Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
File: 1cZc2ktjD3K_ZA0WtB9y9aD511E.mft (raw, json)
Hash identifier: DgD74eCj179EX5jzzmU7sP8U/Hk9VboeRCCRIQ3+uHs=
Subject key identifier: 1C:5D:40:63:3D:9D:3E:0E:5D:D2:C8:84:82:29:B0:F0:D1:58:9F:C7
Authority key identifier: D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51
Certificate issuer: /CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751
Certificate serial: 0198D5F181683FF2790F74A3FDB9972640AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
Manifest number: 0E44
Signing time: Sat 23 Aug 2025 08:00:30 +0000
Manifest this update: Sat 23 Aug 2025 08:00:30 +0000
Manifest next update: Sun 24 Aug 2025 08:00:30 +0000
Files and hashes: 1: 1cZc2ktjD3K_ZA0WtB9y9aD511E.crl (hash: y0Zblew9Js++7LkHA7eDZq0HjDeCrVJzKTKAW+e/kc0=)
2: vIfeAKl09iQuJw6UGqaMNu-i1xM.roa (hash: rnTrCrEZ28gshco/rvGtOCS7V1pX6Xki2r8crF4TWeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:81:68:3f:f2:79:0f:74:a3:fd:b9:97:26:40:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751
Validity
Not Before: Aug 23 08:00:30 2025 GMT
Not After : Aug 24 08:00:30 2025 GMT
Subject: CN=1c5d40633d9d3e0e5dd2c8848229b0f0d1589fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d6:53:28:b3:84:07:a8:56:19:88:4a:2e:d0:
18:95:31:34:dc:56:d8:8b:fc:06:d2:df:17:a5:ac:
54:6d:00:f2:6c:78:92:fe:a6:55:c8:6a:7c:0d:35:
63:44:83:6d:46:08:9d:c9:98:b9:d6:d1:00:8d:45:
23:a5:e6:71:4c:98:5a:4a:a8:87:c4:86:ec:58:a9:
43:1d:c6:b8:26:56:80:f9:fa:df:ab:73:eb:b6:87:
2d:72:20:30:67:0d:6f:be:7f:68:8e:35:85:2a:20:
7a:f6:fd:af:30:c3:77:a9:89:e5:67:ab:a5:dc:11:
f1:ff:f2:eb:bc:b3:06:33:b9:c1:04:03:4c:9d:97:
5a:aa:07:97:75:27:0d:ff:f1:dd:35:ab:07:65:94:
09:d3:a4:01:50:2f:3d:a4:51:34:d3:7d:89:6a:df:
1f:00:d6:da:b2:e4:84:59:aa:f2:34:91:ad:50:cf:
5d:88:ff:25:7c:4e:78:9a:3f:42:0e:78:16:82:80:
6c:67:16:c8:ad:b2:27:b0:41:80:b5:46:4f:75:f8:
8f:be:50:a6:ca:51:4e:1d:11:f1:5a:5c:8d:aa:0c:
fe:ea:ca:de:2f:f5:bb:11:bc:ed:1e:35:cf:5c:c2:
28:cd:65:28:5b:c9:31:f4:cd:bb:4a:05:55:cc:83:
b7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5D:40:63:3D:9D:3E:0E:5D:D2:C8:84:82:29:B0:F0:D1:58:9F:C7
X509v3 Authority Key Identifier:
keyid:D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ef:eb:da:7a:57:b4:41:f9:75:63:e2:ca:ac:3f:28:4b:fb:
87:93:43:7a:a3:f6:86:76:c7:10:fb:97:69:3f:cb:ae:d1:2e:
46:7e:1a:f7:87:08:74:c0:ad:3f:34:7a:1f:a7:f2:d9:f7:cc:
fe:94:5d:ee:e1:d7:99:1b:09:b0:7c:96:09:37:3a:69:15:32:
f7:38:ac:be:72:a5:e1:fe:a2:cd:bc:8e:d5:24:6e:b2:87:1c:
f6:3a:b5:d3:38:60:0d:25:2d:b2:c3:fd:4f:99:99:52:7e:1f:
64:db:3c:5b:36:3b:4b:58:43:5b:6b:c5:5c:b7:2f:e7:14:61:
7e:24:12:3a:c2:9a:2c:6a:fe:de:38:b1:6f:e2:c1:97:97:dd:
e5:a8:a6:1b:49:41:fe:67:1a:d9:24:fd:da:5e:4b:88:13:c1:
58:91:fc:e3:33:ed:d8:53:f7:f4:1a:df:74:66:78:20:25:f7:
b2:99:7d:f5:5a:99:21:80:17:10:ab:0e:c6:4e:59:82:ca:83:
35:06:fd:27:20:f9:db:31:ee:09:d6:79:da:2c:7d:e2:65:9e:
72:17:dc:25:37:8a:75:f4:6d:4f:0d:32:c8:10:cb:97:6e:b1:
44:ad:9e:7f:87:a4:f2:9c:f9:5b:e4:03:ae:21:69:52:3a:39:
69:38:6e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:42:04 2025 by rpki-client