Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
File: 1DdYFDRN8L9tAXczrNxIjwAmMbI.mft (raw, json)
Hash identifier: 2whe7MUcYRWcidaSwDQu3YmJPcBCociTZ1xmtcCAKF4=
Subject key identifier: 3F:3A:7C:2D:41:00:CC:82:F1:45:A6:E0:FD:CB:88:2B:8C:5C:FF:B5
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 01988242A3A913BE980A8CAD23DEC8807E0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
Manifest number: 163B
Signing time: Thu 07 Aug 2025 02:01:01 +0000
Manifest this update: Thu 07 Aug 2025 02:01:01 +0000
Manifest next update: Fri 08 Aug 2025 02:01:01 +0000
Files and hashes: 1: 1DdYFDRN8L9tAXczrNxIjwAmMbI.crl (hash: 2zRJGpC3YVI4md5o6DYTCIHVygGr79NqhO3ThNnRjpg=)
2: gWi1LUFL20CRpp3-96ricHb7LOM.roa (hash: 5zUKjRHLQszQi/sfeD3PJp+bFxJUTbIBets9GADGbUM=)
3: kB9cAhV9F3NlODRT7TjrXEPyRnA.roa (hash: F03Hqfl3wd5NxqjFi4e8XEepN0xlDsOdLzMn6Oyc4yM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:42:a3:a9:13:be:98:0a:8c:ad:23:de:c8:80:7e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Aug 7 02:01:01 2025 GMT
Not After : Aug 8 02:01:01 2025 GMT
Subject: CN=3f3a7c2d4100cc82f145a6e0fdcb882b8c5cffb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:17:bf:f3:f9:24:92:e2:0f:9e:f9:89:03:06:
2a:9e:00:03:1e:36:76:cd:53:98:2b:70:b7:7c:ba:
e4:58:7b:ae:1c:32:f8:5b:06:82:35:5a:3e:0a:f6:
5e:1d:00:44:9d:2a:ad:7f:aa:cc:ac:09:a6:df:d5:
a6:87:71:4a:35:73:34:ab:91:5d:27:63:f7:67:31:
46:0e:5d:ed:70:ec:45:bd:33:b8:da:e4:a7:eb:10:
40:7a:8e:8c:52:c6:0a:bc:d4:e2:fd:cd:39:73:d1:
a9:52:4c:aa:af:b0:6f:46:95:74:46:5d:60:63:7d:
c0:b2:24:6d:27:3b:31:a5:eb:89:98:8a:11:88:ca:
da:ff:1e:57:7a:7c:28:f5:01:29:4c:17:5f:4a:eb:
e2:33:a9:e2:6f:d2:b3:ac:f6:f2:35:4c:e6:9c:2c:
7e:d6:22:9c:d9:f4:c3:53:72:5a:44:b9:66:a8:13:
f9:ee:80:2c:1b:70:a1:1e:51:7c:41:a3:5b:3f:ae:
2c:ac:c5:52:42:c8:03:79:e0:8d:88:d8:e9:73:24:
a1:01:25:39:9a:2d:47:4b:fa:8e:36:ea:bd:86:93:
c6:aa:aa:00:f0:88:27:22:31:97:95:aa:6d:11:cc:
43:53:72:fb:82:ef:e9:f9:9d:fa:ef:e8:d2:cf:fc:
76:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3A:7C:2D:41:00:CC:82:F1:45:A6:E0:FD:CB:88:2B:8C:5C:FF:B5
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:86:92:f6:81:37:b0:08:98:9f:38:74:c0:55:df:90:97:8d:
1f:70:65:f7:12:b4:dd:ac:74:a0:26:59:f3:18:c8:e4:94:21:
19:45:fd:62:c2:ad:65:cb:59:dd:9a:ac:a1:a7:62:b7:79:91:
4a:a6:8c:f2:d6:2f:90:08:dd:4e:bf:2d:ba:d3:9e:f9:08:d9:
b9:e3:88:9b:77:9d:08:36:ee:34:ec:ae:e0:a4:29:a0:f2:5a:
1f:f3:65:7a:e4:dc:c4:e5:6d:69:96:97:d1:ef:e8:59:01:ee:
e6:ca:49:9d:f1:f5:39:cd:65:aa:2f:10:df:ea:c6:95:cd:e5:
6c:f1:29:3e:67:be:f6:31:1a:6b:a6:d0:70:34:e5:88:56:50:
08:7a:dc:51:b9:c6:aa:ba:4b:72:b1:39:6b:78:a6:40:36:f1:
0c:0b:af:64:9c:fb:0d:44:20:d5:c3:eb:08:21:12:9d:6c:52:
5e:74:2f:9f:d0:68:bb:85:ad:07:c0:a2:e5:4a:54:f7:90:00:
e6:ac:17:d4:ec:36:97:1d:19:54:0a:0c:9e:f6:d3:65:fc:ac:
4d:5a:15:70:91:65:a1:3a:55:de:55:83:5e:16:35:9f:ef:12:
08:fa:bd:93:e1:90:fc:5b:71:0f:4d:e0:d2:cd:3e:a0:17:4d:
98:7b:bc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:01:43 2025 by rpki-client