Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
File: 1zeCTg_6efGLn8SdbLDdgcmmyig.mft (raw, json)
Hash identifier: O/x6KX089/Row46wuKUki/vviVokg3tMwVW9LKjCTsA=
Subject key identifier: 0A:97:8D:E0:FB:54:11:FF:6A:1D:86:79:CE:10:D7:94:3D:D3:6D:84
Authority key identifier: D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28
Certificate issuer: /CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28
Certificate serial: 0198D515F58AF5FCF2FD905B2E21C8C4E38B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
Manifest number: 1043
Signing time: Sat 23 Aug 2025 04:00:42 +0000
Manifest this update: Sat 23 Aug 2025 04:00:42 +0000
Manifest next update: Sun 24 Aug 2025 04:00:42 +0000
Files and hashes: 1: 1zeCTg_6efGLn8SdbLDdgcmmyig.crl (hash: NYZh/vVZbxA05hX0zJNUtGQvm4PfpPXX7EajTJqr1yE=)
2: gx5eiwrC9QRov09jLW6Ry8a41tM.roa (hash: +LsTPMN/8+zCvgXobio7naaWnMZxaGw5toiq6o6GEUA=)
3: kdM69EkWu9GxJCcShuJ7ttDKH4Y.roa (hash: vxcNPrB9DwOKLJbClf/tkagm/g99z1Vy26rmuXa9BjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:f5:8a:f5:fc:f2:fd:90:5b:2e:21:c8:c4:e3:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28
Validity
Not Before: Aug 23 04:00:42 2025 GMT
Not After : Aug 24 04:00:42 2025 GMT
Subject: CN=0a978de0fb5411ff6a1d8679ce10d7943dd36d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a4:96:7d:f7:56:14:f9:f3:ee:fe:20:4a:45:
c2:4b:87:e5:76:db:b1:56:68:2c:f3:99:01:61:48:
f5:50:b3:f3:38:0b:4f:54:df:1d:9c:8c:7d:68:a2:
f2:d1:e9:48:2c:52:c8:90:71:69:e4:ad:69:a8:ca:
c1:3d:e3:ce:53:c1:6b:28:34:06:9f:9f:da:60:86:
e2:87:97:7e:77:84:45:07:6a:e6:bd:d3:7e:45:ef:
aa:4d:b3:22:f7:ae:24:be:2c:3d:51:83:04:53:df:
eb:05:50:09:66:59:9f:bf:b9:b0:ac:b1:65:4d:7e:
61:77:88:13:70:bf:52:d0:44:ea:04:3e:e6:4f:98:
50:ca:55:b2:dc:04:a3:5b:62:9c:93:93:3e:c7:bc:
19:aa:16:16:8e:1a:b9:ce:e5:ca:45:81:64:ff:3a:
87:ff:1d:c1:ab:2f:bd:36:e9:f5:b5:3e:39:24:d9:
2f:d6:15:62:dd:1c:75:69:a0:e9:85:25:6f:b1:79:
bf:b2:34:73:72:26:78:80:f8:ec:d1:a8:18:05:45:
2c:b0:48:e3:9e:f1:3a:56:cf:d3:cd:b0:bf:5a:7d:
e8:42:54:f6:7e:72:81:bb:bb:10:72:9b:fe:00:0b:
60:c5:06:1b:1f:66:f6:58:cc:e6:44:dc:78:61:b4:
91:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:97:8D:E0:FB:54:11:FF:6A:1D:86:79:CE:10:D7:94:3D:D3:6D:84
X509v3 Authority Key Identifier:
keyid:D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:05:8e:8a:41:08:96:73:a3:f0:eb:0f:f5:5c:e6:a6:ad:e4:
79:df:74:6b:3d:e1:aa:9a:70:e0:5f:69:45:64:2f:a5:76:b1:
e0:33:88:9d:c7:05:9f:30:c4:a0:67:f5:f5:b6:5b:08:a7:9b:
61:aa:47:4b:96:09:05:52:1c:55:00:e4:14:0c:56:0e:5a:33:
5d:6e:fb:24:48:89:18:21:b6:ff:ef:30:fa:b7:5c:9f:0d:40:
e5:b1:63:e1:b7:01:a6:e3:90:6e:56:7c:df:8b:c5:70:38:f0:
de:22:a6:ed:b3:66:14:8c:92:cc:8e:9e:5b:a4:ec:d5:7c:bc:
d8:ee:d5:62:37:af:ea:69:94:48:d7:d5:75:5b:16:34:b1:de:
fe:a4:0e:eb:15:c4:32:1f:44:cc:b7:93:72:94:67:44:78:07:
81:07:94:60:70:1b:bc:e6:a2:fc:4b:0a:36:ba:cc:a5:15:33:
26:34:e9:3d:21:5f:4e:e6:f2:23:53:e4:ea:7d:b0:15:80:33:
96:19:c3:80:ea:4d:c8:c2:5b:9d:b7:10:aa:ff:a0:b5:d6:08:
c1:d5:16:78:ba:5d:5e:ad:c6:47:0d:aa:af:1d:bf:5a:d1:c6:
05:a6:a4:1e:09:78:0b:3d:b8:6d:f6:3d:b7:ef:33:58:41:e8:
9e:04:a4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:34 2025 by rpki-client