Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
File: 1R5nmbxcooWjdjcvC2NF3_yHuMA.mft (raw, json)
Hash identifier: nxV8yC0KTICfsxRU8ZUhxTnG33D2qCnt2yhSlP/6TFg=
Subject key identifier: 46:54:CF:B1:BB:13:AE:AA:91:9D:98:87:36:9E:AD:53:35:0D:D6:B7
Authority key identifier: D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0
Certificate issuer: /CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
Certificate serial: 01989DB9C03038F346E8DC63321E5315B16C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
Manifest number: 149E
Signing time: Tue 12 Aug 2025 10:00:52 +0000
Manifest this update: Tue 12 Aug 2025 10:00:52 +0000
Manifest next update: Wed 13 Aug 2025 10:00:52 +0000
Files and hashes: 1: 0cEqGKjfm76Pz1TjiCr0iAFNt_k.roa (hash: 8zpaYy8O1j58gbBpTxxShajSZwJzqKtViEUnKsc1qt8=)
2: 1R5nmbxcooWjdjcvC2NF3_yHuMA.crl (hash: EaPQne1OO/l6cLCoQZz5wYsIL2phTQKY9AjVq/lrIPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:b9:c0:30:38:f3:46:e8:dc:63:32:1e:53:15:b1:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
Validity
Not Before: Aug 12 10:00:52 2025 GMT
Not After : Aug 13 10:00:52 2025 GMT
Subject: CN=4654cfb1bb13aeaa919d9887369ead53350dd6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:39:df:34:dc:90:0b:0d:aa:78:7e:77:13:
06:cc:96:69:da:f5:04:9e:c7:cd:b5:cc:2d:8a:73:
9d:d4:ca:5c:57:77:27:a1:16:47:ff:2e:f2:45:dd:
6d:e6:17:50:3f:ea:da:d6:1d:9b:65:f0:27:a3:85:
a7:ed:fc:21:58:96:e6:d3:04:bf:7e:32:65:c2:e8:
fd:31:9c:dc:01:93:74:74:51:15:ef:f7:32:b3:98:
a2:b8:c4:66:7f:e4:9f:93:e6:1a:9a:89:a3:87:00:
6e:2d:b3:b1:1b:af:1c:fd:2c:4b:45:ad:a2:cd:16:
22:6e:7d:dc:15:cd:24:15:cf:b6:cc:a3:c1:27:e3:
63:b6:6c:4a:18:a7:5a:1b:7e:47:7c:a7:a4:5e:a6:
ea:34:5f:13:e0:a0:ca:6a:f5:79:ba:c3:30:00:e2:
98:11:57:f9:78:b2:90:41:6e:54:64:ba:17:1e:9e:
1c:b5:72:74:24:8c:0e:f5:bf:71:b9:de:ac:27:2a:
c3:af:d7:ef:76:a8:e1:ba:00:4c:0e:0f:92:4e:21:
c8:e7:3b:24:92:b9:68:e2:28:64:84:ff:a5:ad:a3:
5a:87:dd:81:44:89:02:99:39:bd:11:0d:90:2c:a2:
bc:14:d8:b8:6f:38:8a:e8:f3:47:7d:e2:fb:9d:f7:
ed:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:54:CF:B1:BB:13:AE:AA:91:9D:98:87:36:9E:AD:53:35:0D:D6:B7
X509v3 Authority Key Identifier:
keyid:D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:7a:7c:5b:83:bf:e3:16:f4:c9:10:9b:7b:09:8c:0d:34:2b:
ee:5e:4a:13:51:01:de:f2:54:f7:d8:48:47:dd:97:da:8a:68:
d5:45:cc:10:f5:fb:66:41:25:66:71:3b:ab:9b:ec:8b:ae:6e:
09:2b:fd:79:d6:fa:38:9b:c9:1d:41:6c:ad:06:ba:86:bc:d9:
1e:62:01:2b:7f:4b:55:e2:95:83:af:0d:8d:d0:b2:61:08:68:
87:06:b5:8e:af:04:e9:55:f9:be:b4:05:11:e8:6b:b2:70:bb:
6d:be:e5:bb:69:1a:d6:90:31:e6:a6:49:53:b9:fb:9a:b9:55:
b2:ec:ad:03:1c:9d:b1:39:a6:4e:49:27:c4:bd:71:95:46:2e:
3f:d3:63:27:db:2e:07:78:41:07:52:47:53:fa:19:02:f0:28:
1b:a3:a9:04:0c:fc:f0:b4:a1:b5:14:35:f0:c4:50:60:a9:66:
f8:7d:c0:b5:d3:cb:39:58:0e:16:09:bc:54:47:6a:81:19:c4:
2d:7a:38:de:60:d5:ae:4d:2f:e7:27:1e:12:4d:29:9b:ba:a1:
06:b0:dd:e4:1a:a6:16:6f:a6:5d:a0:25:b2:ce:71:6e:53:1a:
b1:19:5a:95:6b:2b:8c:8a:e5:12:d8:a4:d4:3e:12:c8:b2:b6:
e3:ca:bb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 18:54:07 2025 by rpki-client