Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
File: 1PkhKd96qnFX4VlzwkdT4RjJBX0.mft (raw, json)
Hash identifier: 1vNRAIdwjhuSO1w8RtqQUQ2xXMzB4Lzeyse/X3jLFDs=
Subject key identifier: C1:B6:49:E5:83:A4:64:F1:19:D0:F7:B2:EF:27:22:12:F1:97:1E:E5
Authority key identifier: D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D
Certificate issuer: /CN=d4f92129df7aaa7157e15973c24753e118c9057d
Certificate serial: 019881D4D801FA910EBC9F1492ED6807246C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
Manifest number: 161E
Signing time: Thu 07 Aug 2025 00:01:06 +0000
Manifest this update: Thu 07 Aug 2025 00:01:06 +0000
Manifest next update: Fri 08 Aug 2025 00:01:06 +0000
Files and hashes: 1: 1PkhKd96qnFX4VlzwkdT4RjJBX0.crl (hash: M0kF+hxGiHYKA5KD6abGwT7d2iJW++tBNVjRhWF7Wto=)
2: qe7WgTc0pmEzzldB9WeXLDwRwuY.roa (hash: QJYNnjPlPIICfSb9VCBEBsTZ9KLpm8+zxTVc8XyL9RY=)
3: yPpTiNnoGdGVkfC9weXZ8IcYOvo.roa (hash: GPROq8bCcJ/0NryOKaC/XQSUJzGn/7Y4gmLVXUsuJPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d4:d8:01:fa:91:0e:bc:9f:14:92:ed:68:07:24:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4f92129df7aaa7157e15973c24753e118c9057d
Validity
Not Before: Aug 7 00:01:06 2025 GMT
Not After : Aug 8 00:01:06 2025 GMT
Subject: CN=c1b649e583a464f119d0f7b2ef272212f1971ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:29:4a:03:48:a6:a7:66:1b:f1:17:9c:88:f8:
97:ca:c9:97:96:bf:15:a4:c4:26:ca:a5:9e:7f:b9:
e7:96:f1:20:61:b8:9d:9d:41:f4:f5:60:17:c9:96:
a2:c4:b7:15:50:1a:f3:97:4a:f8:66:41:82:11:8f:
6b:30:f3:8b:4d:aa:a1:af:3e:02:96:be:39:17:76:
54:c6:d5:cc:8c:5a:ff:b4:63:d6:f5:b6:43:20:eb:
89:a3:48:4f:56:6d:0e:e8:1f:9e:40:78:77:a6:87:
b5:af:81:02:01:49:a9:36:13:a5:94:9a:65:2c:2a:
f6:f6:d2:6e:5f:63:74:00:b7:df:82:51:11:20:df:
22:63:c9:76:47:49:25:2b:92:b7:36:b4:65:59:f0:
94:03:d9:fe:79:27:cb:11:81:d6:4d:d6:0b:80:65:
7d:09:80:e9:85:94:1a:c3:6b:f3:1c:ba:02:13:01:
76:eb:e7:83:a3:da:d6:30:52:51:ce:ff:db:50:d6:
53:05:e3:f5:97:71:70:e6:03:d7:29:ed:7c:1c:7d:
f7:26:46:49:44:a5:96:f8:57:0f:62:a8:59:74:3a:
95:ff:76:8c:b0:50:53:b8:c6:8b:51:74:14:25:b8:
2d:d5:fb:9e:8a:04:11:b8:e1:de:88:90:ed:4e:df:
d9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B6:49:E5:83:A4:64:F1:19:D0:F7:B2:EF:27:22:12:F1:97:1E:E5
X509v3 Authority Key Identifier:
keyid:D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:9a:7c:da:f8:6d:d3:0b:a1:09:30:13:ca:ab:18:e6:e2:69:
b7:66:f6:b7:d5:e6:c5:b7:82:06:c5:b4:e6:18:ed:84:e3:e4:
29:e6:ac:43:57:8f:cd:70:48:f9:38:5d:76:0a:93:22:59:a1:
c0:fc:93:c6:cc:56:62:20:58:d6:0d:72:c8:cc:ba:89:42:0d:
dc:14:52:d7:68:d4:f0:b3:af:45:e4:f4:7f:18:ba:01:45:d2:
12:ff:40:73:8e:5b:bd:a8:1d:49:84:7f:e9:a8:60:a7:a5:f1:
3a:17:d3:6f:ba:cf:46:a2:65:a4:a7:f9:4a:d2:6a:09:75:a1:
40:21:44:f5:9b:bc:52:f2:69:92:5a:42:d3:23:cc:d1:1d:48:
47:9b:8d:1e:62:19:7f:b9:d5:76:95:a4:13:cf:5a:aa:6f:d5:
53:a4:7e:bd:b8:04:e1:7f:5e:12:32:79:ae:09:0a:db:bc:b6:
91:03:84:c6:09:94:12:75:70:7f:3e:10:0e:3d:8f:d1:47:f4:
34:e6:ef:7a:60:da:59:3a:60:45:ff:26:a1:2e:85:d3:81:c0:
36:2d:59:0c:50:9e:c2:07:1f:63:49:6f:cc:2e:17:08:86:ee:
83:7c:e0:e9:0c:4c:dc:62:74:40:a8:ba:47:66:57:46:c2:08:
49:f7:f4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:07:06 2025 by rpki-client