Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
File: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft (raw, json)
Hash identifier: VMcyUiNcoMjDDhkKtRJeOuO4WlkyGyfahIgwMa0PIco=
Subject key identifier: 41:5E:4D:3B:C7:DA:8C:B5:3B:58:B7:15:98:33:54:9F:1C:29:46:0A
Authority key identifier: D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
Certificate issuer: /CN=d7880ed1021d0ecac71205673b004813b39dfc99
Certificate serial: 01988AA0F08653049843DE273B60699B3DF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
Manifest number: 1628
Signing time: Fri 08 Aug 2025 17:00:59 +0000
Manifest this update: Fri 08 Aug 2025 17:00:59 +0000
Manifest next update: Sat 09 Aug 2025 17:00:59 +0000
Files and hashes: 1: 1-lmapd5w9HD2F08R09w_tZRWCa0.roa (hash: wweZhb13in2MHBYbFFvgxz1Av+9tarTLaej3LMI0a4A=)
2: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl (hash: wqD+vuJPbJZzf/HOlyQ/a0uUMjH+SQjpEzL+wJmmTH8=)
3: kwtdCRFAZPjQFHCak21_zozRzyg.roa (hash: EWeYVWP/wMFz4uen+0vNjC0GMpRDuD50ya++g2lRAIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:a0:f0:86:53:04:98:43:de:27:3b:60:69:9b:3d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7880ed1021d0ecac71205673b004813b39dfc99
Validity
Not Before: Aug 8 17:00:59 2025 GMT
Not After : Aug 9 17:00:59 2025 GMT
Subject: CN=415e4d3bc7da8cb53b58b7159833549f1c29460a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7e:dc:06:4c:ac:7d:b5:c8:2a:78:d5:f2:f3:
58:2a:86:5e:83:1d:0a:00:ae:a1:df:54:74:7f:b9:
0c:a4:fa:ce:b2:bf:18:2c:87:09:5e:3c:81:ea:ad:
34:56:e5:6a:fe:11:5c:01:8c:f5:49:16:06:33:3b:
10:68:32:0b:d4:f4:a0:51:4c:f3:c2:cf:c6:61:09:
c8:9a:00:d1:29:13:40:e8:b4:2d:04:5a:da:5f:a3:
2b:48:db:37:be:e5:67:b7:0a:59:c4:1f:0a:d2:90:
8c:a6:4c:e4:6c:33:34:20:b7:23:0b:43:e5:ae:66:
fe:b0:18:9d:6a:f4:06:29:2b:66:a9:1e:12:e1:4c:
ed:24:9d:76:22:df:fb:d6:4f:bf:18:56:17:a0:00:
1c:46:16:8d:19:9f:ed:5d:0d:69:72:f2:24:c9:fb:
78:37:3a:01:79:99:96:05:c5:e9:8f:cd:a0:31:31:
e6:ba:f5:a0:b7:da:e9:cb:72:a5:66:49:40:2a:c8:
4b:00:00:2f:b5:a9:32:d8:fa:4f:ac:6f:2c:c8:4f:
7a:78:e5:15:c5:47:10:89:52:17:31:b1:92:c1:2e:
e0:56:e6:71:a2:25:55:75:08:e8:40:68:45:04:46:
81:56:81:56:56:2a:68:68:3b:05:67:fa:4a:fd:b1:
62:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5E:4D:3B:C7:DA:8C:B5:3B:58:B7:15:98:33:54:9F:1C:29:46:0A
X509v3 Authority Key Identifier:
keyid:D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ff:52:df:95:96:5f:fe:ab:d6:f3:2e:f4:a0:de:a0:74:82:
64:76:b1:4f:9c:a3:32:af:a8:01:e9:4e:7e:6f:1c:cd:4a:43:
17:73:55:14:70:86:73:c4:62:ec:0b:52:2b:eb:b8:e3:11:d9:
ac:5a:09:96:72:b0:2c:54:69:b6:e9:08:2b:c3:ad:8d:65:b6:
eb:f1:8f:91:90:b3:2e:89:5c:57:41:a5:f4:17:45:02:b1:b6:
0a:4a:72:f0:8f:05:71:ed:04:b3:b3:85:dc:4b:60:8f:d3:48:
b1:ee:ac:8a:b2:6a:9c:a0:2c:2a:14:a2:bf:b9:e2:ec:a2:a8:
71:0c:76:cc:77:02:35:5b:41:38:54:c5:76:b7:99:71:15:7f:
b0:c9:0f:b0:ce:f4:61:07:4b:87:b9:01:4f:8f:95:34:c3:33:
fd:f9:16:00:12:ba:b5:8b:02:f7:af:69:7f:5a:4d:ca:04:09:
6f:50:b1:71:c6:29:5f:56:9d:5e:4c:8c:a3:a4:10:f1:c3:7a:
38:df:65:af:33:07:16:8a:5d:e1:a4:91:33:35:9d:25:b3:af:
58:b0:6c:c1:81:89:91:eb:c3:1a:45:6b:e2:59:5b:ee:bc:25:
d4:64:5d:2f:db:31:42:32:7e:22:4f:60:d2:6b:a8:45:56:68:
ed:f5:c3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:34:54 2025 by rpki-client