Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
File: 1-RqCIwAuMSTluwboLU9go3m5Pc0.mft (raw, json)
Hash identifier: eJBP7aGCCjwDZf4fWoYO8sH32Uz5u4z1B4O+EuDtCQw=
Subject key identifier: 99:2B:88:CF:AF:D9:2C:24:8E:36:46:E8:54:68:C2:67:C6:6A:7C:7D
Authority key identifier: F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD
Certificate issuer: /CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
Certificate serial: 01987D89FE2004552C842DC6FEB3703AD5F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
Manifest number: 10CD
Signing time: Wed 06 Aug 2025 04:00:52 +0000
Manifest this update: Wed 06 Aug 2025 04:00:52 +0000
Manifest next update: Thu 07 Aug 2025 04:00:52 +0000
Files and hashes: 1: 1-L2N1IxNmqwC6SnQGrk2zfPC90E.roa (hash: lv5rh5EEaSGLGKAlKwyPA6/B7Y5vo8o7IkiCP0ociGg=)
2: 1-RqCIwAuMSTluwboLU9go3m5Pc0.crl (hash: gIcAiN36Lw3Ytaa3jXifx3Bk+ZoYHkOq9wBTsMCzXjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:89:fe:20:04:55:2c:84:2d:c6:fe:b3:70:3a:d5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
Validity
Not Before: Aug 6 04:00:52 2025 GMT
Not After : Aug 7 04:00:52 2025 GMT
Subject: CN=992b88cfafd92c248e3646e85468c267c66a7c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5b:83:1b:bc:55:71:10:c0:a8:16:74:c5:ab:
61:d4:0d:4e:dd:a7:82:60:ca:43:fd:78:27:61:61:
7e:bc:4b:ae:dd:73:e8:48:2a:5a:f1:5c:19:21:2f:
78:65:ef:58:62:b7:10:ac:8a:ed:60:85:1e:1e:2f:
64:1e:8e:f1:16:5b:24:72:a7:00:5c:90:a0:c6:a0:
0b:c2:7a:7c:89:78:cd:43:45:ef:5b:cd:27:ba:99:
81:0f:0d:02:c5:86:e3:8e:3a:97:a3:fd:6a:31:05:
c1:8f:52:70:39:1b:c0:37:4b:7b:02:3a:de:d7:71:
c1:a4:08:f9:26:df:f1:ed:f5:8c:b8:42:bf:0d:ab:
b6:fd:d1:15:d3:03:05:8f:0f:f2:27:b4:e6:58:f1:
37:37:7a:82:39:65:cd:e6:8d:8a:35:2d:e6:ec:a6:
1d:5f:34:6d:7d:e3:f7:a5:87:ba:98:b8:ce:f0:66:
63:c1:70:e9:08:31:09:56:35:c9:64:54:a6:18:4a:
b1:e2:68:05:3c:64:ee:c0:5e:5e:d7:99:75:f3:91:
1a:96:1d:c6:c2:c6:cd:87:bd:6b:fc:37:77:a5:6d:
bb:31:81:21:43:83:72:26:f1:91:c1:00:ea:3c:04:
2a:d7:73:31:f4:1a:90:55:dc:04:be:54:11:c7:c0:
6d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2B:88:CF:AF:D9:2C:24:8E:36:46:E8:54:68:C2:67:C6:6A:7C:7D
X509v3 Authority Key Identifier:
keyid:F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f8:fc:c0:7f:f1:dd:d0:7a:8d:f4:6d:e4:65:e7:a3:44:52:
5f:2e:ef:93:d3:b9:9b:6a:cf:bb:63:d0:63:1b:a4:25:c2:91:
86:83:79:5f:14:1d:84:70:91:0a:d3:ff:c4:95:3e:35:92:f4:
6b:ff:a5:42:93:f2:0a:7b:c5:22:08:60:c6:8b:1e:06:d1:9e:
4c:0d:c0:0a:c3:be:46:0a:68:04:4e:2b:4b:bf:23:5c:48:55:
c7:25:be:14:91:2d:ca:a8:84:e2:d9:66:e4:30:73:09:fb:ab:
09:f7:56:4f:04:58:40:fb:cd:d8:9c:6a:4a:84:44:df:df:87:
21:f2:fd:bb:e4:42:79:9b:3c:84:c7:4b:70:a1:c1:b5:11:b8:
bf:4a:5a:56:26:6d:64:1f:d9:9e:dd:cb:a3:3b:dd:e2:24:81:
e2:28:2d:10:22:e9:51:ae:d1:b4:59:16:8a:1c:a3:8b:a5:98:
d4:35:e7:77:de:b4:b5:90:cd:e2:8f:4d:31:0d:da:5a:17:b1:
1e:93:af:12:05:a0:3f:8f:95:92:d7:ca:cc:6b:ab:6a:4e:b9:
87:26:36:36:8b:32:e9:99:35:b0:f6:91:41:71:a2:e7:40:c5:
a0:93:4f:89:6b:12:25:a3:de:96:da:ee:10:2d:bc:b3:26:5b:
3e:aa:51:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:06:46 2025 by rpki-client