Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
File: 1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft (raw, json)
Hash identifier: YrWHpyp+HuMSIzUQ6OuysYYGguoNmz1SMVwYAh5tiyo=
Subject key identifier: 1C:D7:3F:1E:D7:B1:D2:FB:B5:14:7D:04:75:97:0B:BD:D0:1B:DC:B8
Authority key identifier: D4:25:90:03:12:FF:3B:DA:4D:2F:89:6F:64:DF:65:64:6F:D9:C2:51
Certificate issuer: /CN=d425900312ff3bda4d2f896f64df65646fd9c251
Certificate serial: 0198925A8B40A908961454B594EFBAA1B547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
Manifest number: 1626
Signing time: Sun 10 Aug 2025 05:01:03 +0000
Manifest this update: Sun 10 Aug 2025 05:01:03 +0000
Manifest next update: Mon 11 Aug 2025 05:01:03 +0000
Files and hashes: 1: 1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl (hash: 1Sfbk/6Tgr/SDqyxUKhWcmra5+41eGosdeppPocny8Y=)
2: g_HTJXlqiVwcXNQwQ-5NsdWLDwY.roa (hash: T8aREzkEhzdTgcqG/dOQatsiFG6CYLxa2kl0FfKGWAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:5a:8b:40:a9:08:96:14:54:b5:94:ef:ba:a1:b5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d425900312ff3bda4d2f896f64df65646fd9c251
Validity
Not Before: Aug 10 05:01:03 2025 GMT
Not After : Aug 11 05:01:03 2025 GMT
Subject: CN=1cd73f1ed7b1d2fbb5147d0475970bbdd01bdcb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cf:14:96:56:bb:da:b5:59:c8:80:a0:86:e8:
15:20:f1:d6:42:93:ef:85:dc:28:53:5a:d9:73:d5:
15:db:bb:3d:9b:cb:20:02:d0:ea:32:01:d0:9e:18:
2d:ec:20:a6:ba:d6:d7:5b:1d:7e:72:39:2c:7a:6e:
f1:5a:21:d5:e4:1e:0f:04:fd:73:9c:51:13:e7:d6:
fc:c5:e6:52:37:eb:d4:fd:7e:64:00:6b:ab:cf:c3:
ea:b0:86:58:73:8e:30:21:a3:71:71:b8:4e:c3:04:
d7:94:20:9c:5c:d6:ee:87:21:9c:b3:d3:bd:76:ff:
61:74:1c:e9:b5:0c:cf:63:41:3a:27:77:b5:48:66:
f5:d2:94:e3:18:6d:7d:13:bd:d0:e4:a9:d8:44:b6:
8e:4b:92:e2:33:f2:89:9e:df:87:68:06:39:76:9b:
11:3d:5d:d5:f7:fa:b6:07:25:b7:e3:ab:fb:b4:a6:
e9:45:d6:e8:90:6e:49:57:d2:a4:c5:5c:72:5d:54:
21:50:f4:98:58:a6:77:a0:9f:ba:f6:40:2a:99:ee:
68:f3:4e:e9:68:00:02:2b:02:66:04:23:5d:9d:70:
85:17:43:86:89:07:12:b0:81:24:4c:c7:f9:03:e1:
b1:1e:fb:27:c5:b9:17:6b:ad:66:5b:85:ce:92:34:
4f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D7:3F:1E:D7:B1:D2:FB:B5:14:7D:04:75:97:0B:BD:D0:1B:DC:B8
X509v3 Authority Key Identifier:
keyid:D4:25:90:03:12:FF:3B:DA:4D:2F:89:6F:64:DF:65:64:6F:D9:C2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:5f:97:84:7b:aa:cc:7f:b7:8c:18:ca:9a:f4:49:a6:00:7e:
cd:8d:31:98:34:f9:53:06:32:14:5d:92:94:ea:1b:2e:61:3f:
03:7a:86:48:f2:c5:25:02:8f:30:ac:10:74:8c:37:c6:fc:2e:
44:5a:47:38:25:e2:8d:70:61:f2:04:93:2d:96:77:ab:a3:ac:
db:94:bf:33:f3:a1:94:83:91:e5:e7:a8:d2:5d:33:ce:36:2e:
07:7a:e4:70:e2:92:6d:57:f9:1c:6d:ea:e5:6c:ee:8e:96:65:
ad:92:73:40:6d:a1:d7:62:a1:63:38:a8:88:c0:f7:f2:f1:0d:
30:6c:37:8b:32:4a:e9:14:37:49:12:6d:d8:a7:e6:48:1a:c1:
bb:86:93:1d:ed:26:cd:4e:0d:dc:5f:b9:87:d7:bf:04:d5:42:
17:18:8f:0e:e4:98:94:45:74:f6:0a:e0:c5:08:4a:43:3c:9c:
da:c9:2e:f7:f1:ca:70:17:b4:bc:90:ea:fe:74:69:19:c9:c0:
f9:bd:ee:43:30:4b:63:d5:db:39:fc:78:09:8d:7f:70:58:28:
9d:61:b1:94:95:5f:f6:39:23:bf:62:f0:e0:53:40:b5:15:b9:
c2:75:1a:ef:5a:19:c3:0e:4f:70:8f:b3:dc:cc:d8:03:0f:96:
bd:ed:50:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:45:22 2025 by rpki-client