Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
File: 1SGSgT0i76BLy7JOC_D-NNjfukg.mft (raw, json)
Hash identifier: eTNCsLbITQ09L7vwQ4Q9y8il5s7PJ6cV+PcgStCL1hc=
Subject key identifier: D5:9F:3C:8E:88:81:BB:80:2B:04:A7:7E:4F:89:7B:50:AF:57:92:EF
Authority key identifier: D5:21:92:81:3D:22:EF:A0:4B:CB:B2:4E:0B:F0:FE:34:D8:DF:BA:48
Certificate issuer: /CN=d52192813d22efa04bcbb24e0bf0fe34d8dfba48
Certificate serial: 019882B0BC6D370178DC45EC16BC307D79E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
Manifest number: 0241
Signing time: Thu 07 Aug 2025 04:01:17 +0000
Manifest this update: Thu 07 Aug 2025 04:01:17 +0000
Manifest next update: Fri 08 Aug 2025 04:01:17 +0000
Files and hashes: 1: 1SGSgT0i76BLy7JOC_D-NNjfukg.crl (hash: Wn1vypA11RzO8aeSpAN2rzA6PLXj+JnC3f6kmtLuaTI=)
2: eDQ7Rqa20D_hI8gI5USdLHd-gF8.roa (hash: r3EJNmKQgbbo4j5pe3uk2ZFcWeVkHRAZ7TxCivW3QgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:b0:bc:6d:37:01:78:dc:45:ec:16:bc:30:7d:79:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d52192813d22efa04bcbb24e0bf0fe34d8dfba48
Validity
Not Before: Aug 7 04:01:17 2025 GMT
Not After : Aug 8 04:01:17 2025 GMT
Subject: CN=d59f3c8e8881bb802b04a77e4f897b50af5792ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:fb:3e:92:47:8a:b4:3b:ad:fd:b8:24:ec:
b2:05:d6:6c:b4:29:23:5e:52:12:ac:42:04:78:0e:
13:c8:37:ca:9c:44:fe:be:93:4d:2d:08:dc:8c:54:
3e:26:6b:8f:47:11:ee:04:91:41:cf:eb:29:51:cd:
b4:10:1c:64:ca:80:55:3a:e8:bd:0b:92:70:51:be:
65:3b:80:b1:24:04:d8:be:34:ce:15:a9:97:a2:61:
e3:0d:da:8e:ca:9a:5d:62:92:f0:71:33:cd:c5:12:
b5:2b:b5:c3:86:62:19:93:93:88:f5:93:1d:6f:43:
30:ff:2c:4e:d3:26:67:69:22:15:68:71:58:fe:b3:
b9:29:e1:8f:d1:d8:72:6a:8a:16:3a:e9:eb:8b:98:
3c:fc:15:c5:00:17:a6:fb:35:e2:9a:96:b9:b9:b9:
98:8c:38:bd:81:e1:67:3f:3e:35:22:c0:35:d6:cf:
9a:c2:d7:a6:c0:44:e0:07:78:57:89:90:10:dc:a9:
10:fb:35:d1:82:44:c9:14:ce:53:4e:73:7d:c5:c7:
91:7b:3e:5d:23:d0:40:e0:cb:d1:70:50:28:72:1e:
36:9a:59:f1:f9:f1:81:84:8f:e1:86:a8:9b:03:f0:
72:11:5c:b2:7d:20:6f:fd:93:93:dd:80:cd:94:83:
86:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9F:3C:8E:88:81:BB:80:2B:04:A7:7E:4F:89:7B:50:AF:57:92:EF
X509v3 Authority Key Identifier:
keyid:D5:21:92:81:3D:22:EF:A0:4B:CB:B2:4E:0B:F0:FE:34:D8:DF:BA:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:85:73:26:ac:fc:63:30:6c:40:24:14:f1:5e:65:c8:b9:2b:
06:31:1f:2d:72:7a:5f:f9:d3:84:5d:3a:73:43:90:86:6b:a4:
8c:f3:93:60:1c:31:30:d8:82:a3:3e:13:6f:4a:fe:1a:00:2b:
4f:e9:a8:9c:12:32:dc:8f:08:05:97:0b:b1:fb:b1:32:42:c7:
dd:fc:4b:b1:22:f9:96:91:a9:96:f9:0c:bf:93:25:6c:76:9b:
6b:ee:e0:01:76:90:35:7f:a3:1b:30:37:2b:96:a7:51:c4:2a:
d9:51:94:0c:81:bb:d5:3c:79:75:63:6d:27:ba:de:ce:86:0b:
b7:da:ed:36:3a:ce:7e:4c:ad:75:49:9a:62:99:2d:a1:7a:4c:
38:47:52:98:3b:95:ec:84:86:1d:40:f2:32:09:c4:f3:af:b2:
1e:38:a7:2b:46:7b:5d:ad:45:7f:7f:55:ec:8a:76:7f:25:4b:
54:9f:d5:b5:8a:9a:d1:a4:7e:ea:c1:48:fc:2e:bc:ad:92:ad:
97:50:a5:7f:0b:d6:2b:6e:95:60:8d:4f:1c:f0:43:06:8d:d2:
e9:49:dc:34:d7:12:bb:b1:ee:a1:e8:9a:a7:49:7c:84:49:f7:
8f:35:65:42:5d:88:26:9c:a3:87:b8:fc:ac:ce:4e:f3:65:8e:
bf:b7:61:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 13:06:05 2025 by rpki-client