:c1:32:eb:8d:e9:0d:36:61:6b:a1:d2:
df:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7B:28:90:B9:B5:BA:05:8D:DE:3F:59:53:B0:BF:E0:81:75:66:97
X509v3 Authority Key Identifier:
keyid:A7:50:A9:B1:D4:54:94:9F:0B:19:30:35:24:D5:5E:62:5D:F0:BA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1CpsdRUlJ8LGTA1JNVeYl3wuks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5b4830-7c0f-43d2-bc1f-74016031c238/1/p1CpsdRUlJ8LGTA1JNVeYl3wuks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f8:94:4f:62:a0:16:f2:d1:cb:b0:13:ae:73:f2:50:39:ee:
38:e5:25:0d:ab:6f:e8:3b:34:74:71:d5:6a:f8:b6:dc:51:75:
cb:29:3a:1d:f9:cd:92:94:42:20:1d:ee:ca:15:89:8e:71:b7:
65:44:1e:f2:f9:d4:45:bd:8c:96:53:a8:cf:1b:e0:ed:95:3f:
e6:bf:6a:d1:32:df:15:6d:d2:da:d6:99:21:50:51:62:c6:9a:
21:fa:06:89:35:65:2d:da:0c:0b:96:a5:8b:93:eb:10:40:25:
14:ef:0d:6c:d9:29:88:87:70:8a:e0:24:23:7d:ad:38:35:60:
d6:b6:3e:0b:c3:3e:1f:11:f3:89:78:fb:b4:ec:52:1e:a4:02:
af:b4:29:94:91:f1:db:6b:2b:cc:32:e0:5d:77:e2:52:3b:9d:
b9:e4:90:8f:eb:d5:c3:3c:50:95:8b:1b:50:a2:0c:93:91:e0:
32:a9:ab:a7:98:a5:b7:38:3a:b8:3e:73:1d:bf:e9:dc:a5:af:
77:20:2b:08:b1:8a:33:2b:f7:9f:2a:00:13:8d:97:08:dd:e8:
e4:75:54:08:f9:db:1c:b1:c0:98:db:d1:01:ee:a2:70:b4:7b:
2b:a2:ef:27:fd:b3:f8:9b:ba:b7:d1:b1:10:2f:a7:cd:30:7d:
b9:90:b3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:23:52 2025 by rpki-client