
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
File: _1VJGZMcZ70mUPxODHPC-z4ijZU.mft (raw, json)
Hash identifier: VM9lvTEV82B7ByFrieyB9D7ikD255TLmY79EyaERRg0=
Subject key identifier: 4E:77:9A:94:1C:3C:CB:D2:08:BE:A5:E0:8A:06:CE:97:0E:43:ED:51
Authority key identifier: FF:55:49:19:93:1C:67:BD:26:50:FC:4E:0C:73:C2:FB:3E:22:8D:95
Certificate issuer: /CN=ff554919931c67bd2650fc4e0c73c2fb3e228d95
Certificate serial: 0198820C5E7271460722BFEF82DC78AA38C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1VJGZMcZ70mUPxODHPC-z4ijZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
Manifest number: 1619
Signing time: Thu 07 Aug 2025 01:01:45 +0000
Manifest this update: Thu 07 Aug 2025 01:01:45 +0000
Manifest next update: Fri 08 Aug 2025 01:01:45 +0000
Files and hashes: 1: _1VJGZMcZ70mUPxODHPC-z4ijZU.crl (hash: fmvyStVNadWuIh1X6RIrPuqJePS5pBNyG57WPavDqGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1VJGZMcZ70mUPxODHPC-z4ijZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0c:5e:72:71:46:07:22:bf:ef:82:dc:78:aa:38:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff554919931c67bd2650fc4e0c73c2fb3e228d95
Validity
Not Before: Aug 7 01:01:45 2025 GMT
Not After : Aug 8 01:01:45 2025 GMT
Subject: CN=4e779a941c3ccbd208bea5e08a06ce970e43ed51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d0:be:9d:f3:90:de:c1:66:a8:ae:c2:94:17:
8b:55:e4:33:da:fd:14:2f:71:94:8e:5c:c0:da:dd:
89:fa:85:e5:63:16:f5:c6:50:e8:99:27:b1:fb:df:
81:fd:bb:e7:86:c9:1f:31:d4:b1:a6:ee:e7:7e:08:
30:d6:57:12:99:ab:01:13:36:c6:ea:a3:21:e8:a4:
7b:08:97:89:e6:53:1d:41:48:c1:ab:fe:64:b3:4a:
5f:a5:43:8d:bb:87:a0:4f:7c:19:d2:6b:2b:13:5b:
fc:da:43:4d:55:17:93:75:1f:7f:01:1d:25:08:c4:
f5:3f:70:64:ab:c2:13:ea:a7:68:66:a0:21:7d:80:
13:75:2a:26:72:f9:9f:bf:e9:84:86:df:c2:ab:b0:
b6:7a:14:ae:5a:07:1d:5a:78:1d:d4:aa:87:5d:7c:
42:98:4d:6d:a5:73:0c:82:62:64:fa:13:ad:8d:86:
eb:87:b9:e9:40:c8:9a:dd:19:30:34:a8:ff:c4:03:
8e:80:c5:87:61:71:99:cc:c2:06:af:1c:ba:4d:c5:
33:29:8c:c4:79:c9:68:c1:3a:6b:6d:c9:28:ca:f1:
02:c3:85:9d:51:d1:38:f5:a7:88:85:80:7e:e9:9c:
11:ee:cf:45:14:e2:f8:c6:dd:51:b0:66:f4:42:d9:
43:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:77:9A:94:1C:3C:CB:D2:08:BE:A5:E0:8A:06:CE:97:0E:43:ED:51
X509v3 Authority Key Identifier:
keyid:FF:55:49:19:93:1C:67:BD:26:50:FC:4E:0C:73:C2:FB:3E:22:8D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1VJGZMcZ70mUPxODHPC-z4ijZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:42:48:31:03:f3:74:b7:cb:d5:41:1a:2f:24:6d:4a:4b:14:
fb:83:d9:44:25:b0:64:01:42:6a:0c:e5:7d:58:c0:ec:84:a3:
13:81:d7:0a:28:80:23:d8:b3:fd:6c:07:db:82:59:47:be:4d:
15:c5:c3:1c:49:41:a2:f4:3d:46:5a:d4:22:ce:25:ad:f7:96:
a7:5e:4e:67:98:ab:b2:b8:82:b1:a8:96:31:7b:f2:18:9d:0e:
66:b4:05:a8:f0:75:dd:72:3e:fa:a4:14:b0:08:0a:27:a0:97:
aa:a2:24:bc:dc:5e:33:1e:b2:6d:b9:b5:e1:f4:a9:3b:6f:91:
eb:51:3a:03:3c:46:82:41:3e:f5:5a:a5:28:4f:73:df:d2:f6:
54:b3:d6:8b:9f:b9:c5:47:dd:7e:92:9e:ae:f7:ac:47:63:b0:
b4:aa:ca:aa:9a:9d:b2:b9:2f:e9:ac:60:b3:3e:3d:6f:de:03:
c7:20:e1:8b:c8:30:d3:d8:c3:c5:7c:09:1b:69:43:b3:c4:7a:
b8:1a:21:cc:23:0f:ba:02:70:8f:31:ad:7d:ea:e4:0d:eb:02:
48:01:6e:54:c2:e2:c5:ce:6a:be:ed:d5:4f:23:38:fc:90:d8:
e5:d9:d0:63:5a:f3:69:0c:db:6f:7b:0f:86:33:cb:5f:da:c7:
8c:3a:06:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:42:22 2025 by rpki-client