Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
File: 00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft (raw, json)
Hash identifier: Zqij+7DEldqM8qlSu4ok0j/cvdTNWsEN+/0GvP0VMww=
Subject key identifier: 00:17:6F:2C:4A:E7:B8:32:D4:E0:03:2B:F0:9A:D8:49:B2:25:68:5C
Authority key identifier: D3:46:E5:D4:62:91:F6:BC:53:B9:65:86:50:51:BA:39:97:49:EB:2D
Certificate issuer: /CN=d346e5d46291f6bc53b965865051ba399749eb2d
Certificate serial: 0198D4A7ED5BAFF0AB57F3625092553809B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
Manifest number: 01F1
Signing time: Sat 23 Aug 2025 02:00:31 +0000
Manifest this update: Sat 23 Aug 2025 02:00:31 +0000
Manifest next update: Sun 24 Aug 2025 02:00:31 +0000
Files and hashes: 1: 00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl (hash: IxSR/3tq8wUWAjBCgY20Do5q4cJSmYTZYaewE6veyXc=)
2: gYQl8tX6UzR3RDmi_Q8x7-FjoRo.roa (hash: Ql10T2YHVZxrbMNqGA2K5KVTFR5OZbWrykLTc4F+v5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:ed:5b:af:f0:ab:57:f3:62:50:92:55:38:09:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d346e5d46291f6bc53b965865051ba399749eb2d
Validity
Not Before: Aug 23 02:00:31 2025 GMT
Not After : Aug 24 02:00:31 2025 GMT
Subject: CN=00176f2c4ae7b832d4e0032bf09ad849b225685c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1c:33:4f:1b:94:0d:e4:ea:db:58:7d:1f:c2:
6b:ec:3c:2f:53:06:a2:7d:f9:ae:15:9e:37:e2:8c:
d6:a2:72:78:ad:6c:eb:57:fa:cb:05:94:b6:81:33:
3e:ae:a8:f3:51:c3:47:6f:14:34:d6:7b:c8:8a:95:
ec:f3:cf:85:28:b2:b9:a2:12:cc:de:56:91:6c:b9:
2b:d8:30:b3:8e:60:c2:55:b0:44:ee:89:24:a2:4f:
c3:9d:ff:bc:cd:d9:79:8f:c0:92:f4:91:c4:e9:ab:
ff:fb:52:97:35:7e:5c:75:5e:8b:b4:7c:b9:80:f7:
c6:ae:ef:de:8d:66:6b:af:bb:56:1a:3b:a1:0d:8d:
66:29:26:17:f5:4a:2c:ed:c9:48:53:34:06:07:32:
9d:3a:93:78:65:8e:d5:9b:07:18:af:64:83:7c:74:
4f:79:a5:9e:cc:bb:22:56:ca:59:c5:ce:18:d5:1d:
61:fa:0f:ab:b0:ee:55:0e:bc:2d:5b:d1:08:1e:f0:
84:ec:10:4e:d9:45:81:3e:b8:b0:20:da:55:e0:eb:
9a:14:35:d0:81:c3:7b:7e:47:82:08:bf:5d:0c:4a:
59:7f:1c:71:d0:1f:da:0e:98:f6:d4:db:2b:03:cd:
d1:30:34:ec:e5:38:cc:99:1b:3e:52:1c:70:d4:99:
80:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:17:6F:2C:4A:E7:B8:32:D4:E0:03:2B:F0:9A:D8:49:B2:25:68:5C
X509v3 Authority Key Identifier:
keyid:D3:46:E5:D4:62:91:F6:BC:53:B9:65:86:50:51:BA:39:97:49:EB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:20:2e:8a:45:a3:88:0f:ce:89:75:cf:8e:b5:41:97:bb:f8:
77:28:97:6d:6e:c2:fe:55:6e:64:48:72:e3:cb:2d:2b:c8:44:
a9:dc:07:51:85:ce:23:7d:2e:b2:aa:28:10:96:b4:c6:76:c1:
3c:d3:ff:46:f6:cb:29:be:db:49:81:75:bc:df:5d:fa:f2:9d:
f6:c8:20:4c:26:c7:17:16:f6:14:2e:2f:a7:1f:1e:00:73:46:
d7:ca:90:1d:86:1c:b2:65:09:37:14:f7:71:4b:67:f6:50:c8:
be:1c:df:cb:5d:71:3e:35:e6:b5:57:2f:d7:a5:29:f2:a0:17:
70:ca:87:e6:4a:9d:87:c2:dd:9d:2c:1d:b6:43:ea:ac:bd:4b:
0c:c8:79:f5:56:4a:d9:83:06:c5:58:f2:d8:b4:5b:65:16:ba:
d6:d6:bf:3f:28:dd:20:1f:25:13:09:e7:23:5d:6c:cb:8c:8c:
81:fe:15:19:cd:a5:cb:28:92:2b:91:1e:2e:10:d5:1c:4f:39:
37:9b:e1:e4:05:54:a1:e5:91:85:f3:12:44:35:bb:01:05:05:
5f:b6:09:87:40:95:7d:e1:26:e0:2a:1c:ee:db:3f:75:86:ed:
a8:2c:33:3a:a4:64:0d:f3:e8:f9:16:a3:8e:d0:71:d3:c2:fa:
8c:31:d6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:02:53 2025 by rpki-client