Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
File: 1zSS5NJcO70MXiDFqF7LIuyXNgo.mft (raw, json)
Hash identifier: 9G2naHedf0ZnXSxEA6uzOZ8hm9Q+c2mANt+h4g8ubQQ=
Subject key identifier: 1C:35:36:BB:08:3F:1F:00:89:E6:C1:95:E4:94:C4:EB:61:1E:7C:BA
Authority key identifier: D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A
Certificate issuer: /CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a
Certificate serial: 01987A890FBE6D8B11C54E2DBA0C5A8E07D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
Manifest number: 0F09
Signing time: Tue 05 Aug 2025 14:00:59 +0000
Manifest this update: Tue 05 Aug 2025 14:00:59 +0000
Manifest next update: Wed 06 Aug 2025 14:00:59 +0000
Files and hashes: 1: 1zSS5NJcO70MXiDFqF7LIuyXNgo.crl (hash: Fy3I2coGIpCQmmIAJ4Cmyho/AH644ZFm2W+m/xEE4TQ=)
2: 5xcSPqM5FqBggD3xhK_H_WBIj8c.roa (hash: 6UaEvDEdIHAI+VC/wqQ4jP8F3NZ9weH+TS5AN/LWzwY=)
3: NDt_WTrjoPL0cL8oTyPCRgNakA0.roa (hash: Hp1RzwRCWlMoxPuIUolhJVdqweoyQ9ReAqFHs5ETdBY=)
4: oTJ3WFdDrwDwPRwq0KV_9933-4Y.roa (hash: mhBZetUkSVK2917d65VbBa4ZgrfV11qg/and0h4flas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:89:0f:be:6d:8b:11:c5:4e:2d:ba:0c:5a:8e:07:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a
Validity
Not Before: Aug 5 14:00:59 2025 GMT
Not After : Aug 6 14:00:59 2025 GMT
Subject: CN=1c3536bb083f1f0089e6c195e494c4eb611e7cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a8:b8:0b:ca:3e:20:3e:96:d3:6f:3e:52:03:
60:3b:2e:41:19:5a:45:a9:a4:ff:a6:3c:4a:7d:98:
3c:f5:6a:7e:01:18:4e:f9:b8:a2:fc:f8:d4:ae:a3:
56:0a:a0:38:6a:ea:14:3a:f7:99:b2:d4:61:9a:fd:
67:a4:51:33:14:7f:1e:b4:1c:0a:73:40:06:ee:04:
62:0c:49:db:ae:36:f2:88:c0:c0:cf:25:27:9e:05:
2b:d7:94:02:5f:a4:b7:0a:fa:95:ac:1e:2e:ce:e9:
c5:71:06:21:30:6c:07:b5:44:24:aa:92:34:e8:e3:
27:41:d2:54:93:68:35:2c:8c:a1:32:d5:05:83:6b:
13:ba:a0:89:aa:4a:55:a6:7a:ff:c1:e1:5c:4c:97:
ba:31:73:65:28:82:11:82:7b:ca:3a:a1:3c:ca:a0:
2a:ed:26:9e:03:4d:cb:27:76:37:32:41:a9:38:b5:
32:ec:31:5f:b5:15:96:8c:01:94:70:be:5b:4e:c3:
32:41:fd:f4:2b:8e:76:54:a4:c6:42:8a:13:c4:fc:
7c:a5:2a:b2:34:c7:d2:c2:4c:c1:6e:23:7f:e2:79:
e3:5d:bc:87:1e:ec:3a:8f:04:83:1a:51:7a:b3:7e:
6b:8f:87:a7:df:f2:5e:5d:69:47:83:db:c6:7e:9e:
32:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:35:36:BB:08:3F:1F:00:89:E6:C1:95:E4:94:C4:EB:61:1E:7C:BA
X509v3 Authority Key Identifier:
keyid:D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:43:34:4c:b4:bd:4b:10:e0:8e:8b:bb:65:6b:4f:67:fb:52:
1e:81:7a:93:0d:53:ab:57:6e:19:81:9a:12:d7:84:4a:79:27:
88:be:9d:e2:70:de:54:e3:ee:55:0c:46:f6:64:d9:d8:bd:28:
1e:07:64:c9:0f:d5:a3:75:cf:26:b0:ab:0b:7a:dc:46:95:6e:
0e:4e:93:25:83:20:21:7b:5a:c1:25:08:6e:94:4d:f0:96:b0:
55:92:19:9e:30:5d:a9:f6:f1:d8:56:73:4b:96:4f:92:ac:c7:
f3:08:9a:4b:5e:a8:e2:27:40:84:5c:c8:e8:0b:bb:5f:59:6d:
76:7f:d6:fb:60:93:06:e6:cd:99:bc:0e:5e:b5:57:67:83:86:
35:9a:ff:05:2a:fd:b6:d6:82:34:7c:18:51:e0:f3:85:59:89:
78:62:e1:1b:51:22:ea:9b:08:15:c8:10:11:7d:6a:a5:ee:5b:
b7:96:48:74:8e:a7:fe:73:b5:df:8b:43:00:25:12:57:31:2f:
88:a8:5a:ac:5a:dd:d8:33:03:50:56:b9:61:a0:be:96:f5:b3:
f1:c4:bb:20:c3:f9:ca:11:b4:10:cc:ba:04:5b:d8:05:b7:c5:
07:b8:75:10:a9:23:70:09:64:b0:d0:25:68:a6:60:30:9d:4d:
27:18:f0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:47:00 2025 by rpki-client