Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
File: 1ztArr-IwXsbViEopW9CRfLxVDg.mft (raw, json)
Hash identifier: Ppqa2ZWRgMvXvBuEbeLMYnC5IkdOaWooBqw+r7hxzHg=
Subject key identifier: F0:8B:71:79:03:16:84:7F:00:21:03:91:DF:3B:9F:47:BC:DA:9F:3D
Authority key identifier: D7:3B:40:AE:BF:88:C1:7B:1B:56:21:28:A5:6F:42:45:F2:F1:54:38
Certificate issuer: /CN=d73b40aebf88c17b1b562128a56f4245f2f15438
Certificate serial: 01987A891EA173956FE555E9CD1738368D06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
Manifest number: 14F1
Signing time: Tue 05 Aug 2025 14:01:03 +0000
Manifest this update: Tue 05 Aug 2025 14:01:03 +0000
Manifest next update: Wed 06 Aug 2025 14:01:03 +0000
Files and hashes: 1: 1ztArr-IwXsbViEopW9CRfLxVDg.crl (hash: xPbKsymb+yBqnMmuKbAkJyxmRg1H5qAwL2tZ5HcfycE=)
2: fAenkccYvoOHEDML32yn807Jw6Q.roa (hash: 3BpxdC7ljMXfXdlUeHh5VXiJ8eVP4DoTTn7sLwUeuhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:89:1e:a1:73:95:6f:e5:55:e9:cd:17:38:36:8d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d73b40aebf88c17b1b562128a56f4245f2f15438
Validity
Not Before: Aug 5 14:01:03 2025 GMT
Not After : Aug 6 14:01:03 2025 GMT
Subject: CN=f08b71790316847f00210391df3b9f47bcda9f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d5:ec:74:a9:0b:2a:31:98:83:5d:35:8c:d5:
c4:34:35:05:1d:eb:5f:76:74:6e:5a:2f:44:08:c6:
bf:09:5b:c4:ab:38:65:30:c7:36:b5:82:5e:0a:18:
e7:2d:02:3d:e8:c0:50:9b:cc:4c:75:bc:36:be:74:
25:e4:43:85:27:73:db:9c:13:a0:af:8c:a9:02:3a:
48:2e:9f:6c:43:5b:5f:ec:ee:f3:e8:c2:27:69:8b:
50:bb:32:8c:a0:68:e9:ec:43:24:70:41:d5:76:c4:
0b:a7:f3:75:bd:10:3f:f3:65:e2:3e:92:f4:c3:4d:
b6:a7:1c:31:47:0d:29:88:eb:6d:ba:ba:4c:12:c9:
26:b8:39:8f:16:a9:e2:f6:ac:b1:96:22:34:00:a1:
63:c4:1f:15:d8:a5:ba:ba:23:a4:02:da:95:54:6b:
fb:52:29:06:61:1c:41:70:ca:4c:eb:2b:0b:92:bd:
82:25:7f:a1:91:f4:76:4c:85:3d:f7:5c:73:82:ce:
c2:79:37:83:ab:f3:3b:b2:96:23:44:b1:1c:14:b6:
78:d0:a4:b8:30:b9:b9:d8:9c:9b:25:da:cf:fe:ca:
26:ea:ce:36:60:f9:ee:84:f8:2b:e8:52:b9:43:ce:
8b:41:a8:cd:e5:cc:34:10:a3:37:0f:09:9b:0d:14:
31:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8B:71:79:03:16:84:7F:00:21:03:91:DF:3B:9F:47:BC:DA:9F:3D
X509v3 Authority Key Identifier:
keyid:D7:3B:40:AE:BF:88:C1:7B:1B:56:21:28:A5:6F:42:45:F2:F1:54:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ec:5d:d5:28:c3:b2:e7:64:d5:bb:70:2d:d1:bf:4f:ba:94:
bd:03:01:ba:fe:cb:8f:b5:c1:5e:fb:e2:44:6a:fd:6c:c1:df:
ef:4c:85:b1:e6:cc:fb:fe:53:54:85:2f:6b:e7:77:f2:7c:f2:
3d:86:6c:74:84:42:59:90:9e:07:5c:05:29:9b:6b:87:13:6e:
85:d1:cd:91:0d:ff:4e:d5:9a:de:89:77:4a:3b:00:47:4c:50:
11:e4:2b:4c:98:c6:01:78:d4:a8:25:79:8a:e3:e3:83:4b:8f:
1c:f8:4f:1b:1e:e6:ee:72:1a:32:75:57:d7:3e:db:f2:15:78:
69:e1:3d:47:7b:70:0b:d3:b9:42:2e:d5:b2:bc:26:f1:5a:96:
a9:14:cd:4c:db:5d:d5:25:59:3e:47:77:36:3a:fa:6c:34:b3:
a9:f5:86:f9:08:0f:78:f9:e1:43:0a:84:f6:84:1e:b7:35:34:
18:1a:25:95:f0:ad:5f:d5:bc:b4:94:c4:d7:27:a9:cf:68:3a:
80:3b:f3:bf:d1:68:bc:0c:7a:82:c8:f2:f3:6f:fb:13:4e:1c:
65:79:a5:b9:4b:56:9a:72:bd:40:8b:19:46:dc:4c:6a:e3:71:
60:5d:12:d4:77:3d:f9:7c:35:0f:06:39:b5:ef:eb:6f:e5:d7:
03:07:72:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:37:42 2025 by rpki-client