Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
File: 1sJp-ek7D7i8SxyUerxbIfIfIwU.mft (raw, json)
Hash identifier: ykQ2/pgFI8TLEKKLZN5ljIockxsBaTW6/L50oxMSLC4=
Subject key identifier: E6:3E:79:21:82:B3:65:44:84:D1:10:6F:F0:2F:CE:81:FA:76:C4:72
Authority key identifier: D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
Certificate issuer: /CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Certificate serial: 019880C1EC91ECC8A406F7B3074099904ED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
Manifest number: 055D
Signing time: Wed 06 Aug 2025 19:00:49 +0000
Manifest this update: Wed 06 Aug 2025 19:00:49 +0000
Manifest next update: Thu 07 Aug 2025 19:00:49 +0000
Files and hashes: 1: 1-4EUUJ60y6tCuL7fMYLuUTMussI.roa (hash: ZCZ3I6CzJy+9WHfI/N/oUofNXCUICsdPSdQOOtiTJMs=)
2: 1sJp-ek7D7i8SxyUerxbIfIfIwU.crl (hash: pnPCF+WCld2uKSkzSvvdxI5FsK5XHxSmdD049Adt/hA=)
3: AJ8BcEY-DdXcTmxMdYHCmI3RxoU.roa (hash: 3dzyfVQpkuELs7hezXS9c0EUIsSeRiw+pnrqw/PWP6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c1:ec:91:ec:c8:a4:06:f7:b3:07:40:99:90:4e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Validity
Not Before: Aug 6 19:00:49 2025 GMT
Not After : Aug 7 19:00:49 2025 GMT
Subject: CN=e63e792182b3654484d1106ff02fce81fa76c472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:17:e0:6b:a9:e6:76:5f:dc:4d:c2:28:b1:06:
40:6e:32:4b:6b:df:40:c3:48:2b:8d:99:51:02:5c:
bf:ab:da:1e:8f:f7:3f:55:e4:10:1d:e9:4e:08:c5:
13:2c:15:6c:50:8a:75:f8:04:c1:b3:5b:7e:53:a0:
92:2f:69:f3:75:27:d5:9e:b4:c9:06:ec:b5:ab:cb:
35:7f:05:2d:75:38:32:f1:a5:25:ce:5c:62:d7:95:
72:53:90:4c:cc:da:23:38:05:80:36:a8:f0:ab:6a:
82:86:ef:17:e0:19:c7:bc:55:f2:f3:bc:5f:31:43:
7d:6c:de:38:cb:24:00:9a:29:3b:4e:dd:fe:eb:c6:
f5:65:7a:3a:a5:89:ad:1f:cf:2d:a9:e3:07:fa:de:
b8:56:35:6a:26:30:4d:bd:24:66:2b:4f:bf:5a:2e:
10:96:04:f3:9d:82:a6:c2:ac:ff:8b:b2:84:fc:2f:
5d:95:8a:9f:83:70:0b:be:5d:70:6f:94:9f:78:a5:
8a:9f:47:e6:e6:a8:4f:3c:98:e7:67:15:41:d7:2e:
ac:7b:f5:1c:c1:30:1f:77:10:ac:f6:a7:ba:c0:3e:
ea:8e:2b:41:b9:64:d4:43:c1:cd:ff:fa:01:8f:d8:
63:94:b9:eb:15:21:91:d2:f5:04:48:ae:39:17:81:
5e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3E:79:21:82:B3:65:44:84:D1:10:6F:F0:2F:CE:81:FA:76:C4:72
X509v3 Authority Key Identifier:
keyid:D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e0:c6:ec:13:6d:5e:e4:8d:85:82:78:c6:f2:8c:74:e6:ef:
d4:88:ee:27:c5:6d:8c:8c:0d:99:4a:a9:ca:c4:0a:24:47:3c:
a9:5a:31:c7:a8:fe:19:93:b1:2b:28:61:ac:1d:53:8e:6b:0d:
19:ee:b7:5f:7a:bb:0a:16:19:9c:88:34:c8:cf:71:fa:62:13:
c8:ca:92:02:7b:1f:6f:02:3d:be:d8:ce:90:e8:9f:7a:c3:6d:
64:da:2c:98:ed:48:47:ff:3e:1b:7a:41:ce:36:32:06:c1:c9:
7e:24:3e:18:bf:d7:fa:c5:4e:49:29:8e:f1:38:bf:91:66:2c:
4f:9f:d5:14:b2:ec:c4:ee:04:ad:45:02:30:70:ad:c5:9d:f8:
27:4d:e0:94:27:56:0b:b3:c1:c1:3a:b7:26:6a:59:6a:4e:e5:
43:d8:3a:de:4d:4c:cb:f1:30:d5:18:b3:30:9f:18:6d:80:0d:
fb:4a:04:44:67:6e:e0:a2:91:fb:92:e2:28:a1:c1:9a:9f:bd:
9f:08:f6:36:22:0b:39:4c:71:bd:5d:c0:00:9d:d0:2f:5f:f0:
4e:f0:86:28:2d:4e:74:7e:4e:ed:25:d5:73:60:9f:2c:fc:c2:
c7:d1:85:72:8f:fc:d6:3d:c6:4b:37:0c:2b:4e:2c:a6:b5:c4:
e4:0e:56:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:41:47 2025 by rpki-client