Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
File: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft (raw, json)
Hash identifier: 6xxUH9DbW6X3ejxQ2b9+opEqCkKKFwo8/7R861VVnww=
Subject key identifier: 21:E8:4F:F4:9A:DB:83:70:00:35:04:EA:34:9E:D1:0E:46:4F:80:5E
Authority key identifier: D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
Certificate issuer: /CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Certificate serial: 0198D54E7C5467560F1D503C71B019D43095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
Manifest number: 0E2B
Signing time: Sat 23 Aug 2025 05:02:27 +0000
Manifest this update: Sat 23 Aug 2025 05:02:27 +0000
Manifest next update: Sun 24 Aug 2025 05:02:27 +0000
Files and hashes: 1: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl (hash: RZc6lDhEc2OSVeNRR0vGUbiAFtmcr+OYxy8RyIp3C3o=)
2: ZrVj2s197OVZslr8l0eL6BOnr3w.roa (hash: MfbdU/hx9JIBrv7/G68X/y0zTkmoV59GNKmYnsQV+5o=)
3: mwni58KyYHbpUQER4Pt8qtMcan4.roa (hash: 1zAR9iZ3h0/evzy5xE5e6DnfwvHvR1HUWm8sNJWcti0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:7c:54:67:56:0f:1d:50:3c:71:b0:19:d4:30:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Validity
Not Before: Aug 23 05:02:27 2025 GMT
Not After : Aug 24 05:02:27 2025 GMT
Subject: CN=21e84ff49adb8370003504ea349ed10e464f805e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ef:3f:23:51:c7:f5:2a:97:0a:75:4b:5e:c7:
b2:11:4a:e6:03:9c:9b:ea:c3:81:ad:07:c2:c7:ff:
cb:c1:54:4f:40:65:c3:f1:e7:86:a8:96:46:4d:1f:
e9:49:94:f7:e3:31:99:04:59:c6:29:12:c1:08:4b:
10:9b:ca:a0:15:ef:ba:5d:50:fd:46:87:49:bc:8b:
51:91:e0:2f:e5:50:30:d6:a9:1a:83:9c:db:5d:30:
c9:46:37:bd:5e:38:05:a4:0e:d8:3b:4f:48:2d:1f:
fe:d9:6c:ac:76:99:52:54:d7:b5:a0:8b:aa:73:92:
38:23:d1:ff:54:32:25:7e:a4:9b:26:4f:be:0f:cc:
09:14:51:34:d4:67:a8:90:22:6a:d1:53:5b:16:45:
0d:8c:4f:28:b3:bd:d5:9e:44:57:4c:5a:c8:97:5e:
23:3f:bc:0a:42:16:20:bd:55:80:ce:24:f6:9d:2f:
f0:8e:67:e0:43:30:5c:9b:7c:3a:ad:03:09:72:16:
bb:9d:59:ca:24:37:53:f9:1e:16:7e:55:58:ca:fb:
28:5e:e0:d0:2b:40:36:5a:1b:71:03:90:d3:70:83:
b5:ff:d5:5c:73:28:c5:66:a9:53:a5:60:66:49:8f:
4c:b7:09:ca:e6:13:c0:62:af:2e:a0:f8:9e:11:a8:
3f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E8:4F:F4:9A:DB:83:70:00:35:04:EA:34:9E:D1:0E:46:4F:80:5E
X509v3 Authority Key Identifier:
keyid:D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:8e:5b:01:93:78:f0:4c:21:3d:93:f9:89:26:13:4c:c8:01:
a2:4d:95:6a:8a:60:b2:c0:21:6d:c3:54:ab:37:4e:42:e9:e2:
cc:b4:c7:bd:a6:06:48:ae:04:2b:6c:b9:3f:06:f1:da:91:5d:
57:67:dd:98:1b:6b:95:93:ac:84:f9:26:1a:51:2a:19:0e:65:
dd:e4:5f:36:23:92:93:3f:bc:54:24:89:3f:f1:bc:bb:c0:75:
dd:23:95:f9:15:3b:4a:90:81:9c:c1:68:8d:5e:b0:97:89:91:
5a:e0:a4:00:6e:9c:cd:98:ea:fd:7a:35:9c:39:fe:eb:30:8f:
a2:8b:61:1c:f1:b3:23:bf:e6:6b:e2:e2:2e:e2:ce:99:d2:1d:
e9:54:a8:b5:dd:a3:54:90:52:7d:bc:cd:a3:7f:09:35:2e:a9:
44:1a:39:c1:ee:74:f8:34:a7:95:e0:0f:06:64:3e:fe:d4:e5:
2e:98:d0:db:2a:c8:15:f7:db:eb:9e:22:60:cb:d5:20:3c:13:
7c:87:81:b2:2c:ac:cf:26:7c:f6:4a:b8:1a:c0:05:75:e7:7a:
5a:25:cf:0d:09:ac:b1:3e:05:32:5c:d5:b9:a1:7b:39:86:a3:
cc:14:00:fd:6b:8c:9c:6b:82:3b:8e:5e:70:43:dc:81:9c:7c:
8a:d2:29:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:59:06 2025 by rpki-client