Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
File: 1-eZZ5-721ztobrHSlWxx875bvXc.mft (raw, json)
Hash identifier: qEoi5vJMuqIfJy4OIB5mKwFEe+O0zsdrnDPahcXcAl8=
Subject key identifier: F4:05:BD:82:F6:C7:5B:B6:D2:F4:71:67:64:9A:40:72:A9:4B:3C:03
Authority key identifier: F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77
Certificate issuer: /CN=f9e659e7eef6d73b686eb1d2956c71f3be5bbd77
Certificate serial: 019896DC3B2A9007BD9EF44544B4B75B752A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
Manifest number: 1628
Signing time: Mon 11 Aug 2025 02:01:11 +0000
Manifest this update: Mon 11 Aug 2025 02:01:11 +0000
Manifest next update: Tue 12 Aug 2025 02:01:11 +0000
Files and hashes: 1: 1-eZZ5-721ztobrHSlWxx875bvXc.crl (hash: 6UB3WlVPemClTd94d33jAdUAHw78FCgXdVNiVOpnSGU=)
2: RRxWR41Hund7xXvTLqB2r5qi970.roa (hash: rUpiHcsIUELuq5TefHF1+krXhbgfuQVPMP1TCObsJG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:dc:3b:2a:90:07:bd:9e:f4:45:44:b4:b7:5b:75:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e659e7eef6d73b686eb1d2956c71f3be5bbd77
Validity
Not Before: Aug 11 02:01:11 2025 GMT
Not After : Aug 12 02:01:11 2025 GMT
Subject: CN=f405bd82f6c75bb6d2f47167649a4072a94b3c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:12:31:5e:b8:9e:14:51:d7:c6:a1:a3:1c:a0:
c1:54:50:1f:6a:fd:81:de:cd:49:ab:00:de:ac:0b:
26:3c:53:ad:c0:8b:65:93:11:ca:ca:2b:66:d7:a1:
c2:fa:47:11:a4:bb:e2:8f:2c:ed:a3:e6:94:78:a5:
88:73:e4:1b:a6:c5:38:1a:f6:05:ad:ca:96:59:27:
e5:f7:de:23:e5:f4:b5:41:ad:8d:c9:ef:2d:55:16:
4c:60:87:c6:5c:0c:d5:a5:28:d5:7a:7a:66:33:b9:
56:18:93:9d:b6:74:0d:64:ca:00:28:a4:2d:f8:98:
dc:2f:63:13:2a:07:98:fa:a3:81:09:fa:e3:54:c1:
59:8a:4c:c0:7c:a1:7f:ed:aa:c3:15:49:d2:19:a1:
51:ad:ae:4e:a6:8d:e8:60:97:fd:14:2b:43:2d:c4:
bc:a5:5a:b2:98:0c:85:39:c2:8f:12:01:65:67:72:
8f:87:2d:7c:e9:85:c9:0e:13:b9:1c:f1:06:97:11:
d8:6b:41:b4:b7:70:2c:d0:45:bf:ea:26:8f:25:87:
de:e9:f9:6b:83:a2:11:93:14:3f:45:b4:4a:9c:95:
c9:db:9e:f8:c1:13:46:ad:8e:29:a2:f8:11:02:c0:
46:ec:35:c3:21:b5:25:22:14:54:f4:a1:6d:79:0d:
03:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:05:BD:82:F6:C7:5B:B6:D2:F4:71:67:64:9A:40:72:A9:4B:3C:03
X509v3 Authority Key Identifier:
keyid:F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c4:f0:44:e5:88:aa:30:8e:2a:46:54:ba:1b:3e:e7:58:5e:
a5:e7:e9:c5:4e:85:48:30:9c:24:26:1e:fa:58:da:53:00:8e:
a2:7f:47:aa:b5:3d:e0:8a:3e:a3:50:e1:ad:09:6e:a9:30:b1:
5e:59:ba:99:e2:9c:48:a7:20:00:98:6d:9c:44:a0:c9:62:d0:
ef:55:eb:37:77:de:c0:9c:bb:d9:48:c0:b3:1d:7c:60:0f:04:
6c:61:39:24:62:fd:a4:17:6a:85:83:cf:c3:d1:5e:1d:03:84:
3b:07:b5:e7:5a:07:91:eb:47:cb:69:28:ff:c6:af:09:8b:82:
27:6a:b5:70:ba:65:22:d2:a3:1e:20:3c:ee:a0:7c:75:d7:f0:
d6:82:2b:39:64:49:d4:7b:98:99:dc:bc:80:f3:e7:71:d0:7d:
1b:ff:68:e6:d4:dd:6b:08:96:e2:1f:0a:83:27:91:9a:6c:40:
10:fe:66:0d:38:d0:ae:04:5a:e3:f4:d2:6a:75:0c:c9:38:a0:
57:1f:02:fc:f1:97:03:15:13:e1:72:5a:c3:8e:c3:23:b7:ac:
27:c7:0c:f2:d5:a0:f4:c0:cc:ff:e9:77:ac:0f:b3:ac:5f:43:
cf:04:48:62:31:fb:1a:30:f4:87:db:8a:62:35:ae:97:cd:68:
88:dc:ff:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:28:33 2025 by rpki-client