Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
File: 1ftSajPzZqqJRhiOXTJr3ORuLEA.mft (raw, json)
Hash identifier: xXGMNwjPo2oHqXeHcLLukfGiW5et6ZJ+2wtmbzmIR0c=
Subject key identifier: A1:E1:5A:71:63:5E:7C:A4:C3:A3:94:9C:38:1E:32:88:2D:95:1D:40
Authority key identifier: D5:FB:52:6A:33:F3:66:AA:89:46:18:8E:5D:32:6B:DC:E4:6E:2C:40
Certificate issuer: /CN=d5fb526a33f366aa8946188e5d326bdce46e2c40
Certificate serial: 01987450C40DBF7C85C92A9556A9D5D74CCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
Manifest number: 0881
Signing time: Mon 04 Aug 2025 09:01:46 +0000
Manifest this update: Mon 04 Aug 2025 09:01:46 +0000
Manifest next update: Tue 05 Aug 2025 09:01:46 +0000
Files and hashes: 1: 1ftSajPzZqqJRhiOXTJr3ORuLEA.crl (hash: ZEQPHale5bgFWHMlxaUK6jBwsZUym1ConTUwtITin5s=)
2: qfUgWmjDBIJJxDCL7jiouOIMq6E.roa (hash: 8LoPzts8EEAcumqZ7LuONp4lduak/H5FziwN8+pOFJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:c4:0d:bf:7c:85:c9:2a:95:56:a9:d5:d7:4c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5fb526a33f366aa8946188e5d326bdce46e2c40
Validity
Not Before: Aug 4 09:01:46 2025 GMT
Not After : Aug 5 09:01:46 2025 GMT
Subject: CN=a1e15a71635e7ca4c3a3949c381e32882d951d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f9:18:08:b0:d1:ca:d5:0c:01:94:86:2b:7b:
d5:4f:23:ed:a6:56:49:90:0a:56:59:c5:60:51:0c:
e6:dd:77:b2:e8:16:3c:bb:3a:7b:b6:27:45:df:b5:
4d:26:b3:90:d8:ca:8e:4a:2b:a4:7e:13:f5:2e:d2:
eb:62:0f:c7:6a:4f:f2:29:05:c8:c6:64:d8:c5:82:
e0:7c:2d:ec:a4:f3:e4:11:a8:d3:57:ce:3b:66:65:
84:4b:f1:dd:68:61:04:b5:60:b1:27:4c:db:b2:19:
57:09:5a:c1:c4:21:18:55:33:ea:37:2f:84:04:5a:
b6:24:bd:b6:e0:5c:b3:3a:1c:92:52:65:bf:c4:3f:
a8:7c:2f:3b:31:1f:c9:c5:32:a5:df:d7:06:bd:31:
40:28:c2:0e:fd:bd:84:ee:a5:d5:35:0d:e8:52:aa:
70:7d:17:1f:05:2c:c9:ef:a9:ee:2a:8e:f0:65:64:
db:1e:fe:36:06:19:56:73:79:b6:e1:a2:97:80:12:
0c:e4:45:71:20:f8:a7:dd:f7:98:64:e2:fa:b1:f5:
f2:af:77:85:11:3b:6f:62:18:b8:bc:a6:2a:7a:88:
4b:eb:b0:84:71:ad:4d:3f:cd:ee:52:8f:64:9d:15:
4e:be:68:85:ac:97:a8:b2:96:f2:c1:92:76:dc:eb:
78:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E1:5A:71:63:5E:7C:A4:C3:A3:94:9C:38:1E:32:88:2D:95:1D:40
X509v3 Authority Key Identifier:
keyid:D5:FB:52:6A:33:F3:66:AA:89:46:18:8E:5D:32:6B:DC:E4:6E:2C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:24:c5:d3:38:9f:16:a2:68:2d:4f:94:6e:5c:d6:e6:31:01:
96:8f:af:7e:c6:c5:1f:fa:b4:cd:33:d6:70:c6:79:0d:a3:7e:
1f:7b:94:c1:43:6e:d1:a7:37:84:d2:ed:23:c5:00:00:9c:b1:
5e:27:fa:29:de:bb:30:ac:aa:d0:db:fb:b0:d9:8b:05:c1:f7:
a0:2a:dc:2d:34:90:ff:3c:74:24:01:44:30:08:a1:91:28:b4:
c6:c5:0c:b6:42:74:62:0f:01:75:29:bf:d1:76:c9:c4:6b:64:
2e:4a:40:23:2f:ad:81:71:d7:77:32:d4:c6:fc:04:6d:60:ee:
f0:fb:f8:df:78:5d:88:a7:36:8b:02:24:a2:e6:87:d5:c9:07:
79:13:5c:69:ae:6c:4b:48:3f:96:f1:0c:9e:61:2f:d0:d4:57:
8b:a3:89:9a:ea:75:2f:d2:2e:4b:b4:8c:c1:42:c8:ab:c7:fb:
59:14:87:08:ff:13:b3:42:ff:3f:60:40:71:99:ce:33:1d:57:
64:06:81:70:b9:1f:7d:1d:e0:ee:07:cd:f0:94:f2:a5:a9:cc:
4a:8c:57:06:49:df:31:a0:1e:22:24:58:5e:fb:1d:f9:0f:ee:
eb:97:7d:c4:a0:58:b6:c5:f8:7d:49:1f:ed:6d:f4:60:ed:c3:
ad:01:9c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:19:55 2025 by rpki-client