Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
File: 1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft (raw, json)
Hash identifier: cbRe/4N4SYyRM6kmDEemaLWwGL4R0WLxw06PiJkiM8I=
Subject key identifier: DF:E2:01:8F:DB:B0:CC:39:45:B8:34:9F:42:33:A8:ED:7B:5D:E8:11
Authority key identifier: D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
Certificate issuer: /CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Certificate serial: 0198820BBB036E93C2F5A8B6D9CF9D812351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
Manifest number: 0CAE
Signing time: Thu 07 Aug 2025 01:01:03 +0000
Manifest this update: Thu 07 Aug 2025 01:01:03 +0000
Manifest next update: Fri 08 Aug 2025 01:01:03 +0000
Files and hashes: 1: 1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl (hash: cPxi7diT+RqwVWxcNHvBb7veo7OWtlzxa0d+RFwaSiQ=)
2: 3ZY4SnX1yy3L1vAgX9voAeMkVFA.roa (hash: tg2AmRn5Z2Y+ThyLPd/HKMkLP9Uc9wkQQiNjIF3J+mw=)
3: ugCHO46pUQzd5zqdNawWJEPystY.roa (hash: BahKiNdd/pZ/56ATzb3cvkxPGvUYcM+QZnAs5IV/tZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0b:bb:03:6e:93:c2:f5:a8:b6:d9:cf:9d:81:23:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Validity
Not Before: Aug 7 01:01:03 2025 GMT
Not After : Aug 8 01:01:03 2025 GMT
Subject: CN=dfe2018fdbb0cc3945b8349f4233a8ed7b5de811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a3:ba:d6:b1:c8:97:5c:27:d5:b7:cd:d7:ae:
30:86:b2:ef:a9:cd:c8:6e:8b:4f:7c:5d:f8:74:bb:
63:f5:be:ed:bc:0c:40:06:69:19:fd:2d:7e:7d:4b:
2c:5f:01:1d:52:c9:6d:57:c2:94:c5:5a:22:dc:83:
61:67:47:69:e5:71:28:de:12:ec:7b:b3:c5:e1:60:
be:0a:fc:4f:4e:70:1b:c4:9b:38:fb:b6:4d:70:2c:
14:d1:07:a3:b6:83:d2:d6:d7:51:74:d5:67:67:c6:
ab:fe:0d:50:4f:ff:bf:cc:91:58:18:bf:af:bc:78:
33:35:c3:03:7c:87:df:38:6a:48:4a:d2:d4:7b:43:
5b:f3:b7:ce:8b:1b:86:88:a5:a6:c3:cd:2b:94:ba:
15:a9:dc:70:5a:83:d4:d9:a0:dd:11:3d:4a:22:7e:
de:23:82:53:90:4b:4a:88:37:50:77:18:e3:40:da:
f5:20:5d:90:8b:02:7d:f8:24:9c:a1:3d:4e:a3:3c:
95:84:f9:a9:be:5c:30:64:21:7a:dc:bc:25:43:c2:
4e:82:ba:6f:e7:6f:27:22:05:d0:1d:9f:8f:24:1d:
db:38:ac:6d:c6:e9:80:a4:43:cf:6d:69:b8:d8:75:
11:2d:1c:7f:9c:dd:ec:6b:e5:1d:8b:a7:19:e6:fc:
8e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E2:01:8F:DB:B0:CC:39:45:B8:34:9F:42:33:A8:ED:7B:5D:E8:11
X509v3 Authority Key Identifier:
keyid:D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:29:39:36:8b:7c:d0:7d:5f:a0:aa:45:40:2d:0a:12:22:ac:
ce:f3:1f:56:b3:ca:dd:6f:63:5b:af:9d:d3:db:e3:d2:fd:b2:
99:96:12:9d:3f:8e:85:4f:85:8c:01:04:19:12:85:3b:a9:e8:
4a:7e:8e:d1:e6:14:79:6e:4f:78:67:7e:22:fb:88:79:8f:e5:
6e:68:5c:2a:bb:d6:72:c7:e6:a6:84:1d:f9:89:0f:fd:db:2c:
67:10:96:4b:0c:f4:f7:64:25:10:f6:58:52:c2:c6:4a:d1:a3:
9c:4e:37:79:04:1e:ed:4c:7b:33:c6:b9:9b:4d:b5:af:96:8b:
d5:9d:c0:1b:bc:70:a2:c4:e8:79:1f:f1:3a:68:71:58:22:bb:
30:39:dc:d5:d8:94:50:47:10:aa:e3:af:40:2e:ab:aa:03:d4:
f7:4c:06:1e:ae:6d:d8:4d:2f:26:20:3f:1a:b8:e1:a0:41:70:
6f:c4:97:77:b2:20:bb:84:61:4d:5f:21:8d:14:d5:69:2b:d0:
27:a9:a3:77:88:7a:5f:18:c4:3d:b5:ad:dc:cf:f9:0d:b9:d0:
d4:57:9e:da:09:32:a7:36:a1:b0:ac:53:90:9f:bf:8d:d2:c9:
a0:22:ca:8b:27:a6:23:b1:20:f2:eb:5a:fe:4d:43:91:06:1a:
8f:cb:5a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:40:21 2025 by rpki-client