Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
File: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft (raw, json)
Hash identifier: i3Vrvh3mnfHaxn+wZ79fSUBZn7RZ7qaBoG4f5BorwJE=
Subject key identifier: E6:2D:80:10:38:99:3E:59:ED:01:10:A1:37:90:DF:19:77:94:CB:75
Authority key identifier: D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB
Certificate issuer: /CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
Certificate serial: 019875D03CF634B991A05E78394A2BDD9E9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
Manifest number: 020D
Signing time: Mon 04 Aug 2025 16:00:37 +0000
Manifest this update: Mon 04 Aug 2025 16:00:37 +0000
Manifest next update: Tue 05 Aug 2025 16:00:37 +0000
Files and hashes: 1: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl (hash: 3smymdZT0CWD/WdFRACVMeAVH+wEwRnFh7DLa0RQiFM=)
2: CG9KoNDYQYANjw8jkpEMfgifFYg.roa (hash: a/8GNnkxdjWR/BpDGvDmUNc0bdNHqrlCI9YD9Z7wQW0=)
3: cZUoXKNyODDdYDJJ689IFt9l7Fg.roa (hash: 2dlPle1Oc1/h21vw5YqVsut1uxLZie17Tr86ybW+M80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d0:3c:f6:34:b9:91:a0:5e:78:39:4a:2b:dd:9e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
Validity
Not Before: Aug 4 16:00:37 2025 GMT
Not After : Aug 5 16:00:37 2025 GMT
Subject: CN=e62d801038993e59ed0110a13790df197794cb75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4b:46:16:46:61:a0:f0:86:40:53:a6:be:03:
16:5f:11:d4:a6:33:06:81:71:43:fc:cd:59:07:9e:
25:46:33:b3:d1:1f:60:13:1c:14:a3:ba:61:98:90:
78:b7:91:2d:08:65:c6:4b:7d:ff:a4:83:6d:bd:fc:
ac:b9:08:5a:fa:18:ff:dd:7c:77:cd:79:ec:54:68:
d1:c5:3d:1e:2c:c1:13:b3:8a:b0:56:48:38:58:13:
c7:0d:70:cd:47:88:83:7f:5b:07:5b:d1:7f:31:1f:
0b:73:55:2f:21:fe:42:71:5d:92:df:61:fe:21:8c:
5f:8d:01:12:8d:db:82:3d:3b:c2:e7:f2:0e:ac:55:
bb:1c:66:21:d0:bf:7c:cc:4d:b4:b2:3b:ce:35:00:
96:bd:3f:cc:c3:3d:a9:f8:a9:fe:29:5f:58:f9:bf:
20:d3:94:aa:8b:98:d3:12:5e:71:e0:40:d0:84:80:
43:4c:27:2a:28:37:9c:78:5f:10:91:f8:64:a5:ce:
0b:7c:c0:65:33:87:70:14:72:ff:fa:41:8e:2c:01:
34:59:38:cc:cb:4c:fa:9e:9f:2d:24:6b:c7:0a:36:
d8:73:e2:1c:37:bb:5f:64:80:31:7e:da:f2:5b:55:
56:50:f7:49:16:0c:44:81:1b:d0:e9:55:b3:1e:0e:
e5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2D:80:10:38:99:3E:59:ED:01:10:A1:37:90:DF:19:77:94:CB:75
X509v3 Authority Key Identifier:
keyid:D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:94:72:eb:92:17:07:84:61:90:74:1e:dd:0c:be:30:8a:24:
5c:a6:ab:ca:83:de:1d:45:2e:55:73:10:0e:8a:86:e3:8f:29:
6f:a4:e0:83:31:72:ba:57:ed:0d:e8:a8:37:7a:5a:75:d2:ba:
6f:10:5b:3a:ff:d2:ea:7c:c8:b5:7f:15:22:da:58:6a:27:13:
bb:92:d9:6d:eb:c8:cc:67:47:b0:64:ce:65:23:13:4a:f1:c5:
fa:8f:42:f5:2c:e1:94:30:a4:10:8b:73:f9:7c:05:cb:56:6a:
40:01:45:5c:ff:1d:32:8f:7b:4d:15:bb:22:ec:53:1f:3b:a3:
61:7e:08:ed:28:7c:39:23:39:19:3e:7a:c5:da:ee:f9:5e:7a:
89:99:17:35:56:59:f7:fb:9d:6c:89:87:59:46:96:9c:51:83:
a4:0e:c8:a7:42:89:8f:3b:ec:03:23:9c:ce:e8:c5:13:2a:19:
92:78:cc:91:6b:2a:d3:88:ae:bd:02:e7:a1:b9:69:4f:6e:a4:
b6:66:19:bf:bc:6f:1e:02:7c:e9:20:f9:41:b8:fe:d2:6a:b2:
b5:80:82:9f:5f:c7:25:c3:60:4a:50:89:cb:7b:76:8f:c9:02:
a9:fa:3f:f5:8d:02:a4:b4:4b:d7:ac:34:bd:ef:ce:7f:61:d2:
08:4c:ec:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:30:24 2025 by rpki-client