Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
File: 18R1QD_dkDgYkeWgwyZrR43YyjU.mft (raw, json)
Hash identifier: m03GaG1ehUqGbU9F8NTwCiU8+r0MEkL67FYuvU2nNog=
Subject key identifier: 00:B1:8D:99:5C:A5:20:4B:EB:2E:CE:F7:FD:A2:50:02:28:8F:18:95
Authority key identifier: D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35
Certificate issuer: /CN=d7c475403fdd90381891e5a0c3266b478dd8ca35
Certificate serial: 01988F8FDA02E3274CE0DB43B2CEC593A41F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
Manifest number: 0C51
Signing time: Sat 09 Aug 2025 16:00:25 +0000
Manifest this update: Sat 09 Aug 2025 16:00:25 +0000
Manifest next update: Sun 10 Aug 2025 16:00:25 +0000
Files and hashes: 1: 18R1QD_dkDgYkeWgwyZrR43YyjU.crl (hash: rf6LuPNh95FdJa9RYjjpHozINc4hzv/hQPc+ReaMEBM=)
2: TKaIIghuBjovehstBf-4yPQzWzs.roa (hash: Y5l+50EAAN4J3BZwHmdWVnVvSIYr6cNnr7nr74LFy0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:8f:da:02:e3:27:4c:e0:db:43:b2:ce:c5:93:a4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c475403fdd90381891e5a0c3266b478dd8ca35
Validity
Not Before: Aug 9 16:00:25 2025 GMT
Not After : Aug 10 16:00:25 2025 GMT
Subject: CN=00b18d995ca5204beb2ecef7fda25002288f1895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:58:ef:a1:88:ed:cd:db:44:63:20:d1:6f:a8:
76:de:15:53:f5:c3:a3:29:2a:06:df:0a:1c:39:16:
4f:70:b8:0c:c3:75:8a:0c:e4:30:70:13:7e:2c:7a:
34:34:e7:73:01:2b:1f:43:25:90:a8:b5:1d:ec:a3:
e2:a9:8a:a9:d7:20:02:ae:93:74:b4:34:a2:51:f4:
64:db:2f:ea:c3:ae:90:e3:c6:08:78:6a:52:0f:9d:
11:f1:92:4a:96:c2:06:b4:db:7e:96:d5:c7:59:0d:
01:6e:60:6e:e2:cc:7c:b1:ef:b1:b4:82:2d:8e:0b:
81:a5:ce:2c:24:94:bc:99:da:41:c2:a9:10:7a:8f:
06:b6:45:44:8a:e8:85:c7:06:4c:8a:9d:a0:49:7a:
43:72:35:58:43:0d:b6:06:b8:38:4b:4d:e2:0d:f3:
21:ed:1b:3c:e2:6e:7f:56:8f:40:52:c7:b9:61:57:
86:e9:0e:61:3d:e8:75:24:4d:27:62:2c:ad:08:70:
42:f6:34:ee:30:f2:fa:b5:54:fc:3f:21:19:df:0d:
e2:a5:7c:b5:2b:bd:6d:51:6e:e9:c0:ec:95:3f:35:
fa:11:0c:fe:70:83:2b:c1:e6:5f:7a:cc:b2:d1:ce:
1c:55:cb:67:87:7f:d5:2b:bd:f3:a1:95:a8:9d:88:
b0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B1:8D:99:5C:A5:20:4B:EB:2E:CE:F7:FD:A2:50:02:28:8F:18:95
X509v3 Authority Key Identifier:
keyid:D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:31:ea:3e:1f:93:0b:0f:81:9b:3d:9d:92:59:b6:e3:f7:d8:
36:2e:5a:53:e3:fd:8b:40:31:3e:86:a1:6f:73:a9:13:e9:6f:
b9:cd:de:dc:db:be:ab:37:f4:63:04:24:78:19:45:f2:44:97:
48:d3:fa:18:f6:95:a1:a6:83:ab:42:05:36:bf:40:e5:2f:f0:
12:9d:03:d0:e2:0e:7d:d9:69:93:e1:c6:14:bb:48:70:b8:c3:
7f:66:00:cd:ac:bd:7b:13:16:b1:61:76:88:d2:d5:9d:19:b3:
a2:5d:83:b1:6a:c2:77:f6:ce:2e:0e:22:87:ad:67:d4:02:83:
20:61:ff:45:e2:bc:0f:2b:10:98:d8:73:5d:9e:b5:c5:6b:6d:
84:00:13:9c:38:ac:6d:07:03:0d:f6:09:cd:9c:79:c7:e0:94:
2b:e7:3f:78:a4:d4:fd:bd:b5:3f:29:06:57:3a:45:64:1f:15:
01:ec:c8:e7:6a:64:82:69:50:4c:4a:f3:3f:09:ed:cd:76:24:
45:37:e4:e8:c5:39:e4:45:82:cd:d3:d6:dd:b5:40:05:15:fd:
23:64:d7:62:af:60:40:e3:39:0e:ba:2c:d0:a7:d8:cd:39:56:
a8:67:cf:0a:26:62:09:d3:6f:7b:50:43:ca:1f:ff:4a:59:1a:
5e:a6:ae:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:35:56 2025 by rpki-client