
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
File: d1szbD5Il6UrOcOtquzOxr9wzn0.mft (raw, json)
Hash identifier: 2GMwOmJ7KYmnZFnvZjCy/IzKYgXbX24K0VugCiFW1no=
Subject key identifier: 01:B0:42:D8:34:3B:84:95:BE:D2:FF:96:AE:BA:5F:3C:DD:FC:22:E1
Authority key identifier: 77:5B:33:6C:3E:48:97:A5:2B:39:C3:AD:AA:EC:CE:C6:BF:70:CE:7D
Certificate issuer: /CN=775b336c3e4897a52b39c3adaaeccec6bf70ce7d
Certificate serial: 0198A0F19EFEC20A48145E54873929F944F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
Manifest number: 1552
Signing time: Wed 13 Aug 2025 01:00:46 +0000
Manifest this update: Wed 13 Aug 2025 01:00:46 +0000
Manifest next update: Thu 14 Aug 2025 01:00:46 +0000
Files and hashes: 1: 1-jRnyFGmEx1CVoLDNNDO26bccvY.roa (hash: 23QvIcsUor9KhcMI2prwonWuUHDRgDZgiqunE4RPe6c=)
2: d1szbD5Il6UrOcOtquzOxr9wzn0.crl (hash: dFeY5RAzALtV7THjFGP4AloA4kFGaZR5oMI+1UadIpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:f1:9e:fe:c2:0a:48:14:5e:54:87:39:29:f9:44:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=775b336c3e4897a52b39c3adaaeccec6bf70ce7d
Validity
Not Before: Aug 13 01:00:46 2025 GMT
Not After : Aug 14 01:00:46 2025 GMT
Subject: CN=01b042d8343b8495bed2ff96aeba5f3cddfc22e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:b8:47:63:be:68:2d:bc:09:8c:1f:e8:a3:10:
7e:91:2b:60:38:64:61:ee:9e:e5:28:4f:59:c0:0b:
c1:e3:18:e6:38:43:a6:26:3c:35:99:33:ae:29:c1:
36:23:77:87:7d:9a:9f:ef:a4:d3:61:4e:41:74:2c:
1c:10:2c:76:73:4c:d0:a9:2e:38:19:08:ca:11:5c:
1a:f2:fc:8f:a3:a8:c8:fa:31:f9:40:11:66:05:7d:
2a:a0:5c:72:d5:5c:85:a9:a2:ce:1a:3c:c3:a6:71:
3d:a1:b6:b8:b1:fc:18:5a:17:6b:d0:a2:a0:16:2b:
e1:99:e3:9b:a1:b6:23:00:de:50:ca:d9:19:9e:dc:
6a:c3:14:93:ad:c0:84:8d:83:68:96:29:50:a0:0c:
d6:90:bd:64:f9:17:dd:4f:f9:34:09:ba:11:11:52:
0f:c6:75:cf:74:04:bc:50:e7:15:77:ca:ce:fa:11:
93:e4:9b:a9:87:23:58:69:77:c8:2f:68:50:4c:4e:
bc:c5:3f:57:0a:21:84:c3:d1:80:42:5b:77:ac:31:
7b:f6:04:49:59:33:d3:ed:19:69:ec:d7:af:b0:7c:
9b:3c:de:ef:51:2d:24:af:8a:9d:88:14:20:09:6a:
e7:6b:f4:95:f6:e4:10:86:0a:a8:73:4d:18:6f:59:
46:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B0:42:D8:34:3B:84:95:BE:D2:FF:96:AE:BA:5F:3C:DD:FC:22:E1
X509v3 Authority Key Identifier:
keyid:77:5B:33:6C:3E:48:97:A5:2B:39:C3:AD:AA:EC:CE:C6:BF:70:CE:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ef:26:66:2d:ff:73:76:d0:f2:0c:70:d2:a1:2d:43:5d:1c:
55:da:4f:9d:89:37:05:6b:e1:ce:98:41:0d:3c:08:39:a8:44:
6e:e7:91:cd:8d:ba:5b:26:b4:ca:83:b3:0c:15:f1:97:87:44:
db:84:48:b5:e2:2b:f1:d6:8a:5a:7c:ce:bf:34:2f:87:eb:09:
25:2b:6e:51:e4:60:6f:14:f5:e1:d0:4d:f9:f8:0c:86:7b:5c:
d8:0a:8a:19:78:08:a0:5a:b4:80:94:b6:46:58:e3:88:a9:e9:
c0:9e:23:12:fa:85:93:d2:46:3d:1a:0a:42:3a:f5:2d:79:5f:
f9:e9:d4:c1:37:c2:cc:aa:59:4b:d5:7c:07:b7:ea:9f:bc:34:
42:c3:09:c8:37:65:69:c9:03:63:cf:79:44:57:cb:0c:2b:f0:
47:bb:f1:97:40:b2:f0:61:04:6f:bf:d1:d6:38:b1:6d:ef:dc:
28:07:9f:7b:ed:a7:45:8f:8c:fe:04:43:64:d7:61:c8:54:22:
af:c0:82:ff:6b:66:87:78:af:cd:a7:95:e9:fe:16:b1:83:14:
2f:4f:a6:c5:b8:de:70:f4:8f:f4:de:55:c2:94:ec:67:58:bd:
c9:66:41:12:5b:96:1b:71:6d:b0:0d:dc:ce:8c:2a:a7:8c:11:
c2:c6:e5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:28:33 2025 by rpki-client