Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
File: 1-U3y-PWhPGRTaJFOPb5Coko22l0.mft (raw, json)
Hash identifier: JvcGSzZMYZhm/KC6li2tENUQQCLW20kb5GU57c/bgqA=
Subject key identifier: 82:9E:CE:C1:65:23:56:35:06:A9:6E:28:77:FE:DA:3F:08:D7:F4:15
Authority key identifier: F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
Certificate issuer: /CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Certificate serial: 01987ED33BA9BD7F7F9D06C435867C743C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
Manifest number: 086B
Signing time: Wed 06 Aug 2025 10:00:29 +0000
Manifest this update: Wed 06 Aug 2025 10:00:29 +0000
Manifest next update: Thu 07 Aug 2025 10:00:29 +0000
Files and hashes: 1: 1-U3y-PWhPGRTaJFOPb5Coko22l0.crl (hash: xC18VVsyfBdchFM/mYvByH1D4cUtc0E3XvAXiBqypB4=)
2: 6ZlUqBOWy6SfY78F6eyD54lMPAY.roa (hash: SE9+hxx8Z232AXhES9ATqyXkhpq/sJNlQEl+ue1Fkso=)
3: bxOTocJnEMQaZpcfRu6SqZ9nVWk.roa (hash: 24LpjnsSFmDuGUExqtfPTVWojNEGWlT3a13WwNuUa60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:3b:a9:bd:7f:7f:9d:06:c4:35:86:7c:74:3c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Validity
Not Before: Aug 6 10:00:29 2025 GMT
Not After : Aug 7 10:00:29 2025 GMT
Subject: CN=829ecec16523563506a96e2877feda3f08d7f415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:43:ff:ea:a9:2c:4c:54:65:32:34:df:9b:de:
52:9a:63:37:a1:79:01:74:ce:2f:a0:f0:cc:db:51:
b5:1f:5a:c2:b2:b0:e3:1e:e0:6d:da:89:cf:e3:12:
3e:27:c5:25:e2:98:1a:e2:92:09:fd:1d:c8:59:49:
39:4a:76:68:c7:c7:15:51:a9:05:11:52:98:9a:c0:
e6:f1:d1:93:a5:7d:90:8b:4c:af:13:9c:eb:b2:f0:
91:77:f3:f4:44:39:8c:05:f6:e3:5c:65:2a:c1:0d:
9f:3a:85:ef:62:20:f4:04:ac:fd:33:81:ac:fc:8a:
06:8d:26:6f:41:89:7b:5d:b3:10:54:a5:af:70:a4:
8c:28:8e:ae:c3:ca:bd:da:c4:64:c3:e6:94:3a:b9:
02:41:4b:c5:a8:11:a3:36:a5:07:98:a0:52:45:f1:
b3:b3:a1:91:23:58:35:ec:91:80:e5:c8:0e:d3:24:
49:af:f9:1e:f2:e0:66:8c:79:c4:06:63:7c:ad:a3:
a1:9c:04:46:c0:61:6b:3a:23:83:04:7a:bf:7e:f4:
10:14:e3:9a:55:92:f3:5a:4e:06:0b:27:ea:73:67:
18:a3:4f:3e:61:28:5d:78:b1:da:11:da:a0:8e:18:
48:41:b6:68:45:66:98:ec:b3:ff:d3:86:4e:2e:88:
40:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9E:CE:C1:65:23:56:35:06:A9:6E:28:77:FE:DA:3F:08:D7:F4:15
X509v3 Authority Key Identifier:
keyid:F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ba:cc:84:f6:bf:2b:3a:cf:5d:97:c9:31:80:e1:6a:5f:54:
31:fd:91:1e:e4:fc:93:f1:6e:a9:b0:7f:70:5f:6e:d0:bd:6c:
c4:59:a1:15:69:1c:70:ee:89:5d:9f:5d:07:bc:d0:16:52:9a:
e4:c5:98:60:db:16:d4:81:31:be:84:5b:19:b8:fe:9c:9d:62:
72:91:cf:e3:61:49:44:06:6e:ad:4e:1f:ef:16:d5:dc:b2:e3:
44:58:e8:83:2b:49:cc:62:2f:d9:35:dc:64:f1:a8:e0:14:ce:
21:f8:d9:bd:84:79:a8:b8:71:00:3c:2c:64:c7:00:29:04:ec:
2f:2f:0a:9a:08:ca:80:ac:a8:db:93:82:f7:8f:e1:0e:52:e8:
96:0d:1e:90:b3:8d:36:7a:fc:ec:3f:8c:bd:8f:c1:1e:37:ba:
ed:4a:df:b0:47:46:7d:ba:ab:af:05:d6:a0:c6:f4:7d:20:fd:
81:e9:27:a5:bd:e0:41:ad:19:fe:4d:8e:e0:b0:72:1c:ce:18:
e5:32:bb:26:f0:70:06:71:73:94:1f:c3:dd:c2:80:7d:d6:74:
03:85:a7:35:db:f1:2d:21:d8:98:17:5a:ce:b7:fa:17:68:61:
28:35:41:c9:52:59:93:c9:1b:2c:ca:b2:7c:6f:03:f8:e4:79:
43:6c:95:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:11:17 2025 by rpki-client