Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
File: 1fJk44BaPRBFNzV6FP-SasApWZw.mft (raw, json)
Hash identifier: xt6AX+s3DF1ifSONqVNl4iqjTsd+5XlEvUy3Yn+zYhk=
Subject key identifier: 2B:2B:30:8B:FB:5A:CD:8B:84:9D:37:F4:0E:FC:9D:47:A7:12:51:A4
Authority key identifier: D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
Certificate issuer: /CN=d5f264e3805a3d104537357a14ff926ac029599c
Certificate serial: 01987DC0DCD34FE532ABC7A2C3AE6F7F3FF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
Manifest number: 05FD
Signing time: Wed 06 Aug 2025 05:00:47 +0000
Manifest this update: Wed 06 Aug 2025 05:00:47 +0000
Manifest next update: Thu 07 Aug 2025 05:00:47 +0000
Files and hashes: 1: 1fJk44BaPRBFNzV6FP-SasApWZw.crl (hash: MLdV36JJKgmjxHzWg7OohqS2331vFfEPIKmtyG2S9hU=)
2: nK4fLsZ-CNNohZUItb4se5mVTks.roa (hash: E8CbmlBbMfwFFllt9Np43WKWYkKbRui+TW9xF2TYMh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c0:dc:d3:4f:e5:32:ab:c7:a2:c3:ae:6f:7f:3f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f264e3805a3d104537357a14ff926ac029599c
Validity
Not Before: Aug 6 05:00:47 2025 GMT
Not After : Aug 7 05:00:47 2025 GMT
Subject: CN=2b2b308bfb5acd8b849d37f40efc9d47a71251a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5a:5c:3b:8b:b2:cb:ca:13:f9:cf:e2:72:e9:
eb:b8:83:14:f8:44:8c:51:24:f2:72:4a:22:f6:ca:
9b:08:b7:16:05:5c:a0:97:92:95:53:76:77:6f:28:
2e:02:6f:cd:79:16:8a:2f:64:cf:40:30:f6:7c:8f:
4f:0f:91:c7:df:49:45:2e:e3:74:93:ac:bb:49:0b:
5f:30:53:1c:39:25:bc:c5:7a:fb:3e:c9:18:e9:f0:
c5:da:3a:d2:9c:f8:17:b5:90:30:49:37:18:74:34:
2f:cf:7e:6c:62:cf:e3:8c:b1:9d:67:ac:a4:76:b6:
07:e6:c6:5f:90:2f:8f:c9:c1:0f:96:26:22:fb:61:
b0:fa:22:63:d3:7f:ab:28:07:b7:52:39:40:9b:7f:
a5:35:69:fc:22:97:02:fb:d8:6c:7a:4e:85:f9:c9:
6d:19:ce:94:8e:0e:33:b4:93:56:4f:a1:3b:81:7f:
a2:69:03:d6:ea:56:c3:fc:da:42:c2:d0:1f:b7:01:
d6:21:81:2d:01:de:3b:2f:85:00:7a:a6:e2:3d:7f:
69:fa:1a:3c:4d:ce:f8:a4:54:b2:55:f8:5a:5c:98:
62:09:06:8f:8b:35:0c:b2:bc:7b:53:eb:1d:96:8d:
4c:a3:ac:c0:92:f6:91:2c:bc:77:3e:37:e1:4b:55:
63:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2B:30:8B:FB:5A:CD:8B:84:9D:37:F4:0E:FC:9D:47:A7:12:51:A4
X509v3 Authority Key Identifier:
keyid:D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:95:ed:8c:27:4f:64:84:19:dd:f2:55:65:63:e8:18:bd:9f:
b3:d4:8b:7a:0b:59:b6:0f:7f:4f:f1:7d:8f:8b:ba:06:54:23:
9b:b4:35:94:cd:5b:b4:d4:d9:00:e1:77:a7:13:29:8f:0e:0a:
d0:27:69:9c:29:6a:65:e8:97:a5:e7:80:b4:46:df:fe:1b:e9:
a8:7d:ce:ce:f2:43:6c:49:61:7c:b7:1c:1b:d2:9d:c4:ad:93:
e6:ce:6e:63:0f:4c:d2:1d:d0:83:bc:f7:75:14:c8:4a:aa:bb:
38:42:f7:93:d2:d5:69:8b:64:90:1a:2d:0b:63:19:cc:79:11:
6a:66:97:ff:ee:66:c7:d8:35:30:ef:7d:43:b8:8f:9e:dd:38:
34:f2:de:1a:9d:b3:7c:9e:c1:e1:24:f0:2e:38:41:d0:8d:81:
93:59:84:81:0b:83:f2:0d:b3:63:44:48:33:3b:f5:73:c4:a5:
b9:a1:42:a6:d2:86:85:71:6d:4c:66:48:c2:c0:9a:ce:7c:30:
a8:2d:6a:86:21:e3:f7:0d:2f:8f:2a:c0:94:7a:a1:22:c4:cd:
56:9f:28:f6:f7:ac:7e:3f:e7:ee:1c:fa:ee:02:04:32:d1:f2:
a4:21:b2:ed:71:52:83:d3:b0:44:57:2e:54:4c:05:7d:95:03:
70:db:97:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:01:08 2025 by rpki-client