Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
File: 1-NPp2u22ukJraBbRyQ83kiO-dXY.mft (raw, json)
Hash identifier: 4z7iUg6re0/afJZURXKUbiT1GRS1ENyX97fYXvCaSV0=
Subject key identifier: 87:18:02:16:8F:AF:8E:73:81:F7:AA:08:90:F7:B4:C4:B2:1E:A6:87
Authority key identifier: F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
Certificate issuer: /CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Certificate serial: 01988F58F6FA6F7EF09916C0CE67CC4B1A17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
Manifest number: 1623
Signing time: Sat 09 Aug 2025 15:00:28 +0000
Manifest this update: Sat 09 Aug 2025 15:00:28 +0000
Manifest next update: Sun 10 Aug 2025 15:00:28 +0000
Files and hashes: 1: 1-NPp2u22ukJraBbRyQ83kiO-dXY.crl (hash: vEWAz7pCYejBAQykERQoZ9m72sx65xPBOoXgK0BxDhc=)
2: ApRmxFrIHgDq0uE514jDIHsfIeg.roa (hash: wwR59HFeyAkBUrzznAPWkLGe9T2sf1JpKPVH96BNgPU=)
3: LDvMOjEUxjVrAxBBKwXZ2WWq0ic.roa (hash: lSJbEniX1S5iq6pQApVmxDosGfWL1zz6nfIQW1JNw3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:58:f6:fa:6f:7e:f0:99:16:c0:ce:67:cc:4b:1a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Validity
Not Before: Aug 9 15:00:28 2025 GMT
Not After : Aug 10 15:00:28 2025 GMT
Subject: CN=871802168faf8e7381f7aa0890f7b4c4b21ea687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:02:ca:93:f6:70:4e:88:25:88:ab:0a:de:9b:
f1:dc:b0:2e:07:1d:af:44:4b:16:24:a8:06:9b:90:
02:f9:d7:49:80:3e:e1:8f:db:6d:e5:37:9f:fb:d9:
ff:3b:f4:b1:58:46:52:43:51:76:35:25:4a:62:f2:
9f:07:b8:0e:fb:48:59:e5:b9:ec:54:7f:2b:de:eb:
3d:c9:8e:3e:c8:d6:f8:b9:56:a1:d3:cd:c5:65:ca:
30:11:d6:84:25:43:1a:c5:8f:8b:39:83:b8:b8:1a:
d4:bd:e6:c3:54:0f:fa:ce:ea:37:d6:d4:c3:87:e5:
8e:46:55:97:b7:73:e9:0f:b1:f0:52:db:d4:cb:bb:
7d:e7:82:9f:39:a3:a4:59:cb:a0:23:ba:87:4d:85:
fb:9c:28:8b:24:ac:d4:5b:ac:3f:54:3d:39:94:8b:
0c:e7:3f:be:89:03:28:a7:f6:9f:28:14:cc:98:8b:
7c:74:33:7e:6e:d7:20:f1:a4:34:56:e3:ac:ca:72:
e4:f1:0c:b7:df:e5:c0:f7:4d:31:14:d2:ba:60:ad:
af:1c:bc:7e:72:d5:4f:b6:d0:7c:6a:65:e2:ad:ca:
22:8a:54:ed:9a:a3:38:41:f5:5d:f7:a2:03:32:9f:
f8:84:93:12:68:c0:97:68:9e:ed:e5:7a:f4:08:dc:
3e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:18:02:16:8F:AF:8E:73:81:F7:AA:08:90:F7:B4:C4:B2:1E:A6:87
X509v3 Authority Key Identifier:
keyid:F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:b1:ba:43:54:bf:ed:4d:bc:29:98:1f:1a:4d:dc:00:bc:5e:
4a:b3:b0:8c:bc:40:8d:90:44:a0:64:62:b2:12:e3:1a:c6:83:
48:b1:e3:32:be:5d:cb:60:2e:94:db:ed:c3:e9:2f:6f:a4:e6:
af:fa:69:00:60:dc:99:6c:eb:46:08:49:ff:ac:f6:de:cf:cc:
79:5a:87:9d:9a:2e:f9:6d:a1:7b:32:55:5b:79:1c:a0:08:cb:
fc:30:87:b7:de:4b:3a:20:d5:7e:b4:dc:0d:5f:b8:39:b2:b0:
fe:69:33:39:23:65:1c:37:bc:e7:ad:1f:c1:51:4c:bd:8e:1c:
57:e6:84:64:bd:2a:cb:a3:43:e2:b5:87:6c:f3:5a:b9:79:44:
96:57:56:6d:57:34:c3:d5:1d:5e:37:ed:23:07:86:87:2e:59:
f8:a9:c7:38:d8:79:ad:78:b1:9c:f4:26:b7:ca:0a:22:11:87:
e2:7c:e6:42:36:a3:d8:60:24:ca:70:6a:96:a8:12:77:98:7e:
f5:db:30:8f:91:08:18:aa:11:8f:e8:fd:c0:b9:ab:60:41:99:
26:74:c1:ae:e1:17:72:0e:32:fe:21:bc:5c:6c:ff:3b:74:3b:
2d:07:72:1f:36:85:05:fa:72:f1:12:6e:81:8f:0e:00:fd:25:
55:4d:40:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:48:21 2025 by rpki-client