Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
File: 1-J31Ykj5d3-iLV2mwEtfszKks1A.mft (raw, json)
Hash identifier: uYDQZGduKtux0GQ3g/WBTkhU0Yb1ELkz+5tgTvFJRek=
Subject key identifier: 44:D9:0D:B0:77:ED:C9:B1:8B:70:72:0D:21:10:51:BE:59:8C:19:73
Authority key identifier: F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
Certificate issuer: /CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Certificate serial: 01988FC74EA921A19A301EEEECEE7159679A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
Manifest number: 1626
Signing time: Sat 09 Aug 2025 17:01:00 +0000
Manifest this update: Sat 09 Aug 2025 17:01:00 +0000
Manifest next update: Sun 10 Aug 2025 17:01:00 +0000
Files and hashes: 1: 1-J31Ykj5d3-iLV2mwEtfszKks1A.crl (hash: NlFYcBXOTLCDMnkK5WchanxUmoneZxyggqqTwnaB298=)
2: abknUv3T7rts3ssSLjO_9zGCj5A.roa (hash: ZduEHW/sDPXFbLZot8EAZU2ihlH8afniaTCGOengHk4=)
3: mP8GRv_PEh-gTNQakjVb0KSi0yk.roa (hash: lWbTaNbVD/rMCUMDyYuELByYeBZBnfrpjytIyODTMiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:c7:4e:a9:21:a1:9a:30:1e:ee:ec:ee:71:59:67:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Validity
Not Before: Aug 9 17:01:00 2025 GMT
Not After : Aug 10 17:01:00 2025 GMT
Subject: CN=44d90db077edc9b18b70720d211051be598c1973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:06:ec:a7:a3:ef:12:45:82:71:1c:34:b8:8c:
ca:0a:d3:3c:bd:aa:6a:41:12:5a:72:6c:59:0e:b1:
0c:32:b6:27:2a:a8:d3:4a:c8:0c:1c:22:cf:0d:07:
fc:70:db:d0:9f:66:ef:b3:50:08:ef:89:34:76:58:
17:68:99:05:0f:0d:07:c6:f2:20:83:78:c3:07:2a:
81:d6:47:22:87:4b:2a:30:96:dd:6b:58:e7:9f:2c:
e8:33:7f:8e:a1:cb:7d:12:93:2d:f5:be:2a:28:06:
52:ae:4b:b7:7d:92:dd:33:86:43:58:35:e9:a3:42:
18:be:f9:32:eb:b0:30:09:5b:18:67:77:c7:47:15:
a4:cc:36:be:11:93:71:b1:14:81:59:b2:e8:19:b5:
b3:b3:de:cc:1f:f4:e0:ca:f2:2d:9a:d0:78:fe:ec:
a6:c0:08:a2:bb:73:86:9b:a2:f1:b3:21:d2:47:8d:
bb:b5:65:d4:43:67:30:eb:4f:f3:cc:ed:0a:cf:3b:
8a:6e:5c:a2:24:b3:97:a4:89:fc:ca:14:ae:3e:d1:
02:63:fe:0e:04:ba:ba:89:e7:7c:35:44:83:b4:00:
fe:bc:63:e2:84:7f:98:17:53:a3:d7:65:4b:5e:c2:
80:85:df:4f:48:d7:d5:1f:d3:69:86:7a:69:cf:0f:
01:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D9:0D:B0:77:ED:C9:B1:8B:70:72:0D:21:10:51:BE:59:8C:19:73
X509v3 Authority Key Identifier:
keyid:F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:6b:b9:f3:57:77:72:5f:07:e3:12:98:e2:f2:8a:fa:c0:e5:
86:26:f5:77:53:8e:e9:84:44:b7:5d:98:19:b9:de:6a:86:a0:
df:8e:0d:84:16:df:e0:e2:7e:52:a5:b1:78:25:29:5f:0b:b5:
af:3d:cf:85:86:f1:cb:50:0a:e4:a0:e4:d9:75:ee:bc:87:90:
dc:f5:d9:6b:39:7b:c9:cd:6c:5b:2e:90:c0:29:9d:7c:45:6e:
49:28:62:40:0e:59:d9:21:58:bc:b6:a9:f4:01:14:7d:50:86:
4e:cc:10:0c:a5:09:29:28:37:ea:e9:45:df:da:37:6c:47:56:
c6:4e:65:9f:7e:cd:10:6c:4b:ec:bd:64:1a:07:a6:55:04:4a:
2a:f0:75:33:01:6e:13:43:cf:0b:66:15:d9:a3:83:fb:46:34:
3e:af:9d:cf:ff:88:40:82:70:77:2c:1a:cb:a8:69:10:8b:f8:
d0:f9:c9:02:24:f6:3e:47:a2:86:b3:b1:a0:c8:3b:62:ae:d3:
81:10:04:e9:db:17:0b:8e:2f:cf:d1:d2:3e:3a:82:9d:d3:3d:
d3:3f:60:a3:aa:c3:0d:db:96:eb:67:87:ea:28:09:bf:f9:ac:
5f:9d:20:7e:b4:bc:2e:77:9a:0d:68:12:03:69:13:e8:02:af:
05:3a:c2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:49:29 2025 by rpki-client