Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
File: 1-U8vLiG8mNDGGywUwO4BnTMerlg.mft (raw, json)
Hash identifier: x7Uk40nSiMB4hwyF7Qf3oElnv5jmG8f9Sy/6YWdlqvA=
Subject key identifier: 5F:4B:29:80:41:DB:78:01:23:DF:A5:C1:D9:F5:E9:F0:A2:53:24:2B
Authority key identifier: F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58
Certificate issuer: /CN=f94f2f2e21bc98d0c61b2c14c0ee019d331eae58
Certificate serial: 019891B5B61197DF0BA5A9A86D53F8F81988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 02:01:01 +0000
Manifest this update: Sun 10 Aug 2025 02:01:01 +0000
Manifest next update: Mon 11 Aug 2025 02:01:01 +0000
Files and hashes: 1: 1-U8vLiG8mNDGGywUwO4BnTMerlg.crl (hash: OtJTAI47QfVZ6vNhE3pgp3Tqu51LoLlpYq0YOFao0AQ=)
2: 5MOhgExuZKrwcKUMPmkmqSgYYV8.roa (hash: BeNjV3R3WIa+A/yjnQFp45yGVELTOEe4wkt7MNfzXzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:b5:b6:11:97:df:0b:a5:a9:a8:6d:53:f8:f8:19:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94f2f2e21bc98d0c61b2c14c0ee019d331eae58
Validity
Not Before: Aug 10 02:01:01 2025 GMT
Not After : Aug 11 02:01:01 2025 GMT
Subject: CN=5f4b298041db780123dfa5c1d9f5e9f0a253242b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:37:09:3b:94:3c:cd:1d:85:ef:83:5b:f4:07:
66:8d:f4:cf:af:e9:14:1f:cc:22:a0:32:ae:fc:d0:
52:c1:3d:b3:2f:c4:16:32:46:de:99:6f:9c:82:20:
36:c3:a2:17:c3:d7:3c:c7:54:b4:df:3b:b2:ec:ca:
64:c6:9a:f3:80:d4:80:ef:1f:f4:31:39:8c:71:08:
f9:5a:81:9a:84:ae:3d:5c:1f:e1:f4:69:7a:38:d2:
39:f2:9e:ec:bb:76:ac:7f:68:a4:1f:88:af:3a:0d:
a3:12:1c:7d:aa:6b:21:1e:43:40:ec:98:cd:84:8a:
b1:e9:6e:75:74:1d:09:23:d5:31:c3:19:ee:11:58:
18:23:02:39:6d:7e:bb:c7:34:ab:33:f0:79:f1:b4:
c1:14:76:d0:66:c9:0a:51:a2:da:e6:07:f4:10:09:
87:99:6f:6a:e7:5c:d5:81:27:de:99:d6:c3:23:56:
df:8d:89:c1:86:94:24:0f:75:06:e7:0f:19:b2:d2:
81:00:00:69:8b:45:a3:9d:74:28:25:55:69:f3:64:
bf:17:27:b3:6e:f5:05:ad:af:3d:0f:fa:b3:80:6d:
a8:b2:5e:5b:5f:f7:7c:46:43:3a:14:62:b5:fc:c0:
a4:90:9e:e6:37:3c:a8:6b:2f:d5:8e:5d:94:ff:a5:
8f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4B:29:80:41:DB:78:01:23:DF:A5:C1:D9:F5:E9:F0:A2:53:24:2B
X509v3 Authority Key Identifier:
keyid:F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:42:eb:5d:5f:39:eb:80:68:3d:db:9d:1b:46:97:73:3b:7f:
a6:43:79:e7:1f:69:e6:a9:2b:f5:bc:4d:84:38:88:d6:0c:14:
28:ad:a4:62:41:b1:54:ed:e8:15:2a:d4:ca:14:b5:45:4c:95:
b2:2e:e1:24:d3:e6:7a:99:c0:18:9c:82:21:bf:40:17:95:d3:
cf:72:f2:f1:54:26:c7:f0:f9:ba:e3:76:a2:ae:6f:65:aa:d8:
5a:74:4b:17:b1:ff:fe:e7:1e:0c:19:d9:95:bd:d5:55:0a:5a:
79:74:c0:cd:f7:3b:3c:90:3f:53:cd:0b:61:34:8a:bf:bb:7a:
7b:0e:5e:30:83:8f:3f:40:5c:3b:2d:61:4d:a9:6c:c5:02:94:
f7:25:a8:53:33:ad:84:d4:47:a5:fc:40:2e:8c:a5:3e:79:00:
09:f8:dc:ce:88:55:0c:ea:d0:3c:92:4c:85:40:13:d4:0d:5f:
cb:0e:cc:e5:c0:3a:4e:c0:37:16:8d:c2:00:62:e8:e0:84:bd:
bb:05:63:ff:7e:20:f9:bb:d4:6f:8c:87:f2:f7:17:5e:22:fc:
3d:99:24:06:3e:24:54:b1:cf:c9:9a:11:2e:b2:06:fc:c5:7c:
72:f0:d8:0b:0e:5c:50:2d:43:5a:f5:17:f0:77:61:08:01:fe:
2e:66:3d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:33:44 2025 by rpki-client