Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
File: 1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft (raw, json)
Hash identifier: 7ZMYPo7VoiBv8FNXtdQHPd1jOOWsL3LF9MOmLeD8J9w=
Subject key identifier: 8B:93:B2:0B:3D:D9:3B:BC:8A:AE:CC:64:08:C2:1D:A6:F1:54:97:62
Authority key identifier: F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89
Certificate issuer: /CN=f8b770160553760c3567df51a847ed6c529c0789
Certificate serial: 01988C587CD129B2CA85832C06EB2D6E125E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
Manifest number: 0F9F
Signing time: Sat 09 Aug 2025 01:01:05 +0000
Manifest this update: Sat 09 Aug 2025 01:01:05 +0000
Manifest next update: Sun 10 Aug 2025 01:01:05 +0000
Files and hashes: 1: 1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl (hash: 212l+JG8zrYg7qIh87WcnSedBi7Z6ujlP+BgGh74fTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:58:7c:d1:29:b2:ca:85:83:2c:06:eb:2d:6e:12:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b770160553760c3567df51a847ed6c529c0789
Validity
Not Before: Aug 9 01:01:05 2025 GMT
Not After : Aug 10 01:01:05 2025 GMT
Subject: CN=8b93b20b3dd93bbc8aaecc6408c21da6f1549762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:de:94:4d:3f:7a:10:e1:81:b3:05:d7:fe:43:
5d:e8:95:29:48:49:03:e2:9a:af:f5:b8:1d:1c:42:
48:42:c0:81:62:22:3f:a6:5e:a3:d7:c0:a0:77:5a:
79:a0:b1:73:10:83:2c:12:fa:af:36:c4:07:75:0f:
00:af:97:f7:cb:66:92:b1:1a:12:6b:35:69:ef:2b:
98:de:10:d3:23:2b:46:8b:69:4b:54:9b:11:02:5f:
83:81:83:7e:8c:e1:9e:8e:bb:a8:2e:97:92:74:01:
4a:e3:db:da:a3:96:4d:2e:27:ab:34:65:db:27:54:
de:9c:89:96:02:75:3b:39:1a:6a:a9:ee:9b:82:1d:
6e:62:e0:bf:c1:eb:d5:26:56:85:e0:81:9e:5d:e6:
bb:8c:76:3a:d2:68:f8:b9:c9:8e:36:db:7b:5e:c1:
89:2d:c4:ae:b4:09:54:6c:fe:3e:c2:ff:a5:32:84:
fb:b1:bc:ad:b1:0c:ed:ce:5c:31:c8:53:8f:5d:8b:
fb:4e:b1:38:98:e5:de:4a:15:47:8a:35:77:7f:84:
77:bc:56:26:69:85:22:6c:de:d4:c6:06:e1:57:68:
6d:17:b5:ef:9a:18:a6:d4:4e:d0:9f:0a:8a:01:26:
bb:5a:1f:0a:f5:b5:ea:7a:88:43:5c:0a:2d:f7:7e:
22:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:93:B2:0B:3D:D9:3B:BC:8A:AE:CC:64:08:C2:1D:A6:F1:54:97:62
X509v3 Authority Key Identifier:
keyid:F8:B7:70:16:05:53:76:0C:35:67:DF:51:A8:47:ED:6C:52:9C:07:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LdwFgVTdgw1Z99RqEftbFKcB4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/3253ac-8fa7-425b-8a90-9b9b401459e6/1/1-LdwFgVTdgw1Z99RqEftbFKcB4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:c5:1f:8b:c0:06:26:96:60:da:3e:f1:d2:00:5a:a1:95:cb:
e0:06:51:6b:ca:21:ad:e0:3d:e3:4e:b9:d0:3e:0f:16:73:5f:
8c:f6:d6:0b:17:a6:eb:2a:c7:c3:78:8a:33:d8:0a:a4:07:75:
b0:63:cd:a4:23:82:b4:bf:c0:9d:c4:4f:d1:b8:75:e8:36:74:
7e:68:28:2d:4d:0e:60:f9:4c:1c:13:eb:f4:fe:67:84:59:b5:
d3:7e:95:5f:5e:54:aa:15:09:be:a5:86:09:bb:04:93:6d:f9:
74:9b:e1:60:8b:9d:62:79:91:e0:45:fc:27:76:9a:b9:d7:20:
79:1b:0c:ca:10:2e:b8:58:d9:91:b9:8c:d8:21:8a:fa:b3:1e:
25:7f:f2:71:66:7a:cf:64:a0:5f:6a:f9:b5:6c:45:d2:c9:7c:
73:b2:f8:a6:ce:70:13:a3:e5:ab:11:c7:9e:8a:2f:bc:ed:f2:
fb:0a:11:e4:b5:11:37:b4:ab:96:fe:f6:a8:e6:40:7b:92:fb:
2d:f5:71:43:77:e3:0f:d1:1f:33:3d:13:42:39:77:e5:8f:98:
09:b1:19:4a:11:6a:f6:61:0c:e3:52:34:2a:e1:70:15:5c:0f:
3b:10:9b:eb:1b:a7:4f:15:71:7b:c4:d3:da:17:fc:4d:cb:9c:
c9:b4:f5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:36:17 2025 by rpki-client