Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
File: 1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft (raw, json)
Hash identifier: 7pW57IeLvqJ1QkJjDkqhJaPosvFJaMT+1RDPERaKRZo=
Subject key identifier: 4E:45:F3:33:A2:AA:42:B7:FA:5E:20:DC:A4:73:B4:7F:B0:DE:8D:04
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 019880C25B3E5FF4053C21AD621987172F97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
Manifest number: 1649
Signing time: Wed 06 Aug 2025 19:01:17 +0000
Manifest this update: Wed 06 Aug 2025 19:01:17 +0000
Manifest next update: Thu 07 Aug 2025 19:01:17 +0000
Files and hashes: 1: 1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl (hash: my9iCVTlcX6oFItUzTcHG3YUjDIVZmCt1AICSMQtUxo=)
2: 6bP2Hbq7B8FfgSpm-g0RjnRG09M.roa (hash: dhy3foa2kdGd9tWYMEzVZ1K79M1Cxv3oKtbrCE9/V7s=)
3: 9rPnc621PCZSzvwMRaLBWF8yQec.roa (hash: aB0fVKMxCD/z6BkZVG11TiYmDJy+6wMvki78RDMmYco=)
4: DdbBxkSpqv27jL5VCitevUUKtGo.roa (hash: W2qQ5Ka9ZbfjONO7pHLlOm1UmxsrTkoa9epsQmZhKZM=)
5: bE8Ho3jzn5ez3wNgEgsfXEX5CVE.roa (hash: eJjvEgOEH8QmE+x4otf72HZmDOo9rzbz4V41257+u/g=)
6: gpzNMZcwo35-oTXOI3kYk3hJ2t8.roa (hash: ngODPWQb3vvd7XrB/GBFFEdeU0LiXPVPYCwgvVTHlW8=)
7: nx9moqlHgSMsf9HgtOFQ0KmEqlE.roa (hash: WzE9rCGNMfQ+mIxm9E1YIp9r6V0lkGRucRNG6aY0mCs=)
8: rIf0kB8Rc3IRATRBayI1xPvP3QA.roa (hash: Rx69uj0bTYsl5V2DHt7vMOyICCeb975OsfQSSz+LlmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:5b:3e:5f:f4:05:3c:21:ad:62:19:87:17:2f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Aug 6 19:01:17 2025 GMT
Not After : Aug 7 19:01:17 2025 GMT
Subject: CN=4e45f333a2aa42b7fa5e20dca473b47fb0de8d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:aa:08:4b:48:50:b5:ed:51:bf:9e:6e:14:77:
21:16:1b:77:83:87:8d:32:98:9c:4a:51:ed:a2:62:
2a:69:b1:1e:71:1b:f5:95:69:af:af:3d:c2:0f:2c:
2a:37:0a:e8:b3:3a:98:2e:1b:0e:79:40:50:d8:48:
22:47:94:71:69:bf:21:40:72:4d:ab:e2:74:5d:51:
0c:d7:13:9e:aa:9c:1c:d2:23:dc:95:0e:35:07:bd:
ba:d7:39:dd:c8:d0:2d:17:1b:73:a7:46:fd:20:c0:
91:33:53:eb:d6:32:e8:41:82:c8:c8:21:41:ce:f6:
c1:ac:f5:7e:51:32:a4:75:5f:d5:e3:4f:cb:e5:38:
92:d4:d4:13:11:1e:aa:e6:2f:8d:48:05:eb:8f:4a:
70:a9:cf:68:d7:3e:f0:c6:bd:ce:32:d0:04:0e:05:
60:40:33:ee:7c:31:7d:06:47:21:70:db:c8:fe:6b:
1a:62:cf:f1:ca:36:04:95:66:35:c6:f4:9a:f5:06:
8f:75:0f:c7:42:03:68:a3:e1:d6:89:d4:a0:5d:2a:
f1:9e:04:fa:1c:27:ea:32:e7:12:20:7e:a7:b4:84:
39:82:5a:57:cf:19:2b:27:17:cd:0a:2b:a9:94:ff:
4d:ca:fb:a7:d6:8a:4a:05:0f:4a:48:cc:a0:08:ef:
20:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:45:F3:33:A2:AA:42:B7:FA:5E:20:DC:A4:73:B4:7F:B0:DE:8D:04
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c1:6e:27:9e:bc:38:54:e8:97:34:7a:4a:89:b6:c7:fd:18:
12:e4:a4:38:e4:4e:12:dc:0d:43:c4:9b:ef:19:ec:c6:57:38:
6e:6d:c3:55:6b:74:2c:a0:e0:90:a0:39:62:4f:ac:ef:f9:3f:
af:7c:8d:cb:4a:84:67:92:f9:76:63:3b:75:47:07:f9:8c:dd:
a5:ba:f1:f3:49:62:5e:40:fb:22:44:f7:12:a8:98:fe:80:60:
04:bd:a8:b1:aa:08:22:94:d8:08:c2:e0:4b:25:df:8e:13:2e:
e3:49:34:6d:24:1e:02:7b:e8:ff:7e:b6:a7:66:fd:39:f0:d9:
7d:dc:d2:3c:1d:5c:05:de:7e:23:59:a0:f3:3a:b4:f9:cb:53:
6e:c4:5d:24:7b:9e:57:6a:a0:41:e4:01:e8:fd:49:58:53:51:
be:1e:ac:30:aa:a4:a9:80:08:6e:df:39:9e:ab:bf:5e:54:7f:
5d:fc:87:f3:83:08:ae:93:b2:70:5e:b2:44:b5:c9:4b:e3:49:
f9:d7:d7:65:44:11:3e:7d:7f:51:b1:86:60:f8:17:71:ef:18:
49:0e:6f:8a:2c:d4:46:28:e0:0b:25:9c:e6:00:83:c1:b2:ec:
80:60:13:17:f3:3b:11:00:46:61:fa:6c:57:3d:14:55:b9:14:
bb:97:35:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:03:05 2025 by rpki-client