Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
File: 1onLcYkcbZS9nm8U8W5-N8LHKL8.mft (raw, json)
Hash identifier: 5FI7YLE8Gpr0aZRvHFMiuh92RWdTQ6jzGdDjXR5rZXg=
Subject key identifier: AA:40:8D:41:C0:27:73:23:6C:31:C3:9D:9D:1E:78:BB:0C:E1:AF:3A
Authority key identifier: D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF
Certificate issuer: /CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf
Certificate serial: 01987DC106BE3175E93E40E757BE1066660D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
Manifest number: 03D1
Signing time: Wed 06 Aug 2025 05:00:58 +0000
Manifest this update: Wed 06 Aug 2025 05:00:58 +0000
Manifest next update: Thu 07 Aug 2025 05:00:58 +0000
Files and hashes: 1: 1onLcYkcbZS9nm8U8W5-N8LHKL8.crl (hash: FedSmLIrid5iEb8PEDR6IEq0tmOFDcwdMx92PRAPb9c=)
2: kSER2798uaT4ZEQ3_Ywav1IgXDo.roa (hash: o89fQ/v3jr3XzrvC5mfE9JQZHOaC2hUzybiixeh55JI=)
3: yZlOT6r0_6wmgpAAvcSq6qfpXoA.roa (hash: CFuI4jvHDVJgJ7TNYXPE3aUuvYsSM/+AObIDbJtCPww=)
4: zl7tT8dRR7O1ZujdC0-GhGjBJAU.roa (hash: dZhp70Fm8wBLybFYAH8VTvH36PqVNE1zgwuzpEitFwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c1:06:be:31:75:e9:3e:40:e7:57:be:10:66:66:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf
Validity
Not Before: Aug 6 05:00:58 2025 GMT
Not After : Aug 7 05:00:58 2025 GMT
Subject: CN=aa408d41c02773236c31c39d9d1e78bb0ce1af3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f3:d7:85:8a:db:1a:96:65:cf:c2:31:88:83:
1c:22:c3:cb:4c:af:04:8d:7c:19:c5:e9:c7:0f:fc:
d0:15:26:d1:7a:53:1c:5c:1f:29:e8:8c:f4:51:f1:
01:c3:b9:54:4d:fb:5c:cd:a8:09:9e:8d:54:dc:33:
a4:b9:81:96:7c:5f:63:bf:9e:09:d3:0b:94:e8:6c:
81:60:ca:ea:b3:9c:21:ec:f5:ad:84:a3:1d:ce:27:
fe:7a:c7:a4:0e:be:22:4c:18:79:3f:9d:cf:83:a9:
eb:14:f9:9e:aa:9f:82:82:a3:e8:ea:67:97:85:be:
ea:67:17:23:43:2c:ca:f3:6a:58:d4:21:7b:8d:bc:
6e:aa:e0:90:c0:c2:30:bc:50:b3:c3:07:d6:a7:1c:
30:0b:e4:54:d0:ad:4e:a7:91:40:23:69:52:6e:bf:
cc:be:3f:fe:9c:7d:88:b8:56:ab:af:3a:aa:d5:df:
6b:71:14:03:50:2a:b1:2b:77:7c:5b:b1:07:13:0f:
a2:de:64:22:94:71:6d:ac:4a:46:78:b6:57:5c:4e:
82:28:0f:64:45:ad:95:dc:4f:9c:ee:af:a5:ae:07:
d1:c5:95:51:98:67:22:9c:40:b4:15:c0:ea:60:be:
ba:51:02:24:bd:e0:77:e7:aa:73:00:a9:78:0e:c0:
e4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:40:8D:41:C0:27:73:23:6C:31:C3:9D:9D:1E:78:BB:0C:E1:AF:3A
X509v3 Authority Key Identifier:
keyid:D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ff:f2:b5:f7:c8:e7:f1:4c:b3:35:33:84:7c:6a:e7:3c:40:
4a:c7:47:c9:b8:db:da:56:29:34:3d:a9:57:b6:74:70:39:93:
17:d2:3d:65:98:94:c2:cb:a0:83:cd:b3:e2:ab:66:de:22:10:
5a:f4:1e:89:6a:f6:3a:ac:d8:6c:8a:43:99:18:20:57:19:23:
5c:4d:4e:cd:43:b2:f7:76:9f:4e:b0:a3:bc:5f:52:78:bb:29:
4d:49:34:e0:5d:7a:9a:36:ff:50:8b:cc:07:d0:13:c2:53:48:
9e:16:77:71:4a:a3:5b:ee:d0:d7:b7:03:c8:01:41:a8:00:8d:
3d:5f:51:cd:18:5c:24:26:12:e6:9d:b1:89:93:ae:f7:b8:86:
88:3b:3d:1c:e4:32:b0:1b:e1:77:26:95:a1:90:fc:c2:d1:be:
ba:f0:5e:4f:8e:de:2f:84:3e:89:74:9f:0c:52:c2:c2:2e:29:
5d:f0:1d:3e:2d:b7:5d:2e:a4:25:7a:f4:95:c9:d0:d8:59:5a:
0d:f3:bf:fc:bc:6e:cc:f7:22:b5:f1:e2:03:70:e9:0f:d2:fb:
88:40:90:67:44:0a:27:0e:fa:67:ec:c3:55:7b:18:61:45:c2:
86:46:c2:47:2f:37:b8:0e:de:05:a1:41:fa:d7:16:cb:5b:25:
c2:9f:fa:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:41:11 2025 by rpki-client