
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
File: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft (raw, json)
Hash identifier: DvSEdVbbnCJVA7kUXQ6iAUWuehWbnvbakGaEAn0ExVM=
Subject key identifier: 1C:5A:4E:2A:A0:B5:4E:E6:EC:E0:1D:BA:BE:AE:36:58:D2:4D:28:4F
Authority key identifier: FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
Certificate issuer: /CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Certificate serial: 01987A527BB9B4DA9C100E6EB15DBF422CE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
Manifest number: 02A0
Signing time: Tue 05 Aug 2025 13:01:22 +0000
Manifest this update: Tue 05 Aug 2025 13:01:22 +0000
Manifest next update: Wed 06 Aug 2025 13:01:22 +0000
Files and hashes: 1: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl (hash: Bd3XL+a651+BK6KJ35L1IqydpoNTFoLGSQ231O7him4=)
2: olYC3vt3bTWX5B6Daul0GiCdzRk.roa (hash: EU31+YZYAX7zRrR/hWxXMjIPU9jCSCk9p7wSptbJIM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:52:7b:b9:b4:da:9c:10:0e:6e:b1:5d:bf:42:2c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Validity
Not Before: Aug 5 13:01:22 2025 GMT
Not After : Aug 6 13:01:22 2025 GMT
Subject: CN=1c5a4e2aa0b54ee6ece01dbabeae3658d24d284f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:04:05:8a:76:80:df:19:71:a6:23:21:ee:f5:
8d:10:71:fa:94:b0:9b:6f:11:8e:b9:11:b2:f2:74:
b3:2a:66:b4:8e:b7:ae:f8:86:3a:9b:0c:ae:63:d0:
e9:0e:49:72:ed:d6:36:64:af:06:73:1c:0e:65:72:
d8:07:b1:6e:af:d6:b4:f8:4e:78:28:fc:d7:9b:b4:
ac:75:7a:0d:18:43:49:3c:35:15:44:86:9b:98:1d:
9d:33:95:35:c6:91:c2:7a:08:5e:0f:32:63:ae:aa:
42:29:08:4b:77:e8:4c:78:75:7b:b6:12:d2:68:b7:
37:d9:76:0e:88:5f:a3:4a:f3:8c:40:55:fe:27:dc:
f3:b8:11:e5:31:2f:cd:71:6a:9c:66:8b:ea:f4:ad:
be:4d:2f:1d:ae:13:5c:54:e0:15:7f:bd:33:46:3a:
f8:28:46:7e:90:48:28:86:19:2b:96:04:f5:fc:c3:
39:6a:f3:28:2b:a1:ee:46:36:fa:69:8a:a4:2f:da:
98:c7:0b:93:1f:93:ab:da:17:d1:85:11:15:f0:0c:
25:a4:79:d2:be:d6:3d:4f:22:59:e2:33:39:1f:ee:
c0:cd:e3:27:3d:ab:f6:44:7b:48:14:3d:34:30:f9:
d2:1c:fa:4f:d8:1b:ab:79:3b:39:ea:54:b4:8d:85:
0f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5A:4E:2A:A0:B5:4E:E6:EC:E0:1D:BA:BE:AE:36:58:D2:4D:28:4F
X509v3 Authority Key Identifier:
keyid:FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d4:93:a7:06:aa:60:75:a4:f0:d9:8c:2f:8f:a7:a1:f0:e5:
b8:4e:95:91:78:8b:a6:f8:d9:e4:80:28:65:7d:d5:26:07:e0:
79:77:59:21:69:17:2c:ef:a4:95:78:ec:88:1e:29:bd:18:2e:
a3:8f:cc:d7:6e:8b:63:f5:47:82:9f:c5:2f:9e:31:73:90:8a:
cc:2e:ff:02:73:3c:45:35:6d:06:dd:3f:a5:8e:04:df:27:5d:
5e:7b:a1:21:ac:44:c4:37:70:3c:8b:bb:13:ce:98:40:b6:36:
4b:8c:46:dc:54:0e:33:61:ce:68:99:82:d9:37:43:2b:57:59:
8a:c7:8c:af:ae:ca:e4:f0:38:3c:42:1a:94:46:02:b0:c6:09:
f1:57:da:2d:15:d8:76:e4:fd:0b:fb:81:49:6c:5a:81:cf:3d:
52:7d:63:fc:c0:d2:16:c3:c1:45:e2:b7:0c:b7:f0:6e:3f:87:
5f:32:26:03:2c:2c:53:60:33:3f:b0:ba:94:b1:2d:cd:47:d9:
8b:96:58:34:d0:87:44:4f:6e:01:61:1d:99:13:fa:56:59:58:
dc:45:63:09:ae:51:9b:78:b8:a2:92:d3:cc:70:4d:9a:3e:9b:
53:50:48:3f:10:83:5d:bd:b1:0a:b9:96:78:23:6d:0b:a8:89:
b2:a2:a8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:20:51 2025 by rpki-client