Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
File: 1RWTKWDzwXTUlXq-n1qylSZNVFM.mft (raw, json)
Hash identifier: pq/K463mq5aGbju0XWM23oUnfIEzuDndDgt4kOjRQig=
Subject key identifier: B1:5E:78:2F:5D:16:E8:C5:AB:90:45:E2:7A:45:EE:A4:01:DD:DE:B6
Authority key identifier: D5:15:93:29:60:F3:C1:74:D4:95:7A:BE:9F:5A:B2:95:26:4D:54:53
Certificate issuer: /CN=d515932960f3c174d4957abe9f5ab295264d5453
Certificate serial: 01987D1C8203EADD1E59547346810ECCE792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
Manifest number: 84
Signing time: Wed 06 Aug 2025 02:01:16 +0000
Manifest this update: Wed 06 Aug 2025 02:01:16 +0000
Manifest next update: Thu 07 Aug 2025 02:01:16 +0000
Files and hashes: 1: 1RWTKWDzwXTUlXq-n1qylSZNVFM.crl (hash: P6Hb3nzP6bYemg76gkU4JAkn8QkE5scmKZIMKvUjodc=)
2: 5-grPTSSQ46ki6vrVlQC7SeehIc.roa (hash: vQAPGdX1KSbjltYnmf1gVhaVezYrxmfY7AB2aHZ+pA4=)
3: NBYK9HcV9zHH6p3edxqHgVRXk0w.roa (hash: ctgn9UPX1hGKPuPf8G1MPg9i0aaG134wq4vfRAm3Qis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 02:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:82:03:ea:dd:1e:59:54:73:46:81:0e:cc:e7:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d515932960f3c174d4957abe9f5ab295264d5453
Validity
Not Before: Aug 6 02:01:16 2025 GMT
Not After : Aug 7 02:01:16 2025 GMT
Subject: CN=b15e782f5d16e8c5ab9045e27a45eea401dddeb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e6:d6:b5:cb:a5:2b:07:3f:62:e6:2c:19:14:
fc:1d:36:62:d3:91:36:4a:57:a6:1d:3b:0b:d6:51:
1e:9a:71:0d:57:b6:68:59:54:33:50:65:bc:33:6a:
4f:16:06:df:59:ce:b0:cb:75:17:51:5e:7e:a4:19:
85:f7:35:e7:e3:92:50:3b:75:2b:f2:c9:02:0c:26:
13:e5:e0:fe:f5:11:28:9d:a2:29:57:ee:12:f7:55:
c3:a4:e5:78:5b:06:75:26:9a:cd:4b:fd:5a:5a:33:
4b:5d:3f:b6:d5:f4:d8:a8:00:b7:ff:0a:38:92:ff:
bb:f8:38:cc:80:01:3b:c6:13:0a:b8:85:1f:a6:f9:
e3:0b:b8:00:a0:f8:d5:d1:e4:a3:68:4e:b6:fb:0a:
94:ca:9e:dc:4b:76:d2:01:e0:30:56:37:95:c5:9c:
ad:ac:e5:9c:99:84:96:6d:bf:bf:f5:de:30:04:a5:
86:7e:f0:10:6c:3a:b0:a9:c7:a5:0a:92:18:4a:32:
62:9a:e7:a2:07:d8:d8:8c:03:ec:fa:b1:0e:14:7e:
56:b9:59:18:09:11:e5:e4:25:62:5b:31:48:2c:ea:
a8:79:25:23:96:99:07:79:06:57:75:7f:a8:aa:29:
7a:a2:ce:de:d2:cc:de:65:20:b7:97:dd:98:bf:ad:
5f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5E:78:2F:5D:16:E8:C5:AB:90:45:E2:7A:45:EE:A4:01:DD:DE:B6
X509v3 Authority Key Identifier:
keyid:D5:15:93:29:60:F3:C1:74:D4:95:7A:BE:9F:5A:B2:95:26:4D:54:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b7:93:4c:2a:62:e2:17:c1:60:27:70:1b:dc:a8:2f:11:6d:
03:9d:a2:7b:cd:46:71:0f:8e:b3:9b:93:cd:36:0a:82:05:9e:
94:0f:9b:97:2a:21:a4:11:93:0d:c1:2b:53:6b:50:6f:5c:a4:
d4:de:4d:0a:d4:dd:6a:33:f8:04:2a:cc:12:43:0c:af:fc:bc:
7c:b7:47:9c:45:c7:33:95:5f:3e:04:f2:81:70:fb:aa:88:6b:
6b:c2:0d:3d:c4:eb:40:ae:f7:fe:c8:e0:27:7e:5d:c1:76:25:
ef:c9:86:91:66:fc:4d:ea:50:29:96:47:ad:c5:a4:e0:f6:58:
54:1e:f1:4d:53:23:59:b2:8d:4b:14:3c:81:b0:38:26:52:4f:
41:8f:90:86:ee:30:05:6c:fc:69:05:b3:92:14:ec:32:38:29:
da:0d:52:9d:f3:70:b6:20:63:aa:61:35:8f:9d:f8:2f:89:a1:
da:e6:9d:c3:83:f8:e0:0f:7b:d0:dd:f0:d9:7d:40:76:c1:59:
e6:e2:c6:0c:8b:ce:73:4f:06:d4:2f:22:ff:b4:ea:85:0a:8c:
07:61:b8:13:c7:54:14:ff:ce:d4:20:9a:1d:5f:6d:13:23:88:
73:4b:85:30:98:ac:c7:e9:76:6d:65:49:70:ac:a6:f8:20:76:
a4:54:0c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:31:19 2025 by rpki-client