Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
File: 1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft (raw, json)
Hash identifier: rVe/Jaxy4kQQj1pcTnzxkyRDj1+i5REMfhdhT7/WQAo=
Subject key identifier: 43:7E:76:B7:0D:65:76:ED:2C:F5:51:C0:C0:07:97:93:DA:C4:B9:54
Authority key identifier: FA:D0:FB:39:D6:B1:1F:D1:5F:CB:B4:16:34:03:15:5D:1D:45:5C:05
Certificate issuer: /CN=fad0fb39d6b11fd15fcbb4163403155d1d455c05
Certificate serial: 0198D6CDBA0FBCE9DB85133CFC59AD4F6B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
Manifest number: 11EF
Signing time: Sat 23 Aug 2025 12:01:03 +0000
Manifest this update: Sat 23 Aug 2025 12:01:03 +0000
Manifest next update: Sun 24 Aug 2025 12:01:03 +0000
Files and hashes: 1: 1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl (hash: 9Tdb+niGuMjyjTJKvU90AAiL8aIfhKj+E94Axs7mc00=)
2: h0w_kFKT0XqvvDjFWN0hbdP6R0I.roa (hash: HwjG9qWbKXQOPWt9s3bE5FAbNnpfV2VmVkVACeqa+SM=)
3: mduo7I3wNgYNMDFTnFs9bATZw0U.roa (hash: cwDJD0pk/dLmG1tNo7Q1h2nrGc/1dBKFJ1gp1DO7kqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:ba:0f:bc:e9:db:85:13:3c:fc:59:ad:4f:6b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad0fb39d6b11fd15fcbb4163403155d1d455c05
Validity
Not Before: Aug 23 12:01:03 2025 GMT
Not After : Aug 24 12:01:03 2025 GMT
Subject: CN=437e76b70d6576ed2cf551c0c0079793dac4b954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6d:0a:8c:e0:28:8d:09:8b:00:2b:b3:01:cb:
4a:87:96:4d:68:46:d9:47:91:30:0b:f3:56:47:46:
ed:60:42:a2:ac:e1:b7:54:29:37:95:46:6c:29:6b:
e7:f3:4e:67:07:c6:2d:35:94:21:dd:71:2b:b3:99:
8c:25:c2:4f:41:a7:3b:a1:e5:de:7c:a4:38:36:9f:
00:6e:10:42:e8:77:b9:a3:cd:b6:10:15:a8:06:fa:
cf:a4:b2:ba:b1:c4:e7:62:63:e5:49:83:6b:2b:3d:
d8:13:1d:44:de:f8:8e:8b:b5:d9:47:5e:c3:05:63:
59:2b:e7:8c:66:d8:d7:6e:93:70:3b:61:3e:6b:23:
0a:78:39:9d:a6:3e:70:d8:fc:91:65:e9:f1:44:86:
95:db:52:5e:75:bd:e1:47:83:8a:50:01:ab:86:c7:
55:ef:41:18:d7:4f:44:cb:fa:7a:63:99:92:43:eb:
50:f8:de:a7:36:f0:16:cd:8a:8e:2d:b3:b0:89:24:
32:31:88:db:56:76:c3:74:a2:34:cb:4f:2c:e5:f4:
a5:fa:12:9d:b4:65:55:51:c0:43:27:e0:05:3c:40:
bd:97:0d:8b:80:36:0b:10:8d:99:f8:00:4f:04:88:
e1:40:28:3c:65:29:b7:5e:b5:9b:e7:68:d6:2d:e7:
70:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7E:76:B7:0D:65:76:ED:2C:F5:51:C0:C0:07:97:93:DA:C4:B9:54
X509v3 Authority Key Identifier:
keyid:FA:D0:FB:39:D6:B1:1F:D1:5F:CB:B4:16:34:03:15:5D:1D:45:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:b7:76:65:cc:e5:9b:0f:05:1d:93:d0:e9:43:eb:3b:b4:1d:
16:ee:87:b8:b1:d3:23:f4:80:71:3e:06:10:d0:40:df:ee:fc:
85:0e:ee:ef:bb:0e:eb:2a:59:af:3d:3c:f3:ec:66:16:b1:00:
78:5a:1c:8b:57:0e:de:ad:48:be:4a:2f:2e:c0:8c:d2:dc:73:
cc:00:c3:2c:61:bd:ea:3a:56:51:79:22:b6:fd:d8:da:77:0f:
3f:ac:0e:62:64:21:f3:8e:51:cc:f4:9f:f7:a0:f2:e2:81:26:
f2:95:ad:2c:c2:3f:a6:ca:d3:98:a7:18:4a:48:3c:81:47:26:
d3:74:69:8c:2d:20:b2:b1:26:50:21:d3:8e:f1:3b:94:42:64:
1e:ab:01:00:94:ba:ce:d2:4c:d0:bd:96:45:07:a0:f4:5d:98:
1d:57:55:10:89:3a:21:9c:b5:bb:51:c8:1e:c6:3d:2a:f6:a0:
57:31:f5:54:c2:27:d3:0e:44:7f:51:f7:46:89:d2:4b:f0:e4:
13:a5:e9:c4:7f:94:47:02:e3:1a:02:14:14:8d:2e:4f:ba:f8:
ba:f8:9a:7a:f4:2c:72:19:d2:7d:b3:55:37:5c:86:11:78:34:
38:7a:95:92:2f:53:98:eb:c6:94:67:56:22:c8:ef:13:d5:ae:
16:d7:1a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:01:09 2025 by rpki-client