Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
File: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft (raw, json)
Hash identifier: tJFTiACl2VAmdnv2u6BX3At6L8HBCHz2v0O5+Kck7D0=
Subject key identifier: 83:F2:C4:EB:CF:58:E6:60:2D:09:42:ED:9E:A5:2A:C2:A3:70:76:AF
Authority key identifier: F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
Certificate issuer: /CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Certificate serial: 0198733D98E9A08B84C6DDACFC2845331277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
Manifest number: 15E7
Signing time: Mon 04 Aug 2025 04:01:13 +0000
Manifest this update: Mon 04 Aug 2025 04:01:13 +0000
Manifest next update: Tue 05 Aug 2025 04:01:13 +0000
Files and hashes: 1: 1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl (hash: dgrXH5q04ti3CexboOFmRikcYRH+KqmQHmRdElaIoLM=)
2: U9Nd4lA1nfYgFbzG2ZpmfKjrQ9c.roa (hash: lVZokALnBnr4+UddkLMCY202V6rmOp2F9LXdZYcTxX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:98:e9:a0:8b:84:c6:dd:ac:fc:28:45:33:12:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fc3590bf49afb42ce44a8c174c44161b8fc209
Validity
Not Before: Aug 4 04:01:13 2025 GMT
Not After : Aug 5 04:01:13 2025 GMT
Subject: CN=83f2c4ebcf58e6602d0942ed9ea52ac2a37076af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:37:5f:23:f9:81:bb:14:bb:ef:bb:73:48:32:
92:4c:60:a5:42:0b:db:76:ed:44:aa:43:ad:66:9b:
c3:bb:fe:ff:96:ee:c0:7f:e1:45:6d:ea:51:db:90:
69:10:65:50:1f:86:9b:6d:79:78:1b:4c:54:21:44:
3c:46:42:97:a9:5a:e5:b0:ae:e7:8b:94:74:82:29:
f5:ec:19:75:8c:d5:df:9f:f9:3d:80:54:b9:db:63:
10:2f:51:4c:e7:e3:e2:5f:1d:e2:1f:8e:d2:7f:5a:
d3:26:63:a5:81:5d:2a:07:cb:33:a9:b9:ce:4b:ed:
a9:f1:5f:ec:f5:70:e7:d3:b5:c7:a3:f5:5f:29:cb:
a9:52:a0:f0:44:dd:a6:d5:e1:b8:64:e9:42:7b:ed:
4c:c8:bf:7d:9e:b1:81:e4:c3:fa:87:63:16:fe:68:
17:51:d6:1b:77:fe:40:c0:7a:2a:9f:2b:e4:31:02:
77:30:fd:1e:78:ce:35:e9:f4:4b:a2:e3:8b:06:ab:
57:f4:18:9e:9e:e7:dd:c7:5e:eb:ff:01:96:32:70:
fe:50:56:9b:02:ef:f7:58:e0:7f:4e:f4:2f:85:64:
25:b8:36:9f:46:b0:e8:47:23:e8:9e:d8:9a:dc:0d:
6a:6b:6c:37:9e:ae:01:f8:ad:89:23:81:f4:66:43:
77:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F2:C4:EB:CF:58:E6:60:2D:09:42:ED:9E:A5:2A:C2:A3:70:76:AF
X509v3 Authority Key Identifier:
keyid:F8:FC:35:90:BF:49:AF:B4:2C:E4:4A:8C:17:4C:44:16:1B:8F:C2:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1e6f2-dd5a-4483-8fdb-fee26a1c43d9/1/1-Pw1kL9Jr7Qs5EqMF0xEFhuPwgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:05:1c:bc:6b:b3:17:60:c3:58:50:4f:31:2d:5b:1b:7b:db:
58:37:fa:4a:4c:af:bc:e9:a4:84:50:2a:ed:33:31:96:9e:dd:
f0:dc:78:19:1a:6b:8b:61:92:8c:eb:fe:54:22:f3:b6:28:15:
30:41:c9:a8:24:23:3f:71:7f:7b:39:e0:fe:c6:f8:42:1e:d8:
fe:d5:f8:bd:d1:e0:be:95:da:88:0d:71:13:04:7e:e9:69:62:
15:06:70:b9:97:6b:1a:e7:e0:cb:3b:1b:86:6c:20:4e:a3:e1:
0d:51:a0:0c:c9:90:0d:c3:f6:e9:b0:dd:3f:2f:90:80:73:1c:
9c:c7:8e:80:ad:d2:3a:52:2e:c5:a2:7b:51:07:e0:fc:71:fe:
e1:b1:a9:60:bc:d3:21:95:c2:30:79:cc:ee:31:6c:f0:1f:02:
2c:5f:bd:74:bb:c3:ec:77:c6:33:f8:dc:17:cb:fe:d3:08:c8:
b8:be:99:e1:de:d4:0b:72:46:ab:e2:0d:a6:20:76:b3:96:ac:
59:8b:10:b6:68:e7:c6:29:25:0a:ac:49:b3:22:25:cb:05:97:
56:45:f2:3a:72:d1:9b:db:fe:42:6d:42:68:02:83:81:25:d6:
09:34:57:9e:dd:be:6e:aa:3e:25:94:be:5e:eb:b0:5c:be:8d:
a3:dd:2b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:02 2025 by rpki-client