
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
File: 1-c0pgMHHi89rubgKB5IFiwvK7Us.mft (raw, json)
Hash identifier: O/ppqcpChxRjILPs4ATGV9CetO0SSAjyxkOl1gTl1ZM=
Subject key identifier: 87:0E:C4:B4:BB:BC:72:B3:09:BD:7A:D7:34:FC:9F:70:A1:C1:62:30
Authority key identifier: F9:CD:29:80:C1:C7:8B:CF:6B:B9:B8:0A:07:92:05:8B:0B:CA:ED:4B
Certificate issuer: /CN=f9cd2980c1c78bcf6bb9b80a0792058b0bcaed4b
Certificate serial: 01987373FD56D12B0326CEA6525C7E22E574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
Manifest number: 15D5
Signing time: Mon 04 Aug 2025 05:00:38 +0000
Manifest this update: Mon 04 Aug 2025 05:00:38 +0000
Manifest next update: Tue 05 Aug 2025 05:00:38 +0000
Files and hashes: 1: 1-c0pgMHHi89rubgKB5IFiwvK7Us.crl (hash: Cyo2BjDbHYHrIW6yTF6TDxg4Uyfpy+FpCKHUjku4lwI=)
2: DBBkmAjtiZvJk178YbVOfqGzI3Y.roa (hash: 8eJVP5XAdO67of9omWg+boW49giOURgUcnG9ZjC9lgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:73:fd:56:d1:2b:03:26:ce:a6:52:5c:7e:22:e5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cd2980c1c78bcf6bb9b80a0792058b0bcaed4b
Validity
Not Before: Aug 4 05:00:38 2025 GMT
Not After : Aug 5 05:00:38 2025 GMT
Subject: CN=870ec4b4bbbc72b309bd7ad734fc9f70a1c16230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:07:8b:8d:e9:86:54:4f:4e:f2:4c:ae:46:2f:
46:51:06:93:78:0d:b7:b0:5e:c8:da:c0:f4:91:ca:
68:7c:62:91:6d:08:0b:85:9c:73:c2:e7:e6:3b:fb:
4f:34:0e:eb:6b:0d:7a:41:e0:f3:a2:ed:00:8e:e8:
5e:5a:d1:72:f8:7d:6f:d3:a9:2b:90:a1:07:72:79:
7e:2b:05:f6:2f:5e:02:6c:45:4a:48:b6:0d:18:dc:
9d:ab:a5:2a:3b:ab:37:51:82:5f:fa:88:5f:99:61:
90:65:6d:f8:c0:a6:aa:dd:5b:53:97:4c:8a:7b:13:
36:16:83:54:86:89:86:1b:c9:66:15:8a:a1:62:4b:
2f:03:a0:4d:de:1a:6d:32:0d:33:66:67:12:61:2d:
33:bf:71:32:e3:50:1d:95:e8:98:da:68:96:25:10:
c3:75:70:53:30:47:77:c3:24:3a:78:e5:b9:90:28:
0f:f5:d0:78:fd:14:3a:b0:7b:f7:ed:72:ff:ea:ac:
9a:c9:b9:3a:03:64:4a:58:d1:35:53:8f:ae:20:af:
7d:f2:fd:d0:89:d3:5a:ee:7a:5d:d7:3e:0d:80:d6:
d9:d9:89:df:7e:96:7c:4b:e2:f4:7e:75:08:d5:4f:
0b:25:47:98:8f:b1:88:0b:96:93:66:e7:7f:1e:2e:
12:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0E:C4:B4:BB:BC:72:B3:09:BD:7A:D7:34:FC:9F:70:A1:C1:62:30
X509v3 Authority Key Identifier:
keyid:F9:CD:29:80:C1:C7:8B:CF:6B:B9:B8:0A:07:92:05:8B:0B:CA:ED:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:47:77:c7:d2:97:8a:16:c2:6c:3c:fc:7a:4c:36:35:6d:2c:
69:4b:32:b7:e5:4f:45:c7:40:af:49:3f:9b:a1:e0:6e:a1:3c:
41:65:53:f1:5a:af:01:84:bb:a0:49:c5:1a:28:87:08:24:a6:
5d:8d:b5:f3:9e:dc:5f:97:a1:46:a3:ea:c7:61:d3:ce:4e:fb:
4b:ba:21:56:6c:78:dd:0e:a7:8e:84:f2:44:6f:12:fe:77:70:
b8:d8:82:da:9e:7a:82:bf:c3:22:f6:c1:d1:06:20:be:11:a6:
06:69:d1:40:1a:79:16:19:8c:0f:46:bc:d5:b3:12:99:38:0f:
66:94:a2:6f:a6:bd:19:57:61:09:22:32:ec:57:ac:34:f9:d4:
31:ab:5d:bd:cd:a4:93:d6:1a:20:28:39:f4:ef:90:54:09:61:
e4:c3:db:37:f3:95:c6:98:7f:47:86:84:eb:20:d5:da:b3:b7:
f9:77:16:d4:b7:cd:0b:5d:f5:ed:f1:45:a6:53:ad:63:53:cf:
53:78:e1:c9:c8:c8:11:b7:dc:a3:d1:03:39:b7:2b:2b:77:cf:
19:77:13:9a:6f:f3:47:db:02:cf:35:d8:70:9e:e2:d3:aa:c6:
38:91:de:0d:b9:8a:cc:fb:54:d6:8b:bd:11:80:c4:50:20:05:
fd:cd:f9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:40 2025 by rpki-client