Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
File: 1vrDln6phZIn2fe-dE4qbqSG4Rc.mft (raw, json)
Hash identifier: Bzd6WReCuVyK71RqLnWcFqBLMm8/hkqVrAfA+ufTA/A=
Subject key identifier: BD:83:13:FC:77:36:7D:9A:64:B6:62:C0:5F:50:81:12:D0:37:60:E2
Authority key identifier: D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17
Certificate issuer: /CN=d6fac3967ea9859227d9f7be744e2a6ea486e117
Certificate serial: 01987C77BB0AF1F577E706978871B9C2E6B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
Manifest number: 1553
Signing time: Tue 05 Aug 2025 23:01:18 +0000
Manifest this update: Tue 05 Aug 2025 23:01:18 +0000
Manifest next update: Wed 06 Aug 2025 23:01:18 +0000
Files and hashes: 1: 1vrDln6phZIn2fe-dE4qbqSG4Rc.crl (hash: g+G9R30rPHg7kZ2etjdkFsG+sh/KbplrHo2yBMWUHRo=)
2: DiY5VK-6JORpLYohOA3eEOX0gEg.roa (hash: tPQ07ahlxA30mMATuVo2hJ+wEmf9vgItJrH9Fyn7bOk=)
3: qaZi9O_cl0MumDzO9hU8yRiyop0.roa (hash: KJX3Yemun4G/B+fGxAEnLDKmtV4r8cWB99Xh182dcB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:bb:0a:f1:f5:77:e7:06:97:88:71:b9:c2:e6:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fac3967ea9859227d9f7be744e2a6ea486e117
Validity
Not Before: Aug 5 23:01:18 2025 GMT
Not After : Aug 6 23:01:18 2025 GMT
Subject: CN=bd8313fc77367d9a64b662c05f508112d03760e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:39:ec:de:5b:32:d6:95:08:1a:b9:9e:aa:38:
7d:31:5e:15:c9:ad:7d:eb:1e:4a:dc:ab:67:37:07:
dd:a6:38:de:c3:f5:c8:ca:bb:25:2f:11:f3:b4:48:
1d:31:0f:bc:59:fd:62:9d:59:9a:1c:e7:ae:d6:e4:
57:15:52:eb:3c:a0:ff:27:f8:91:50:79:80:ea:66:
10:3c:c1:d8:3a:a1:85:df:8a:38:95:80:f8:8c:eb:
a0:7b:4c:63:49:64:c4:40:85:d3:5a:b3:d9:96:b7:
e2:e5:c6:52:90:9b:0e:b7:49:8d:64:5f:c3:22:0d:
38:84:86:fb:99:82:c6:1f:2d:6f:99:9e:ba:a8:cb:
a7:bf:f0:f0:80:76:b3:0b:78:5e:0d:32:03:20:13:
c1:0d:cf:d9:ae:d1:42:d7:47:2d:14:1b:8b:bb:d7:
10:77:b0:38:ae:81:85:31:16:33:e2:3d:96:56:64:
bc:de:f7:05:2a:e4:40:e7:eb:90:f9:05:48:55:dc:
6b:d4:f3:0d:33:09:e1:25:40:a4:19:78:41:34:9c:
0d:74:52:55:41:c1:76:be:32:e3:73:86:8d:ef:ac:
cc:18:96:2c:02:56:98:f8:fd:bc:cc:ce:cc:ea:86:
fe:ec:07:0f:d4:49:04:87:ba:29:55:9e:a0:05:cb:
cb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:83:13:FC:77:36:7D:9A:64:B6:62:C0:5F:50:81:12:D0:37:60:E2
X509v3 Authority Key Identifier:
keyid:D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:b1:69:0d:09:b0:a2:a8:6a:a6:e2:16:5f:d4:90:64:08:5f:
62:df:6a:45:41:5c:24:f0:49:15:88:04:4d:cd:d4:21:6c:53:
2b:e2:33:72:dc:8e:44:32:38:fe:e0:c3:20:1f:5e:c2:0c:51:
36:4f:dc:93:1c:6a:33:92:cb:ee:f8:a9:31:77:05:d9:26:f2:
1e:cf:57:d3:76:55:27:5d:48:d1:78:80:2b:f6:49:6f:91:63:
96:d5:4c:de:57:ce:46:9c:9d:f3:af:1e:4c:cd:b8:d8:2f:db:
de:37:90:83:22:85:1f:55:3a:a7:ec:bd:da:79:17:5c:04:51:
e9:8b:e3:dd:44:85:1e:6b:43:a9:6c:54:00:e2:ee:84:9b:08:
75:f4:50:f7:d7:89:fe:38:23:4f:ff:48:33:4d:33:b4:41:00:
f8:a1:bb:05:b3:8c:0c:c1:34:f7:91:76:33:09:f5:69:88:52:
10:41:60:93:08:d8:88:29:6b:af:5c:b8:73:75:f4:2d:8f:36:
c8:b3:21:db:9a:1e:d9:fd:03:07:74:15:40:f8:6b:30:3e:01:
df:8f:11:c9:17:1b:f9:35:55:25:d6:a8:84:20:f0:48:c2:df:
70:3b:11:3e:5f:2c:68:df:0d:78:6c:4b:a0:a0:80:48:1a:ad:
bd:a7:19:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:22:57 2025 by rpki-client