Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.mft
File: 1j1VKb2hdxPr5rTCL3_OTLjx6LM.mft (raw, json)
Hash identifier: TYNuWSH91AjtVnPty3aDXb9aBOcRgZmfuRGsIJ5fM+A=
Subject key identifier: A5:4F:F6:8D:66:77:3A:AE:8F:A4:A2:10:6F:34:2F:69:1B:82:9C:6B
Authority key identifier: D6:3D:55:29:BD:A1:77:13:EB:E6:B4:C2:2F:7F:CE:4C:B8:F1:E8:B3
Certificate issuer: /CN=d63d5529bda17713ebe6b4c22f7fce4cb8f1e8b3
Certificate serial: 01987A1B394FCFC2E666E9C54C5459E0706C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1j1VKb2hdxPr5rTCL3_OTLjx6LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.mft
Manifest number: 135C
Signing time: Tue 05 Aug 2025 12:01:00 +0000
Manifest this update: Tue 05 Aug 2025 12:01:00 +0000
Manifest next update: Wed 06 Aug 2025 12:01:00 +0000
Files and hashes: 1: 1j1VKb2hdxPr5rTCL3_OTLjx6LM.crl (hash: 1M2RpJpCeL1e/gihkpgmrFhmqvjgJLMBCui4X7yOThQ=)
2: OialHmpN2PfgJDs6a7B2v4zJHRs.roa (hash: Xr6Ys8oUxUhvsBwxBXXCldMQezaqpARcpSeHUjpkSck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1j1VKb2hdxPr5rTCL3_OTLjx6LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:1b:39:4f:cf:c2:e6:66:e9:c5:4c:54:59:e0:70:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d63d5529bda17713ebe6b4c22f7fce4cb8f1e8b3
Validity
Not Before: Aug 5 12:01:00 2025 GMT
Not After : Aug 6 12:01:00 2025 GMT
Subject: CN=a54ff68d66773aae8fa4a2106f342f691b829c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:dc:d8:87:49:e3:5e:8b:54:36:f8:b6:48:5b:
a3:13:d6:d2:d2:d6:fb:d6:b8:8e:27:02:1c:3a:0a:
3a:1d:e2:b4:c2:e5:27:6a:d7:bc:ec:ff:9c:f2:fc:
ce:93:ef:d5:a1:91:80:28:46:7c:bd:29:d7:5c:22:
85:af:ed:7b:e4:77:c5:f1:6b:19:e1:c1:d3:31:3c:
8e:5a:eb:16:e5:f2:c1:94:b0:ad:90:4a:1b:bc:c1:
27:56:32:99:06:80:f3:14:81:4e:54:eb:f9:f4:0d:
87:3e:1f:04:34:7a:85:72:17:e1:63:f9:43:8d:20:
13:ed:8a:1e:51:d5:ca:95:77:c7:85:d4:91:c9:64:
28:4c:3b:63:f9:9f:71:b1:55:cf:31:8e:b4:f6:fc:
51:73:cf:74:fe:93:4e:0b:76:b8:d4:d5:f4:e8:6d:
89:1b:4a:0f:89:68:39:63:97:0e:30:2a:d3:92:71:
76:85:7d:32:3b:87:04:cd:a0:31:37:1a:79:a2:7f:
d2:3e:ee:36:cd:4f:e0:01:6f:f8:42:7d:11:d9:20:
c4:c4:52:6f:a6:a2:2d:d6:71:b7:93:72:33:e1:0d:
92:b2:76:0d:30:5a:40:db:58:93:c5:f1:58:54:05:
07:33:57:f7:0c:c8:2e:04:68:2b:42:5e:7e:f2:40:
01:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:4F:F6:8D:66:77:3A:AE:8F:A4:A2:10:6F:34:2F:69:1B:82:9C:6B
X509v3 Authority Key Identifier:
keyid:D6:3D:55:29:BD:A1:77:13:EB:E6:B4:C2:2F:7F:CE:4C:B8:F1:E8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1j1VKb2hdxPr5rTCL3_OTLjx6LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:0d:43:c0:1f:20:aa:0a:10:f5:7e:72:97:c7:cd:60:8f:47:
e7:c1:db:15:51:42:ce:1e:0e:9b:2f:d1:8e:56:51:de:72:bd:
72:c0:c0:ac:41:a3:b6:ad:c3:81:1e:67:19:08:29:2b:65:c0:
80:53:a4:9f:b2:f2:eb:9b:91:b1:e8:e6:a6:f0:59:d1:f1:46:
1d:ca:c1:e7:32:3b:0d:5c:ea:b2:97:cf:0e:36:ac:63:7c:89:
1d:94:ac:7e:19:a1:f3:2a:ba:54:6f:dc:13:a3:2a:b9:04:85:
b7:47:d0:4a:9e:46:72:b0:36:6c:76:37:24:da:45:8e:1e:f7:
c6:ba:31:ff:61:7e:a1:89:d8:04:5b:af:b0:6f:9b:c0:6c:72:
28:67:c6:51:6e:77:ec:50:b1:a7:19:b3:78:ae:3f:60:da:8f:
b8:f5:7b:5f:c6:01:e1:21:da:72:36:f1:dd:02:7f:33:2b:3b:
a6:f4:4c:6f:de:6f:e4:65:21:0f:c6:65:30:63:6b:cd:5f:b7:
2a:b2:61:61:53:cc:d9:c3:ed:d0:43:0c:db:57:f9:d1:88:a8:
f2:f5:93:03:c1:f8:0e:da:50:2e:d6:c6:30:12:6d:a3:69:4e:
3f:8b:44:26:81:57:2f:94:12:ee:bd:c5:de:60:1c:b5:ee:78:
ad:cb:d9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 19:59:28 2025 by rpki-client