Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
File: 1873Xgl6YxiGszyB9kql67wMMqA.mft (raw, json)
Hash identifier: i9em05L505lyLeTr4y6Gs3OXtBRW7VZHdeNaR+z/tMg=
Subject key identifier: 63:DB:46:4F:3D:A0:12:BA:C7:AF:86:E7:42:D3:41:69:16:D7:9E:F9
Authority key identifier: D7:CE:F7:5E:09:7A:63:18:86:B3:3C:81:F6:4A:A5:EB:BC:0C:32:A0
Certificate issuer: /CN=d7cef75e097a631886b33c81f64aa5ebbc0c32a0
Certificate serial: 019893DA8D3B374363E5BE69CAB9866AF01D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
Manifest number: 0458
Signing time: Sun 10 Aug 2025 12:00:30 +0000
Manifest this update: Sun 10 Aug 2025 12:00:30 +0000
Manifest next update: Mon 11 Aug 2025 12:00:30 +0000
Files and hashes: 1: 1873Xgl6YxiGszyB9kql67wMMqA.crl (hash: CGUpgETieGv8st2NOFv+0XNikbrBbff7hsaQOXaeTZY=)
2: tavXsXu7Wm_kIdKnzfVPzxktMGQ.roa (hash: PDEUyoKVmJLpE4EXJZCm2eA6jcMg8DukO+sjxPMBeZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:da:8d:3b:37:43:63:e5:be:69:ca:b9:86:6a:f0:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7cef75e097a631886b33c81f64aa5ebbc0c32a0
Validity
Not Before: Aug 10 12:00:30 2025 GMT
Not After : Aug 11 12:00:30 2025 GMT
Subject: CN=63db464f3da012bac7af86e742d3416916d79ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:eb:56:b2:72:23:fd:02:1c:1f:60:3c:66:45:
85:99:05:3e:d9:3c:16:c5:e5:61:ec:07:75:69:1e:
5e:37:ea:0e:a4:3c:9b:8d:90:01:9c:08:93:cb:3f:
dd:63:32:42:dc:ab:69:ae:d2:d1:cc:79:4c:8e:1d:
f7:e6:22:99:8a:a0:e3:22:64:85:88:2d:dc:85:55:
5e:27:8c:a1:21:ce:d2:3f:ac:8c:f2:4b:71:94:05:
e3:84:69:2d:dc:cc:d5:60:87:9a:7a:42:1c:e7:12:
ca:34:6c:50:99:07:8f:3c:33:c5:69:22:1b:90:b3:
c4:e1:8b:a1:e7:ba:96:be:d3:7a:05:7a:ab:9f:cb:
0f:13:24:37:82:46:c6:88:38:3e:58:85:27:97:ba:
e9:a7:8d:0c:c1:d3:aa:c4:89:2b:d9:54:f2:7c:1d:
95:05:ac:b0:b6:6e:07:8d:ca:1f:7c:7a:97:9b:f1:
14:26:df:6d:16:53:8a:8d:81:39:69:d7:f6:ac:fd:
1a:7b:de:86:b6:86:1b:0f:cc:a7:8b:7b:94:8d:fd:
ba:6b:93:a4:4f:cf:7d:c5:ef:9c:5a:13:a3:05:af:
6f:06:0a:8f:2c:47:0a:52:ea:7d:c8:75:97:70:58:
0c:5c:75:87:f4:1c:32:a0:0e:0f:ef:6f:19:10:71:
33:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DB:46:4F:3D:A0:12:BA:C7:AF:86:E7:42:D3:41:69:16:D7:9E:F9
X509v3 Authority Key Identifier:
keyid:D7:CE:F7:5E:09:7A:63:18:86:B3:3C:81:F6:4A:A5:EB:BC:0C:32:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:21:6b:23:2c:e2:47:62:79:df:6d:d5:09:b1:24:2e:1c:fb:
eb:2c:4a:e1:a0:ec:8c:b6:14:c9:78:d9:4d:6c:a6:a1:53:55:
fa:16:68:5c:0b:ed:2a:10:45:2a:99:ae:6a:d5:37:53:53:fd:
d3:e0:4c:ae:6d:bd:3f:85:62:f4:45:3d:7c:ea:6a:0c:a7:f1:
5c:a4:a4:05:fa:f7:39:99:5b:53:33:bf:06:0f:5f:bd:19:7b:
38:1b:6c:47:9c:3a:34:70:88:39:ce:70:e2:f7:df:a0:37:fe:
3b:30:36:00:72:f1:35:f5:05:ea:ed:fa:50:f6:e1:17:6a:5c:
e4:83:f3:de:54:09:1a:87:b5:ec:2a:e4:c5:55:2f:f0:47:28:
30:22:6f:b4:8b:11:6c:85:40:20:0a:10:fc:b7:d7:6e:51:46:
83:0a:0f:a0:5c:d9:b8:4a:c2:c0:99:07:45:da:71:0e:c8:99:
1e:23:3b:62:31:c3:80:1d:de:4c:64:92:36:92:a4:9b:ad:09:
58:62:4d:dd:a3:e8:38:33:35:ce:4d:1f:1c:32:4c:e3:2d:c5:
37:84:85:60:8c:24:56:4c:b2:15:1d:5d:e4:9d:9d:a0:6f:4c:
b3:99:c6:8a:5f:b3:28:3c:cf:42:a3:76:0d:b6:7b:17:c8:f4:
7f:1c:a0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:59:20 2025 by rpki-client