
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
File: D1T54Kep6u6svFsQMQI1t_0O7QM.mft (raw, json)
Hash identifier: RI5Vrlhd5Sv3uVWyz0k7qaqEog4bXVKifgrQQcqna+E=
Subject key identifier: 46:71:23:FC:32:D5:52:89:3D:91:7F:74:40:BF:E8:63:75:6F:02:28
Authority key identifier: 0F:54:F9:E0:A7:A9:EA:EE:AC:BC:5B:10:31:02:35:B7:FD:0E:ED:03
Certificate issuer: /CN=0f54f9e0a7a9eaeeacbc5b10310235b7fd0eed03
Certificate serial: 01988E7D4AE851674BA387C2B2FBB8EF4DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
Manifest number: 1221
Signing time: Sat 09 Aug 2025 11:00:32 +0000
Manifest this update: Sat 09 Aug 2025 11:00:32 +0000
Manifest next update: Sun 10 Aug 2025 11:00:32 +0000
Files and hashes: 1: D1T54Kep6u6svFsQMQI1t_0O7QM.crl (hash: HUYxpwAiI/nWiF4NRthMi2HDgfdvfXgSV5CxsTam+Cs=)
2: n_c4PLsmjJy0yCliC8En4sc8wCw.roa (hash: cMBCvEWECFAcwZYZaTXi+y0wWCPFximX6N1nRpp3vNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:7d:4a:e8:51:67:4b:a3:87:c2:b2:fb:b8:ef:4d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f54f9e0a7a9eaeeacbc5b10310235b7fd0eed03
Validity
Not Before: Aug 9 11:00:32 2025 GMT
Not After : Aug 10 11:00:32 2025 GMT
Subject: CN=467123fc32d552893d917f7440bfe863756f0228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:41:55:44:16:17:24:d2:57:79:e7:f5:60:ef:
16:60:15:03:b1:3e:c4:57:13:76:2a:15:5c:91:ef:
fd:9d:a4:d2:31:d7:a0:e1:84:45:8a:5f:83:bf:60:
27:51:9d:63:86:64:d6:aa:bc:21:29:ef:a3:64:62:
bd:1b:05:14:d0:d2:13:90:ad:cd:b8:da:9c:81:57:
df:85:99:dc:01:38:12:e4:56:03:7e:28:75:a9:b8:
c4:a2:09:b9:40:f8:59:78:37:c7:55:8d:82:97:29:
4e:3e:a4:d0:2f:c3:96:47:28:49:72:c1:dd:ec:50:
3b:5f:2a:12:64:64:bb:03:ea:5a:a0:ea:a4:ab:c4:
52:97:de:96:3c:63:f5:03:d6:51:bc:26:a4:3b:3a:
82:c0:0a:ba:7d:97:b7:ee:e0:67:04:e1:e4:87:a6:
18:3f:70:ae:35:21:13:04:fc:11:79:29:c1:c6:28:
d8:37:3a:37:5b:63:b0:1a:f2:cb:0d:03:47:10:0c:
3f:a4:c7:c5:e1:98:3e:36:72:c8:84:12:38:31:1d:
d6:22:47:b8:4d:28:16:f3:93:f1:30:db:54:ee:28:
8c:5e:4b:a8:cd:15:c4:b5:8e:fe:39:88:59:20:3e:
a8:3c:ec:48:3d:46:4c:21:c5:72:f5:4b:f3:63:9d:
f4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:71:23:FC:32:D5:52:89:3D:91:7F:74:40:BF:E8:63:75:6F:02:28
X509v3 Authority Key Identifier:
keyid:0F:54:F9:E0:A7:A9:EA:EE:AC:BC:5B:10:31:02:35:B7:FD:0E:ED:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d7:da:e8:8f:08:48:b4:ee:2b:7c:ea:7a:7f:62:36:9e:4a:
4b:9f:03:ad:f4:8e:30:c9:45:b6:a4:39:62:3a:d7:ba:06:cc:
7e:c1:d7:2a:97:da:20:c7:be:54:8d:43:e0:37:26:bf:c7:32:
9a:bb:31:15:cd:6b:e4:c7:c1:e6:81:ca:1b:fb:2b:0f:ea:75:
cb:3a:0b:b3:93:29:5c:b1:60:74:00:7d:2a:6d:c0:ec:1d:10:
1c:4c:29:46:52:0b:2a:05:b0:db:57:51:36:30:e6:3e:17:9b:
f8:d5:4b:5e:8c:f0:2a:56:1f:15:48:48:a9:2f:05:7a:e5:8a:
35:40:17:01:ec:fa:b7:c6:d4:80:13:d0:e8:46:1a:4a:bf:ea:
31:b8:93:0b:77:54:8b:4c:3e:ff:3b:59:b7:9e:a9:dc:10:c7:
88:10:c2:ff:12:fd:2d:65:91:03:4c:79:21:2c:15:b3:8a:3c:
de:da:6c:26:7f:e3:dc:33:7a:9c:63:57:d9:af:0d:6b:6b:7c:
cf:dd:59:fc:c8:3d:68:73:b7:c0:69:d0:75:d9:f7:73:09:8b:
7e:6c:0f:8d:e8:15:18:4d:6b:16:5e:27:48:9e:fb:43:0d:7d:
53:b8:8e:09:06:b1:81:bc:05:67:bc:49:e5:47:b8:a8:ae:80:
b8:2f:bd:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:18:28 2025 by rpki-client