Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
File: v1M926H4p23i70lx_NUvlEHOCYk.mft (raw, json)
Hash identifier: 6bLYKPjiE1UUXu4nEGyZO8xs5/GkUCoBbbsZs0BOHuc=
Subject key identifier: 37:FD:74:3A:5B:F8:A3:E6:A6:15:42:04:73:25:9C:D4:BD:BC:C8:EA
Authority key identifier: BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89
Certificate issuer: /CN=bf533ddba1f8a76de2ef4971fcd52f9441ce0989
Certificate serial: 019873E27577281462F75852ABA79045ABD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
Manifest number: 1052
Signing time: Mon 04 Aug 2025 07:01:17 +0000
Manifest this update: Mon 04 Aug 2025 07:01:17 +0000
Manifest next update: Tue 05 Aug 2025 07:01:17 +0000
Files and hashes: 1: v1M926H4p23i70lx_NUvlEHOCYk.crl (hash: 49B2jk9Wv/xkKp0YfdjBPen5i6GMotcB5EBxR4VV7Os=)
2: wIL-REFz4DYY-rRWvHtgF8VAa9w.roa (hash: 0FFPo6/uMpZSHo3dFvbnUBqikS2pyiKoisgVQpgN98I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:75:77:28:14:62:f7:58:52:ab:a7:90:45:ab:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf533ddba1f8a76de2ef4971fcd52f9441ce0989
Validity
Not Before: Aug 4 07:01:17 2025 GMT
Not After : Aug 5 07:01:17 2025 GMT
Subject: CN=37fd743a5bf8a3e6a615420473259cd4bdbcc8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:24:1d:64:22:c3:ce:1c:e0:65:ba:80:86:5c:
39:3a:8b:67:6b:98:b1:42:98:56:06:13:9e:e3:eb:
ee:b6:5d:2b:dd:93:4f:41:91:c7:6b:ff:a6:77:31:
55:86:3e:7a:74:06:bc:c6:cf:82:34:e8:22:a6:d2:
13:e1:12:1e:6e:6b:a2:f6:1b:50:ad:b2:15:29:5a:
dc:1c:2c:57:c8:57:77:5b:4e:34:e9:0b:59:31:08:
7c:af:0c:ea:44:34:4d:ac:4b:9f:2b:c6:d3:b5:ad:
a1:bf:0f:fe:79:d2:f0:18:27:e5:72:c7:4b:e8:db:
aa:31:04:2d:e2:3e:4a:55:c7:47:e1:3c:d1:e0:50:
6f:ee:19:93:ab:2a:a1:9b:ca:e9:42:4c:70:ea:63:
66:48:32:2a:0a:ac:5f:93:52:4e:67:72:a5:21:4c:
1c:63:4c:c6:8e:d7:4d:92:a2:e1:2e:66:42:35:d4:
36:a5:da:a5:42:4c:8b:1b:76:10:98:35:6a:00:f3:
d0:3c:3c:5f:29:d2:34:d0:7e:46:a5:05:e1:57:5a:
30:22:6f:dd:5f:4d:23:32:70:d8:c6:e0:86:5e:7e:
fd:4c:a7:b5:9f:8f:c9:e5:0e:7a:59:c1:d5:f7:ce:
67:f0:7c:b3:c0:64:67:2e:79:7f:40:be:70:14:7c:
36:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:FD:74:3A:5B:F8:A3:E6:A6:15:42:04:73:25:9C:D4:BD:BC:C8:EA
X509v3 Authority Key Identifier:
keyid:BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:1d:93:08:df:15:3f:8e:d6:c6:81:17:58:a1:bf:db:fe:84:
a7:2a:a6:70:d0:6e:1d:58:2c:4a:00:fc:2b:a1:63:36:1c:f2:
34:92:42:00:90:f7:5b:3a:92:eb:f8:ab:61:9a:28:50:02:03:
2f:28:ac:d0:65:90:96:0f:26:d5:de:b8:d7:fe:48:5e:8a:1d:
a2:a4:1f:d7:9e:d3:9e:da:ee:b0:27:1b:ea:c8:ed:6c:91:8c:
ac:7f:34:e9:50:62:b2:5a:21:da:43:12:7f:5f:4c:e5:be:20:
45:6b:61:ae:f4:a6:1c:83:b1:a9:60:94:8c:30:7f:e3:e9:ba:
ff:7a:b4:7b:23:33:78:31:ca:29:08:67:46:18:0f:c7:e0:ac:
d1:f9:cc:76:b1:d3:e9:7f:aa:00:49:84:a4:da:a0:4d:90:89:
16:36:fb:60:4b:77:96:87:e0:cd:55:6b:2e:19:a6:0a:23:a5:
a3:cb:20:37:2f:15:26:5a:3b:c0:68:3f:ea:31:90:0b:75:f1:
fe:51:6b:8a:9a:fc:52:63:ee:cc:03:ca:ee:96:16:ac:9a:51:
2c:62:c4:7d:19:f1:93:c4:6f:44:50:77:97:cf:e3:c0:5b:be:
89:f4:60:7a:be:53:93:e2:af:ca:c7:f3:c2:36:08:ca:44:3b:
bd:b4:ac:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:26 2025 by rpki-client