Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
File: 1-IesflsonOaBskdMOPeVLMqcD7g.mft (raw, json)
Hash identifier: EHR10NK29efXRH+FEB/mmk9w1KrQAYnNIk0rv8K6DtI=
Subject key identifier: 24:4E:1F:22:76:63:D5:7D:D9:7E:D0:1B:58:F9:1B:9E:89:C7:59:B6
Authority key identifier: F8:87:AC:7E:5B:28:9C:E6:81:B2:47:4C:38:F7:95:2C:CA:9C:0F:B8
Certificate issuer: /CN=f887ac7e5b289ce681b2474c38f7952cca9c0fb8
Certificate serial: 019879AE0CCC96D204660E75E16AB096654D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
Manifest number: F5
Signing time: Tue 05 Aug 2025 10:01:46 +0000
Manifest this update: Tue 05 Aug 2025 10:01:46 +0000
Manifest next update: Wed 06 Aug 2025 10:01:46 +0000
Files and hashes: 1: 1-IesflsonOaBskdMOPeVLMqcD7g.crl (hash: vtsNKhaVaFwEtLrsJnHTJrqzlxKPaEtS8D78HpmYYOI=)
2: m3TD70Wk8LjMHagCf7nprKktZHM.roa (hash: +OB3m2U7o6BE+QfdP9KhiHkHyl0xJ3vodcbBJvAYpFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ae:0c:cc:96:d2:04:66:0e:75:e1:6a:b0:96:65:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f887ac7e5b289ce681b2474c38f7952cca9c0fb8
Validity
Not Before: Aug 5 10:01:46 2025 GMT
Not After : Aug 6 10:01:46 2025 GMT
Subject: CN=244e1f227663d57dd97ed01b58f91b9e89c759b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:56:ac:79:83:75:c7:be:5e:a1:fe:ae:39:99:
70:61:f7:2f:61:a0:1b:ba:b1:8b:79:ad:8a:3c:bf:
74:9f:16:ff:2d:e6:4a:9c:1c:05:75:84:33:7b:e4:
e0:49:23:d2:bb:7e:61:44:29:a1:49:cf:31:8e:c1:
ad:fb:66:4b:a4:00:19:d6:c0:b7:93:28:03:8b:16:
1d:b5:4e:49:bc:90:61:f4:27:2b:e7:5a:50:a8:cc:
01:81:2f:77:9c:16:5c:eb:e0:17:dc:c6:2b:84:a5:
21:99:b8:16:21:e8:46:77:75:fd:3a:78:4d:fe:0f:
d0:74:4a:89:8a:5b:33:a4:8e:30:5b:49:68:31:ab:
42:e4:21:32:a1:3d:74:1e:b1:fe:21:f5:7c:92:84:
89:28:12:36:a2:8d:6c:d1:43:30:55:ca:19:34:36:
1b:e9:a0:5c:da:91:f2:aa:fa:83:d6:12:c6:eb:55:
0d:4b:99:03:09:29:ec:0b:d6:94:2d:77:a7:bf:01:
c1:6b:2a:ef:e1:e3:fa:b6:b0:64:66:29:b8:2c:0b:
a8:95:b5:34:b0:c0:80:b9:1a:2b:a8:8d:b9:27:d6:
68:42:43:1d:6b:a7:eb:21:8b:4f:5d:d7:3f:4d:6f:
9b:4d:52:26:e4:ec:14:87:bd:e0:67:b9:bf:a5:d1:
bc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4E:1F:22:76:63:D5:7D:D9:7E:D0:1B:58:F9:1B:9E:89:C7:59:B6
X509v3 Authority Key Identifier:
keyid:F8:87:AC:7E:5B:28:9C:E6:81:B2:47:4C:38:F7:95:2C:CA:9C:0F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:79:b1:09:53:a9:12:42:e8:1d:91:46:2c:fd:69:09:92:d6:
28:5d:4a:44:02:76:32:6a:bf:21:ff:87:ba:53:3f:09:65:a9:
21:ed:a0:5d:bc:3b:8b:87:8e:19:53:a6:aa:27:fb:19:bc:1d:
25:69:5c:f8:2d:ab:c9:3d:79:b9:16:72:ef:f9:83:b9:77:0f:
d3:60:fe:bf:ed:eb:21:ed:40:58:09:2c:c1:23:36:cc:17:cc:
59:12:ba:f9:93:1d:55:47:8f:ae:a4:15:d0:ae:3d:94:58:f2:
9b:fc:af:c6:1a:86:b9:42:91:52:47:13:fb:29:ac:53:d4:7a:
d7:ec:5b:11:ac:77:86:52:37:f7:b2:7f:20:48:a8:fc:63:4f:
70:3d:15:db:4f:5d:11:06:16:08:8c:0d:c0:7e:4e:0f:7f:e3:
73:04:52:37:01:4b:97:a9:9e:4a:08:20:04:3f:31:dd:79:7a:
02:43:c5:5e:2d:e6:1b:a5:b9:0a:de:eb:7a:5a:64:d0:32:4d:
7c:6a:49:d6:57:84:09:71:ee:84:29:39:17:4c:41:d5:10:76:
5a:b7:93:b1:55:15:d2:1e:4d:65:25:db:a0:3e:d6:5e:e9:2d:
10:b4:2e:89:ac:1c:11:62:88:ce:58:f1:d8:38:94:d7:cf:fa:
04:59:f8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:10:41 2025 by rpki-client