Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
File: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft (raw, json)
Hash identifier: wxWG0mXFRbKsouEblsWiFm2keF1z4qHQTBP5znlLF7c=
Subject key identifier: C0:7A:B4:34:7B:4B:BF:1A:98:69:D4:4B:26:77:E4:A0:6E:66:2C:42
Authority key identifier: D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
Certificate issuer: /CN=d5a193671dc59d76fc311db2d6689a3c88299094
Certificate serial: 01987DF824BA153B513F124687A00348195A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 06:01:10 +0000
Manifest this update: Wed 06 Aug 2025 06:01:10 +0000
Manifest next update: Thu 07 Aug 2025 06:01:10 +0000
Files and hashes: 1: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl (hash: YgYXp8WZLpsbF7UU+4UXGMDJhI1f/weGPI6nbVBtgx8=)
2: ceTKZ_Kbl5fdTbjM1BoGVl6TegM.roa (hash: DR/tSwdyZFDYwu3nLD2VKueV4ylVlrU59jgXrK70o90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:24:ba:15:3b:51:3f:12:46:87:a0:03:48:19:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a193671dc59d76fc311db2d6689a3c88299094
Validity
Not Before: Aug 6 06:01:10 2025 GMT
Not After : Aug 7 06:01:10 2025 GMT
Subject: CN=c07ab4347b4bbf1a9869d44b2677e4a06e662c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:72:32:33:b7:e3:87:19:20:58:d4:8b:35:3e:
11:dd:b5:90:55:10:01:21:21:a1:38:36:9c:f4:be:
1a:35:2d:3d:9d:5f:6a:3d:5c:08:2a:f8:97:cd:40:
1d:b1:46:c7:b5:d1:2e:db:53:f2:2e:98:6d:d2:8c:
2e:d7:a0:12:72:df:4e:51:5a:7a:df:aa:d0:25:50:
50:63:cf:ae:32:94:3a:dd:8b:85:a2:83:91:f9:9a:
e6:28:90:42:9c:ba:f7:25:af:4a:26:4d:a8:a0:a8:
d7:c3:ea:66:0c:89:0b:11:98:65:dc:71:74:8f:d3:
6e:79:b1:4b:09:57:f2:07:28:a1:78:10:87:1f:4a:
c2:87:e1:36:ff:70:10:aa:98:48:b1:56:53:04:0c:
3c:2f:d8:e9:c5:ab:03:3d:f2:40:98:50:ba:8d:92:
35:45:df:22:79:82:aa:f1:26:2f:fa:55:d9:98:9a:
ad:b5:a2:fc:51:e8:9e:1a:6d:ee:dc:38:d7:8b:be:
d3:0c:59:2f:31:54:04:69:67:ba:55:11:bb:d4:7a:
7a:01:1d:66:2f:b9:b4:44:f8:47:c8:d0:7e:01:d6:
18:52:57:db:42:f7:46:61:bf:7d:97:ce:36:e1:e1:
72:f6:9f:61:70:80:4d:66:a3:1a:be:05:9b:81:0a:
76:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7A:B4:34:7B:4B:BF:1A:98:69:D4:4B:26:77:E4:A0:6E:66:2C:42
X509v3 Authority Key Identifier:
keyid:D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b6:d7:e6:aa:10:00:2c:8a:c6:5a:68:84:f7:c0:64:2a:63:
5b:f0:b1:1a:66:d2:11:8a:9f:e1:76:3c:1c:b1:58:0f:50:d9:
bc:49:3c:c7:74:a3:37:6f:7e:38:e7:5f:ed:01:d2:ac:be:d7:
cf:a5:23:9f:28:d4:11:7e:11:2a:b3:5e:95:56:29:c1:fd:68:
ef:79:a9:b5:f9:45:b3:bd:43:00:b7:58:fe:3f:41:c2:30:16:
59:b3:7e:e5:ce:f3:fe:fe:cc:82:07:4d:61:b9:e0:c7:a9:fe:
81:49:94:06:63:0a:f7:2c:96:6a:db:6d:38:c4:4f:b0:c6:4c:
7f:6a:42:ff:f5:3b:72:2a:33:e4:09:e1:d3:a8:18:cd:f6:b4:
86:e2:c8:94:14:c9:74:2c:99:5f:87:7f:31:9c:73:cc:f7:2a:
25:d3:af:c8:a2:4e:8a:75:65:d0:ad:f8:d7:cd:1a:22:f6:ee:
d4:01:2f:75:4f:da:84:12:cc:7c:fe:3d:d4:82:d1:19:9d:ff:
34:8e:ba:e5:2c:18:05:43:29:54:0f:bc:d8:6d:cc:3e:e6:54:
0f:a4:24:71:84:3d:b6:2d:95:48:2d:c2:c4:f5:87:68:37:96:
72:79:40:54:fb:2a:56:62:f9:44:1f:3a:2c:47:de:6c:ec:24:
37:6a:a1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:02:21 2025 by rpki-client