
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
File: 1-aNSD9nCmaKHTfXke2MCpCUqcms.mft (raw, json)
Hash identifier: puoThsFsgI7/rFtLSKBiHtVDc8A/8XRUlHYBWFWEhr4=
Subject key identifier: D5:83:8C:5D:0F:C2:74:64:98:FA:50:8A:9C:BD:89:E2:24:57:40:93
Authority key identifier: F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
Certificate issuer: /CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Certificate serial: 019873067ADC56974BB42008484E684DEC10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 03:01:01 +0000
Manifest this update: Mon 04 Aug 2025 03:01:01 +0000
Manifest next update: Tue 05 Aug 2025 03:01:01 +0000
Files and hashes: 1: 1-aNSD9nCmaKHTfXke2MCpCUqcms.crl (hash: DD+H9mnyiQk3R2x/VB8rTeZ//tzBOSt3HFNscnJNzC4=)
2: xXvr5N3cdjjVXwcVtqed053TqTM.roa (hash: RPXbgfGCQVhnjZtFi6ez4KE4+8jSRCf133mSXRnDHCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:7a:dc:56:97:4b:b4:20:08:48:4e:68:4d:ec:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Validity
Not Before: Aug 4 03:01:01 2025 GMT
Not After : Aug 5 03:01:01 2025 GMT
Subject: CN=d5838c5d0fc2746498fa508a9cbd89e224574093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0e:a5:20:f7:b0:52:bb:ef:04:68:47:eb:1f:
73:5c:83:40:a7:cd:31:53:86:5d:f8:23:69:0a:79:
58:7b:44:58:fe:90:69:93:d0:b0:68:f1:da:9b:b9:
9d:64:6f:13:a1:0b:02:42:a0:88:04:78:42:ba:8a:
db:28:c0:91:c2:30:30:34:c4:f3:6a:00:c2:71:a1:
3c:c9:b6:e7:14:3f:b7:60:3e:aa:c2:b3:8a:f5:ad:
6d:5b:ef:27:a3:cf:a2:e3:b5:da:20:76:b4:7b:f0:
a8:27:29:de:af:56:42:b0:06:07:8c:ae:2d:e2:49:
2c:68:37:4e:9a:0d:4d:eb:23:37:03:7c:1f:78:d0:
25:d0:01:f5:a2:a9:7f:a2:ea:f3:bf:e8:47:0b:dd:
6d:64:85:75:d8:a0:f6:8f:1b:93:19:a9:91:74:cf:
52:f8:4a:a6:e1:8c:0c:a2:e1:f6:22:57:2a:01:aa:
d8:69:9a:e8:31:dc:99:0c:b4:53:ef:aa:d1:4b:7f:
03:dc:23:86:95:e6:de:06:a7:13:de:f2:92:4a:94:
cf:2b:04:77:43:9b:9b:1c:82:1d:e3:a5:74:b2:ee:
7e:3a:0f:c5:7e:f6:77:c2:a7:dd:15:8d:17:07:33:
3c:eb:23:b1:f4:69:fd:e2:23:ab:38:5f:ed:6d:57:
85:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:83:8C:5D:0F:C2:74:64:98:FA:50:8A:9C:BD:89:E2:24:57:40:93
X509v3 Authority Key Identifier:
keyid:F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:db:60:d4:0c:99:36:80:9b:4f:4e:76:b1:ee:3b:83:6b:b8:
e8:84:9a:ba:7b:69:a4:b1:11:2d:66:d7:fb:17:fb:85:1c:81:
73:ab:19:12:1b:49:19:fc:67:61:0d:95:7c:c3:a4:6b:56:46:
0c:2d:68:5a:7d:07:b8:87:7f:74:30:7e:79:5a:b1:10:6a:dc:
fb:c1:09:f6:25:85:58:56:0a:a1:4f:fc:33:0e:35:0a:4f:23:
36:df:3e:f2:4d:65:c0:a7:5c:b2:b2:81:18:4b:14:b0:b4:df:
74:d9:7b:f9:65:da:cc:bf:20:ac:53:c0:c3:f2:18:32:44:39:
cb:e5:45:fb:d2:d9:fd:e4:34:0f:4e:27:c4:02:55:77:18:86:
52:59:74:83:78:11:55:68:0b:10:2a:59:76:7b:64:74:1e:c5:
b5:2b:a5:d7:2e:c8:86:3d:44:be:9e:1d:ca:76:5e:ee:ed:c8:
24:3e:1d:5c:72:a3:25:5a:cf:3e:c2:fc:4a:92:66:30:16:08:
3b:5a:7e:80:8f:5f:a0:02:5d:c7:73:f4:f5:e7:f4:e9:cc:d1:
2e:91:b0:b6:d0:60:92:01:78:7b:70:ce:d1:7b:a4:12:96:14:
3d:6d:a4:1d:44:19:c8:9d:b5:bd:93:aa:95:c3:53:16:06:3c:
f5:e0:42:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:59 2025 by rpki-client