Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
File: 1-RVYjvgFRokoxj2rCGMAheXQj2U.mft (raw, json)
Hash identifier: 3qgH7eK4Qrw/huZ96ZqsIyGmKdfsbgMMwpl1NKaO3sA=
Subject key identifier: 0F:1C:38:A9:11:B3:27:99:E4:50:09:71:34:37:E8:46:A8:F0:19:71
Authority key identifier: F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65
Certificate issuer: /CN=f915588ef805468928c63dab08630085e5d08f65
Certificate serial: 019873E2B893EE4794205109D813BC92E718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 07:01:34 +0000
Manifest this update: Mon 04 Aug 2025 07:01:34 +0000
Manifest next update: Tue 05 Aug 2025 07:01:34 +0000
Files and hashes: 1: 1-RVYjvgFRokoxj2rCGMAheXQj2U.crl (hash: Kf5b8kmUV68+f+n02FPNCD3+942aIb6WqEy3BHD+vtI=)
2: kSpoSxHKDe6NIGWDkuL60L15TUg.roa (hash: H+OsucCLJz/FqkNDXLyLTzKpNO9y1yCy5pgD6JvPI6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:b8:93:ee:47:94:20:51:09:d8:13:bc:92:e7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f915588ef805468928c63dab08630085e5d08f65
Validity
Not Before: Aug 4 07:01:34 2025 GMT
Not After : Aug 5 07:01:34 2025 GMT
Subject: CN=0f1c38a911b32799e45009713437e846a8f01971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7c:a8:ee:79:2e:57:e4:5b:7e:14:65:00:21:
66:5f:f4:a5:26:97:e0:a6:81:53:6b:8f:2a:e6:2f:
99:b9:ee:39:77:bb:df:8d:3a:b1:97:5f:8b:4d:b9:
87:8d:75:a0:86:6b:b5:b1:4d:c2:4e:c5:de:a9:b3:
37:a4:44:b0:28:24:e5:43:86:80:28:9b:54:03:10:
61:52:c1:7e:1b:a3:07:b6:47:77:bf:13:b0:6f:6d:
ad:0d:a3:c4:0c:18:a7:8a:a0:37:ff:78:78:77:d4:
7b:e2:2a:9b:c4:81:a8:3f:64:1e:dc:d8:d4:5f:6a:
64:02:4a:e8:e3:74:77:ed:a1:aa:65:6a:f0:2a:23:
68:83:99:63:d3:e5:1b:66:ad:d1:0f:f7:d9:45:6d:
fa:36:65:17:bd:43:94:ad:1d:3b:da:ae:fc:76:f5:
90:41:02:16:86:69:b4:25:62:c9:01:8a:84:fa:38:
20:81:52:a1:e2:29:b3:fd:c4:37:60:8d:31:f1:d1:
3f:03:71:60:a1:c8:4d:07:56:95:57:fb:8c:29:e7:
df:54:14:4c:7a:3a:07:9d:8f:d0:74:af:b7:7d:11:
6e:d1:db:19:91:cb:f5:e0:38:86:8e:da:e6:c0:dc:
51:22:a2:80:5e:23:ec:33:f7:53:9c:c4:0c:bf:40:
c7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1C:38:A9:11:B3:27:99:E4:50:09:71:34:37:E8:46:A8:F0:19:71
X509v3 Authority Key Identifier:
keyid:F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:44:4c:bf:22:53:57:84:2c:7c:62:b7:d0:f7:e1:c6:12:5d:
1d:b4:58:46:a3:d8:93:71:44:eb:86:56:dd:27:dd:eb:4b:67:
5c:8d:5c:ac:36:53:9f:01:54:9f:c7:f6:b0:9b:9e:4c:5a:0e:
b4:b6:2a:08:6a:70:6a:15:d0:7b:38:98:04:7a:39:38:bd:93:
33:56:78:99:bc:ff:54:9b:c8:18:28:f6:e3:7b:dc:59:07:b8:
cd:49:bf:44:f8:f8:be:15:3c:fb:26:3f:c7:7a:8a:7a:65:15:
87:5a:54:50:82:08:f3:1f:f1:cf:3e:20:42:a2:44:52:1a:7e:
3e:bb:24:64:44:8f:ce:f6:dc:f3:43:fd:20:10:a1:83:00:1c:
04:c9:51:bc:9d:6a:17:3b:41:2a:e8:87:f7:e8:58:b0:b9:0e:
47:9c:c9:50:48:34:b8:c5:de:1f:14:49:b7:1c:f8:6e:d9:0d:
51:e5:39:27:e4:82:51:84:b7:17:e7:fe:1a:1e:dd:e2:81:e8:
08:34:0e:a7:dc:ac:47:0a:ba:7f:9d:2c:06:ef:90:07:08:5b:
3e:52:1c:73:99:75:e2:b7:d8:92:1d:33:ba:4d:f9:dd:ee:44:
53:ef:ef:d1:70:6c:07:0c:e9:aa:16:d9:49:d9:fc:8d:90:27:
fe:b2:12:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:00 2025 by rpki-client