Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
File: 1ITgzuV1xhkFP47isQBMxEL9LO0.mft (raw, json)
Hash identifier: 5ZBYe1YbA7ZAfEQuPZP5httfB+dpCHiihSNUPrpwXSk=
Subject key identifier: 59:CA:92:11:AB:37:4D:BA:52:0C:74:3C:03:29:6F:65:96:9B:CF:46
Authority key identifier: D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED
Certificate issuer: /CN=d484e0cee575c619053f8ee2b1004cc442fd2ced
Certificate serial: 01987D8B73A3654D32072B3D5ED1B648A587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
Manifest number: 1445
Signing time: Wed 06 Aug 2025 04:02:27 +0000
Manifest this update: Wed 06 Aug 2025 04:02:27 +0000
Manifest next update: Thu 07 Aug 2025 04:02:27 +0000
Files and hashes: 1: 1ITgzuV1xhkFP47isQBMxEL9LO0.crl (hash: JyC3egrmGCCIjBmN0XDodj3SgxxROqstGuBnFCbsk3M=)
2: LlAa--5nsX3tUHGAFZ_HSMFrn7I.roa (hash: 3b1C9Ph3SGavY+PSGpBTlLw28V2WqXhlaeYP73oghL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:73:a3:65:4d:32:07:2b:3d:5e:d1:b6:48:a5:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d484e0cee575c619053f8ee2b1004cc442fd2ced
Validity
Not Before: Aug 6 04:02:27 2025 GMT
Not After : Aug 7 04:02:27 2025 GMT
Subject: CN=59ca9211ab374dba520c743c03296f65969bcf46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5d:86:49:ff:54:ec:27:eb:ad:f3:ef:e4:86:
75:49:3f:bf:c3:44:9e:ca:fb:2e:3a:ad:45:fc:f7:
f4:d1:cf:45:1d:70:1f:ee:be:a1:a5:ba:86:80:ef:
66:8b:62:9c:5a:d2:f4:9b:37:04:cd:15:bc:c6:1d:
e1:02:32:f7:9e:7a:70:12:0a:c6:9b:8b:bd:a0:1f:
ec:e0:32:19:0f:ed:9c:c8:b7:81:d0:28:9d:44:74:
e5:71:30:22:a5:b6:14:ef:9b:d0:2e:bd:c7:c5:5e:
57:f0:30:f1:ab:fa:db:09:7a:ff:ee:17:94:d3:9e:
6e:f9:f3:9f:8f:f9:c0:fe:4b:f2:15:cc:36:23:9a:
60:94:13:59:48:72:fa:20:ce:d3:6c:ba:a3:72:2e:
cb:6f:44:7d:1b:ea:fe:18:d9:6a:17:91:9a:ac:e0:
9c:1f:0f:37:ec:98:a3:63:ef:94:1e:3e:00:ed:f8:
16:e1:ac:c2:ed:87:b2:d9:ac:b0:b9:a7:66:7f:4e:
5e:f6:11:39:3d:75:d1:87:c5:1f:75:7f:c4:d3:3e:
5d:12:79:7e:a6:dd:a2:03:62:a0:8a:2d:01:a2:ec:
a9:4e:f2:b6:71:4c:1e:f5:c5:36:19:54:ba:97:fc:
ff:b2:c9:47:67:46:b6:2c:d7:5f:4b:a6:8c:dd:d9:
af:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CA:92:11:AB:37:4D:BA:52:0C:74:3C:03:29:6F:65:96:9B:CF:46
X509v3 Authority Key Identifier:
keyid:D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:9b:08:f1:a9:a4:64:b5:30:39:03:38:07:70:1f:a0:44:46:
68:b4:f6:5f:ab:06:2b:f4:9d:2b:2c:2b:59:cf:89:6d:89:28:
c8:db:5f:63:fc:7d:fa:58:b4:dd:fb:a2:77:40:41:e9:46:45:
bf:01:82:78:17:d9:57:97:c5:c7:92:46:ff:c2:55:c3:c8:9c:
c9:52:78:35:36:30:f6:b2:d5:c1:31:ae:fd:1c:f4:96:04:54:
23:6b:6d:36:5a:8a:53:1d:72:24:95:01:50:f6:06:97:33:cd:
21:46:84:04:7f:94:ad:16:b9:8c:3e:04:b3:4f:bd:a1:ea:39:
8c:b9:fa:bf:a7:c1:30:3e:a8:56:85:23:86:89:55:d7:78:ae:
f1:6c:5c:c7:37:65:d8:98:b7:33:93:3d:aa:7f:a4:85:d3:0d:
cd:48:3e:28:13:6c:c2:82:69:21:cd:18:9e:2b:bc:80:92:c4:
e3:a0:38:84:b6:c7:53:3e:71:18:2f:8d:11:eb:ad:b4:f6:c0:
90:ed:0e:c8:2f:c1:cd:41:b9:d8:4d:3a:f8:61:76:cf:82:f4:
3c:26:f6:20:66:3e:ac:da:bc:3e:cb:3d:3c:5d:f6:30:fc:5f:
b7:c4:bb:4d:fb:3f:d8:c3:32:75:ea:b1:1f:f8:c5:79:9b:45:
d2:ea:44:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:36:10 2025 by rpki-client