Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
File: 1nXJVO45yR5SX2izBxygV41qW64.mft (raw, json)
Hash identifier: 9crtXO8XJvLctv4WHkJ+SvrxI5egkUcfUMZCnKqwgzw=
Subject key identifier: 92:21:74:ED:83:5E:D5:9C:6E:64:F2:46:7B:5E:28:52:47:2C:D6:5A
Authority key identifier: D6:75:C9:54:EE:39:C9:1E:52:5F:68:B3:07:1C:A0:57:8D:6A:5B:AE
Certificate issuer: /CN=d675c954ee39c91e525f68b3071ca0578d6a5bae
Certificate serial: 01987F7870ADE649826D52B85D4B5EA87571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
Manifest number: 1619
Signing time: Wed 06 Aug 2025 13:00:56 +0000
Manifest this update: Wed 06 Aug 2025 13:00:56 +0000
Manifest next update: Thu 07 Aug 2025 13:00:56 +0000
Files and hashes: 1: 1nXJVO45yR5SX2izBxygV41qW64.crl (hash: WNzjw86rZtstihp3Z+ZYFjeH0bWuq20nqUdU/hABJPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:78:70:ad:e6:49:82:6d:52:b8:5d:4b:5e:a8:75:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d675c954ee39c91e525f68b3071ca0578d6a5bae
Validity
Not Before: Aug 6 13:00:56 2025 GMT
Not After : Aug 7 13:00:56 2025 GMT
Subject: CN=922174ed835ed59c6e64f2467b5e2852472cd65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:dc:9e:ca:95:b4:6a:16:b1:34:f8:81:3c:d8:
29:dc:7a:3d:6a:00:39:7a:21:5a:ea:36:ef:73:34:
f7:df:8e:1a:e6:e6:41:e1:c1:1a:b2:67:67:c0:dc:
fa:b5:ee:be:17:5f:3c:e1:6c:ec:8e:73:aa:d0:da:
a0:14:08:b1:1f:c3:25:ae:31:dc:e7:6f:22:59:8f:
46:b4:1a:87:58:40:4e:ff:fa:bd:3b:dc:c6:33:39:
0c:cf:5c:ab:8a:a3:33:62:41:fa:ba:a3:ee:6c:73:
af:12:e1:aa:e7:65:9b:8f:f3:72:2b:d5:d9:40:80:
87:d0:fd:da:9d:36:bd:49:65:3a:5b:68:68:8b:3e:
bc:8a:89:a5:7a:ff:92:46:01:83:d1:e1:86:89:e0:
b5:e1:de:f9:60:de:7c:8f:2a:88:f2:4f:65:3a:ed:
2f:29:5d:ee:b0:08:ad:9c:03:7f:09:8f:6f:63:25:
6b:5f:50:63:d4:2a:b2:f2:a7:e5:67:08:a2:5d:c7:
1a:66:ba:cb:18:d3:80:95:84:f7:62:07:c0:3b:69:
1d:e2:01:88:4c:3e:15:bd:7c:79:3b:a9:9f:e5:02:
be:c2:68:51:aa:62:71:e5:a0:24:6e:b0:2f:95:c6:
8d:cc:a4:b5:99:c9:4a:9b:89:cb:5e:6b:83:5d:5c:
37:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:21:74:ED:83:5E:D5:9C:6E:64:F2:46:7B:5E:28:52:47:2C:D6:5A
X509v3 Authority Key Identifier:
keyid:D6:75:C9:54:EE:39:C9:1E:52:5F:68:B3:07:1C:A0:57:8D:6A:5B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f7:d9:af:a7:05:2c:b5:76:59:8d:5b:56:62:e4:ba:4b:ba:
ec:61:44:b2:eb:7a:95:24:2c:57:ab:6e:06:8d:12:bf:49:7b:
59:04:fb:b4:5d:9e:e3:64:1e:3b:5d:bc:31:85:83:4c:7b:aa:
87:06:25:b9:c6:8b:f3:64:2a:bd:6a:59:30:9c:ea:87:a4:50:
fa:df:ed:fc:ac:cb:12:c1:88:de:a5:ae:dd:39:eb:3a:ac:e0:
75:ee:1a:c1:51:ca:d2:a7:0d:39:53:cb:e1:a8:26:cd:96:16:
39:38:40:26:42:48:9a:9e:f9:91:f1:ff:22:d5:c4:6d:53:a9:
ee:c6:62:da:16:c7:48:ae:8a:6b:cb:62:9f:2e:2a:8f:45:4d:
5d:a8:31:68:c9:1c:67:a1:5a:e9:af:f7:3c:55:04:a8:c0:16:
27:a6:d7:45:7e:f6:ee:1a:4c:1c:50:52:18:60:ae:b6:6b:be:
4a:b0:6b:c6:fd:f6:50:f1:38:c9:72:0a:a7:a0:55:4f:14:a6:
f2:c4:14:1a:c1:e4:dd:e1:fe:23:7c:5a:2f:15:4e:ec:45:2d:
f3:7d:8e:ce:8e:c4:a7:b1:a4:b1:1d:7c:c4:ef:0a:2e:36:78:
0b:e5:08:58:55:0e:cc:65:05:69:9f:61:fb:bf:d8:f4:12:fd:
52:df:de:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:04:11 2025 by rpki-client