Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft
File: 1V5WEXiBQrMVQorlH2fLus-At-g.mft (raw, json)
Hash identifier: hA0/Bfh3VhtQ7b2uQQhtBC2BStJnzHTetQbh8+HW7oo=
Subject key identifier: 0A:AC:B6:A8:63:9E:A3:8C:FD:C2:CE:18:1B:38:AC:85:CF:E5:DC:ED
Authority key identifier: D5:5E:56:11:78:81:42:B3:15:42:8A:E5:1F:67:CB:BA:CF:80:B7:E8
Certificate issuer: /CN=d55e5611788142b315428ae51f67cbbacf80b7e8
Certificate serial: 019873E2C165E8992A2B07AA4B5709CFC383
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft
Manifest number: 036A
Signing time: Mon 04 Aug 2025 07:01:37 +0000
Manifest this update: Mon 04 Aug 2025 07:01:37 +0000
Manifest next update: Tue 05 Aug 2025 07:01:37 +0000
Files and hashes: 1: 1V5WEXiBQrMVQorlH2fLus-At-g.crl (hash: yxdlvW9de/UPDNXbFR0Ulj1NNiSPB0VV7UYikPh/tpY=)
2: y49JuAVDoy-LfsHdEc6QYgh16LA.roa (hash: lgV8xv23uaL4oGyw+8u8NKX5nD6V6ZzdAGMuEZqxGwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:c1:65:e8:99:2a:2b:07:aa:4b:57:09:cf:c3:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d55e5611788142b315428ae51f67cbbacf80b7e8
Validity
Not Before: Aug 4 07:01:37 2025 GMT
Not After : Aug 5 07:01:37 2025 GMT
Subject: CN=0aacb6a8639ea38cfdc2ce181b38ac85cfe5dced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5c:45:11:25:38:e1:28:c8:fd:6a:89:84:5d:
2b:0e:c5:ad:9a:c6:61:28:3c:bc:5e:db:ad:1a:a2:
dc:dd:b0:f4:e9:b6:a2:d6:3a:8b:7b:3f:b7:fb:33:
4d:10:6e:a4:dd:09:9c:bc:24:aa:96:73:80:ae:97:
85:4f:66:9e:33:ce:72:af:49:d4:3b:83:74:72:96:
67:99:62:26:a5:1f:2d:04:f9:50:71:91:de:d4:ab:
8a:a3:43:df:88:2b:ad:55:19:4f:29:7a:7c:a9:de:
6e:24:27:52:83:38:80:a3:40:66:e9:d8:6b:8f:53:
93:d7:ac:40:5f:e9:22:60:88:c7:bf:49:a5:77:72:
ea:a5:c1:90:f6:ea:c8:81:e9:93:8c:1c:cf:a5:e5:
06:cf:1b:1a:42:94:48:70:10:d4:23:31:b6:3e:18:
f3:ae:0a:3b:9f:b4:b4:dd:df:35:47:6b:28:de:78:
55:8b:0a:15:b9:2f:67:d3:29:9d:02:04:ff:b5:64:
e3:da:d4:4e:18:e0:8a:7d:f9:8a:e2:33:b8:0b:63:
4e:5a:99:25:4d:63:57:24:03:13:68:b3:17:45:8a:
d9:3d:78:56:1e:1d:3f:bd:86:81:d9:7b:b4:16:12:
4a:48:0e:38:44:4e:f5:1a:6a:ef:83:8b:55:7e:6f:
51:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:AC:B6:A8:63:9E:A3:8C:FD:C2:CE:18:1B:38:AC:85:CF:E5:DC:ED
X509v3 Authority Key Identifier:
keyid:D5:5E:56:11:78:81:42:B3:15:42:8A:E5:1F:67:CB:BA:CF:80:B7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:42:84:16:31:8e:ba:9c:3c:dd:21:11:0b:48:49:fc:d5:cc:
97:49:44:e2:cd:b0:43:ba:e0:ec:c9:82:6b:8e:84:3c:0b:60:
d3:9c:c5:a7:5b:f6:ea:14:d8:67:60:51:c3:64:74:19:b0:3e:
62:96:4d:62:a5:7f:b7:9c:e4:cf:ec:8c:d6:fc:50:66:5f:ca:
bf:10:9e:a9:51:15:3f:4a:93:b0:62:5f:6e:79:bd:0b:6c:a4:
b8:84:48:4b:e4:15:dc:ea:94:48:85:b0:ac:97:89:72:1c:a0:
bf:5e:d9:d7:c7:0d:30:58:30:e8:8e:13:a6:22:9d:37:18:3d:
98:d0:13:ea:4a:3e:1d:a6:df:b7:52:7f:49:3e:34:7b:ce:81:
72:60:ce:13:70:ed:b6:66:35:e3:8d:f7:92:1b:92:33:21:e6:
67:66:51:9f:d2:36:fb:70:7c:3b:41:a4:43:15:70:bd:2f:1f:
1a:c4:52:c4:46:5a:21:35:0e:3a:72:40:62:3a:5c:22:1a:fc:
dc:7c:f6:fb:e9:b8:9d:37:aa:5e:ae:fc:51:13:4d:f7:c4:45:
7c:c8:35:e6:a2:4d:1a:c9:5d:00:e9:1a:56:21:e9:d8:c6:bd:
f8:79:c1:94:15:27:97:3e:13:41:f9:49:51:9c:cd:41:f5:fe:
2d:64:78:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:02:29 2025 by rpki-client