Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft
File: 1MpV0uO5FjzEiLb3q-Yusm56jDg.mft (raw, json)
Hash identifier: 3EHtBhDe3HvtV0zrGfRYkXxcAT8JaJeMfAbrnaR6bS8=
Subject key identifier: D7:E0:63:0A:EC:2B:14:5F:76:90:C8:AA:79:34:30:14:0F:A8:CB:64
Authority key identifier: D4:CA:55:D2:E3:B9:16:3C:C4:88:B6:F7:AB:E6:2E:B2:6E:7A:8C:38
Certificate issuer: /CN=d4ca55d2e3b9163cc488b6f7abe62eb26e7a8c38
Certificate serial: 01989CDE0554582DD8F86B57E6D5E658F91D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MpV0uO5FjzEiLb3q-Yusm56jDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft
Manifest number: 0505
Signing time: Tue 12 Aug 2025 06:00:52 +0000
Manifest this update: Tue 12 Aug 2025 06:00:52 +0000
Manifest next update: Wed 13 Aug 2025 06:00:52 +0000
Files and hashes: 1: 1MpV0uO5FjzEiLb3q-Yusm56jDg.crl (hash: dgGxe8EbE8omjOHhZQ28D4eIDKxlhDKUJHPbXYDlf1c=)
2: YnSv-7hty2XBOtfBw5qkiioJQKM.roa (hash: NdEqiSXPy3YUROk7KGdPBGI+5iDmNNGO1C9AGX01ZC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1MpV0uO5FjzEiLb3q-Yusm56jDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9c:de:05:54:58:2d:d8:f8:6b:57:e6:d5:e6:58:f9:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ca55d2e3b9163cc488b6f7abe62eb26e7a8c38
Validity
Not Before: Aug 12 06:00:52 2025 GMT
Not After : Aug 13 06:00:52 2025 GMT
Subject: CN=d7e0630aec2b145f7690c8aa793430140fa8cb64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f4:90:59:99:97:ff:2d:54:1b:dd:6f:aa:d3:
49:d9:99:90:0b:c2:ca:26:40:cf:b2:92:7b:c1:fb:
76:2b:81:6b:cb:16:89:d1:e0:d4:86:83:9e:97:9a:
02:b2:33:3c:e2:1c:71:16:25:c6:43:e1:15:81:45:
71:92:70:98:e2:55:cd:ba:ac:21:1c:74:a7:e0:97:
72:65:3a:d4:d4:29:05:5d:82:e2:4c:a4:a2:9d:23:
a4:04:b3:79:37:13:b8:ba:ea:35:c7:5e:42:69:f7:
ac:e7:eb:1f:95:74:3b:a9:74:e3:8b:d0:00:da:c8:
03:bc:7c:fd:86:24:8c:5c:46:ca:b4:27:25:da:27:
58:7e:b2:9d:21:0c:01:c5:95:aa:1b:ff:71:db:46:
1d:f6:68:73:51:d7:b2:62:ed:59:02:41:8b:17:59:
ec:0d:0d:de:11:b9:d0:b9:f1:f9:5d:a7:ad:a5:37:
6b:63:bf:d8:6a:69:bd:67:a0:0a:f6:48:7b:55:2d:
b2:fb:b0:c1:c1:1e:ab:ab:3a:c0:9f:e6:e8:e4:71:
6c:a4:57:b3:82:35:c1:98:82:31:18:d4:c1:fb:61:
a9:1c:1c:50:51:cc:ff:cd:b4:70:8d:0b:72:e7:eb:
bb:64:6c:ea:5f:e8:36:b7:9b:92:7a:48:2a:88:89:
5f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E0:63:0A:EC:2B:14:5F:76:90:C8:AA:79:34:30:14:0F:A8:CB:64
X509v3 Authority Key Identifier:
keyid:D4:CA:55:D2:E3:B9:16:3C:C4:88:B6:F7:AB:E6:2E:B2:6E:7A:8C:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MpV0uO5FjzEiLb3q-Yusm56jDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:20:9f:0e:df:5a:a0:2a:0a:c0:8d:fe:44:39:87:4d:1e:82:
1f:bf:3b:d4:76:65:ff:8d:f9:7c:a3:b6:ce:7e:da:56:d2:bc:
e0:48:8d:7f:2f:f1:45:d5:c9:cb:cc:7a:2b:2a:c8:0c:2d:b9:
ca:a1:37:a1:89:6a:c8:06:4b:6c:e2:5e:b7:c5:53:fc:dd:36:
0b:5b:4f:c3:14:d9:2a:ae:eb:52:30:14:5e:97:1f:f0:e5:b3:
4e:ac:3f:b5:00:69:c4:07:f9:6f:28:0a:e0:de:1f:bf:72:f4:
21:a6:8b:8f:d1:92:7e:a5:26:13:57:91:05:f0:e3:eb:05:e9:
46:ae:4c:47:17:47:6e:d3:a7:72:86:5e:8b:02:51:3a:b2:91:
5f:59:01:39:67:4c:3d:be:92:81:0e:f9:34:94:97:73:ff:25:
1b:80:0b:98:78:93:3d:1d:0b:36:b2:2b:0a:d5:3d:b5:4d:56:
26:a2:53:fb:bf:69:a1:2d:2e:7e:2b:36:37:d6:2b:2f:1d:5b:
24:7b:1e:d9:bc:49:55:9a:85:71:c7:f8:d0:87:09:94:d9:70:
10:4b:be:08:74:cd:18:08:b9:8d:0e:4f:0d:16:36:1d:4e:17:
db:68:d6:6a:12:bb:f5:62:c1:63:24:a8:2f:49:ab:f5:29:87:
4e:c7:17:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 13:45:40 2025 by rpki-client