Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
File: 1-DJywMMtsATwePh0uZ2poLfmOv0.mft (raw, json)
Hash identifier: 6fj6BhS/faFMmjB/oZ5zFYL9UL3p3cInFBVuqPHcrhk=
Subject key identifier: D4:18:E8:40:E9:4D:16:39:D3:7D:7A:8C:24:A4:4E:0F:27:6D:F1:B5
Authority key identifier: F8:32:72:C0:C3:2D:B0:04:F0:78:F8:74:B9:9D:A9:A0:B7:E6:3A:FD
Certificate issuer: /CN=f83272c0c32db004f078f874b99da9a0b7e63afd
Certificate serial: 01987C0A074823F459E18AFE66CDFA6AB31E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
Manifest number: 1000
Signing time: Tue 05 Aug 2025 21:01:28 +0000
Manifest this update: Tue 05 Aug 2025 21:01:28 +0000
Manifest next update: Wed 06 Aug 2025 21:01:28 +0000
Files and hashes: 1: 1-DJywMMtsATwePh0uZ2poLfmOv0.crl (hash: QiBCu6C/Iv9r7PEsez7jFsfNsH5M6rTg8L0Aj7TNOHU=)
2: xkD-bMrKpX5bvRCXR7n2flyNmqg.roa (hash: ANcTIXHVR2iM56VPGUlESg9hA4bfaEVpnPYR7NoEoeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 21:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:0a:07:48:23:f4:59:e1:8a:fe:66:cd:fa:6a:b3:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83272c0c32db004f078f874b99da9a0b7e63afd
Validity
Not Before: Aug 5 21:01:28 2025 GMT
Not After : Aug 6 21:01:28 2025 GMT
Subject: CN=d418e840e94d1639d37d7a8c24a44e0f276df1b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:69:eb:cf:56:bc:c6:12:40:bb:a2:b3:56:e6:
f9:17:eb:33:be:59:df:33:03:eb:9d:a1:ec:d2:61:
28:c2:82:7e:b3:2f:eb:96:06:05:9a:37:05:6d:0b:
9e:3b:7d:8d:6b:3d:a6:fb:28:f6:54:fc:49:c3:84:
c6:0e:e5:e6:d6:4a:73:65:9e:12:4e:0c:50:ac:f9:
b2:c0:66:09:ad:4e:1f:0f:10:91:8a:46:a8:71:e5:
aa:b8:e9:db:c1:45:32:b1:14:13:e2:1c:2e:cd:d2:
46:32:af:50:c7:71:61:30:a2:45:93:41:fd:55:20:
e4:54:40:33:54:46:78:4e:9d:3c:bb:9f:1c:85:b2:
46:33:1a:a8:68:5e:5f:f0:fa:ce:f9:a1:dd:d3:4f:
31:b3:78:82:64:df:a4:31:ad:a5:0c:ab:e6:e2:6b:
90:c9:67:88:fc:85:c3:45:78:1e:ca:68:cf:31:99:
98:ab:f9:e0:2a:2b:8b:56:38:0c:33:5d:a8:0b:9a:
1a:d8:08:89:3a:73:7f:3a:00:1a:3e:aa:61:37:4f:
e3:be:87:b1:f2:22:f4:51:ea:25:a7:b5:5e:61:72:
2d:7d:a7:fb:4a:54:b5:7d:c6:b5:13:b7:b4:6d:de:
f8:dc:73:bb:76:17:3b:18:97:e8:7c:c5:3c:96:97:
47:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:18:E8:40:E9:4D:16:39:D3:7D:7A:8C:24:A4:4E:0F:27:6D:F1:B5
X509v3 Authority Key Identifier:
keyid:F8:32:72:C0:C3:2D:B0:04:F0:78:F8:74:B9:9D:A9:A0:B7:E6:3A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d5:67:d1:3f:d2:44:a5:f9:b6:c5:a4:ee:ff:37:81:47:e5:
39:bb:c6:6e:6d:21:66:50:c5:94:ef:4e:ba:d6:5a:74:57:0d:
60:6f:2d:a4:91:0a:16:14:ea:a6:e5:79:4d:a6:01:a5:70:b5:
c9:03:53:9a:37:0e:36:bf:2a:4e:e0:0c:7a:3d:26:7d:ca:fa:
dc:28:27:e1:40:29:80:f2:b4:5b:95:92:63:1b:d2:34:12:0f:
67:c1:b1:ce:3a:9b:c3:d4:74:00:55:f7:a5:bc:10:91:fd:f8:
47:93:54:16:1e:ce:16:82:66:65:82:5c:0d:a8:d8:0b:ed:a4:
61:23:da:d6:10:45:cf:f8:f8:fc:d7:39:73:b7:44:92:07:14:
99:3e:d0:9d:bf:d3:33:fb:89:6d:5c:ec:93:e4:ae:21:8f:75:
ba:1e:b9:fb:05:be:ee:c3:17:ec:24:a9:56:8c:31:0b:82:9b:
84:08:2f:65:c7:64:0f:6d:f4:e6:3c:1c:1b:94:9c:4e:82:6f:
b6:21:a2:2c:31:54:8d:df:29:d8:4d:01:7b:1e:dc:ff:7b:f7:
ac:ed:0d:ef:2e:1e:48:da:4d:3a:03:a8:23:3b:89:08:bf:99:
69:42:26:f5:96:0a:f4:5f:78:4b:29:e5:16:c1:56:0c:ae:ac:
bc:f9:79:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:05:29 2025 by rpki-client