Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
File: 1BcD2zAgzB7y_XEJGkaPSmScI48.mft (raw, json)
Hash identifier: 1Y7/+LS3URIxXApy7XIAysXsE6jkDBmUf445CNtF2O0=
Subject key identifier: A0:14:77:93:DC:9A:9A:0F:1A:84:89:FB:EB:04:64:72:97:F0:0C:9A
Authority key identifier: D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
Certificate issuer: /CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Certificate serial: 01988AD75557F46BCD67EDE74E17380D0B3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
Manifest number: 1637
Signing time: Fri 08 Aug 2025 18:00:24 +0000
Manifest this update: Fri 08 Aug 2025 18:00:24 +0000
Manifest next update: Sat 09 Aug 2025 18:00:24 +0000
Files and hashes: 1: 1BcD2zAgzB7y_XEJGkaPSmScI48.crl (hash: Q+QmOWeKAOvxJ5IZw7uPgb28+C0U6GwrEBziaQmBpT4=)
2: SwxmsvxnegUK_dz06j_bmvCP-xU.roa (hash: qF5sISq5xs4U3hp9EFxCSMocasNmdfjsoQWek7B0tOQ=)
3: dumiLPj8dIgbkOu_ODKjUhmF_rM.roa (hash: kFpbhODmKPkVFS8czIjYIk5us47dHmcmchszyizHwz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:d7:55:57:f4:6b:cd:67:ed:e7:4e:17:38:0d:0b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Validity
Not Before: Aug 8 18:00:24 2025 GMT
Not After : Aug 9 18:00:24 2025 GMT
Subject: CN=a0147793dc9a9a0f1a8489fbeb04647297f00c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:53:11:01:87:ed:ad:4b:1d:4d:e2:e0:65:31:
39:15:2d:f1:56:9d:b9:b8:ba:c3:38:00:2f:36:3e:
f0:c4:bb:1c:1d:8b:5c:e2:6f:53:d4:02:59:aa:e2:
b9:f5:67:18:e6:d0:ee:a3:c2:3b:a9:a2:f0:23:86:
54:ef:4d:4f:81:15:c9:98:24:88:ff:d6:8f:e2:24:
99:bf:9b:99:fd:f3:bc:c2:d5:14:62:f4:a6:53:56:
88:4f:c0:2c:e3:a2:a9:c6:bb:a7:e3:1c:5f:21:fd:
3c:49:53:01:c1:d3:ca:e9:3a:99:bc:48:2b:fe:27:
57:c6:9b:6f:aa:7e:db:23:0b:21:da:8e:0e:d7:20:
04:34:a2:0d:8d:bd:a0:2e:fd:f9:8a:63:69:ba:89:
27:18:8b:d2:7d:47:ed:50:d4:c7:6f:95:2d:04:e9:
ab:84:0f:fc:a4:a5:39:ee:d4:25:c8:be:d4:4e:21:
2f:ca:65:a4:11:f7:2c:ca:18:f5:87:eb:2f:73:ae:
45:37:54:2d:50:56:70:ed:9e:c6:16:34:39:56:96:
45:79:16:53:50:0a:2b:1d:36:e5:64:48:40:8e:c7:
ce:94:ec:37:af:75:a5:ce:b3:88:ea:86:43:42:e2:
17:85:00:c9:09:89:82:0f:1c:8b:80:1c:cf:c8:7e:
a4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:14:77:93:DC:9A:9A:0F:1A:84:89:FB:EB:04:64:72:97:F0:0C:9A
X509v3 Authority Key Identifier:
keyid:D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:db:8c:b6:d9:af:5f:f7:92:9a:a5:d5:20:0a:be:da:f5:c3:
7e:a9:d6:32:0e:40:4a:cb:43:fb:09:55:a8:c2:93:5b:ec:66:
ec:51:94:2e:dc:62:82:0c:fe:18:f9:b1:c0:64:3e:c3:c9:ba:
a1:17:ad:93:9d:70:66:52:b9:60:f8:e8:67:59:00:ae:a1:8c:
86:02:c5:2c:04:9c:38:58:f7:b6:97:05:fd:5d:43:5f:d9:9f:
c5:6d:7f:88:47:91:db:0e:5c:64:68:03:68:69:6b:31:f5:e9:
b3:1d:96:a8:10:16:5f:6c:45:71:32:fd:58:af:6f:3c:0f:1d:
b6:28:76:ee:7d:f2:cb:ad:c5:20:bf:39:8a:23:b2:94:6a:e7:
32:ca:3d:04:c3:77:b2:bf:26:9b:7d:c9:f6:1c:26:af:2b:3f:
ef:8f:1e:06:1d:1f:87:cf:32:ee:79:8e:3a:5a:87:01:0b:6d:
2f:28:ef:e4:d5:7d:e8:c3:b3:96:00:6b:96:56:09:9d:d4:a7:
11:30:70:5c:3f:66:13:54:8a:88:99:51:79:cd:0e:0c:9e:b4:
f5:ac:fd:a7:ea:52:41:d0:3c:44:57:a2:5b:15:a2:b9:b2:51:
11:98:a1:df:40:f4:5a:56:7a:cf:8b:23:fd:30:13:98:68:5d:
b0:93:4d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:03:01 2025 by rpki-client