
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
File: 1IdkFNyZXRTt46AaMjtiuQb4PFc.mft (raw, json)
Hash identifier: v57bJ0+biTeKyGlPYjNt50iQ4eAP0XWzxsCwjlQtEtM=
Subject key identifier: 0E:41:4A:3A:C3:D8:D2:B7:60:85:39:4A:C7:87:04:39:E6:CD:AA:0D
Authority key identifier: D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57
Certificate issuer: /CN=d4876414dc995d14ede3a01a323b62b906f83c57
Certificate serial: 01987C40C3FB39E74CE7A8FE45439810809B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
Manifest number: 05A2
Signing time: Tue 05 Aug 2025 22:01:15 +0000
Manifest this update: Tue 05 Aug 2025 22:01:15 +0000
Manifest next update: Wed 06 Aug 2025 22:01:15 +0000
Files and hashes: 1: 1IdkFNyZXRTt46AaMjtiuQb4PFc.crl (hash: oPE+W5PSH91eixUGlZi46Zogpo4Oc3kDAfKmX9dDvUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:c3:fb:39:e7:4c:e7:a8:fe:45:43:98:10:80:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4876414dc995d14ede3a01a323b62b906f83c57
Validity
Not Before: Aug 5 22:01:15 2025 GMT
Not After : Aug 6 22:01:15 2025 GMT
Subject: CN=0e414a3ac3d8d2b76085394ac7870439e6cdaa0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3d:6f:fb:ae:af:ec:a1:74:35:0b:38:82:7a:
f5:72:24:b4:c6:9e:6b:9f:62:97:bd:2b:5d:45:45:
f6:1d:f8:3f:dd:9e:2e:cc:dc:e9:c8:86:79:16:e4:
e9:ef:e0:f0:d7:f6:e9:d6:35:d4:b1:c3:7f:89:e3:
de:b7:3e:ef:1d:ec:11:5e:76:e3:d2:16:b7:90:08:
2f:71:61:15:64:55:c5:62:5f:7c:9c:de:68:ed:41:
06:e0:35:4e:95:94:1a:d9:ac:0d:99:4f:e9:64:23:
99:bb:62:60:6f:38:42:d7:65:70:b0:28:8e:58:6a:
28:20:cc:18:95:d2:0a:c8:26:0b:c9:06:da:6b:11:
e9:e0:d7:6c:eb:de:e2:b3:75:bb:a0:e7:65:ab:4c:
ef:5d:cd:91:ee:c7:9c:86:06:44:0e:fd:20:79:af:
2d:ee:ed:e2:4f:ba:1c:a8:eb:a1:76:32:bf:42:10:
dd:a1:6f:b4:77:3d:87:28:14:c3:c3:2c:46:76:29:
12:a2:84:fa:75:46:a1:0d:86:66:2e:05:1e:4d:29:
74:62:37:73:4c:70:5e:16:43:95:29:04:ab:64:61:
e7:15:db:d7:11:80:b6:47:83:84:00:69:34:8f:ba:
2b:8c:d7:2d:ce:58:cc:8a:90:7c:44:b6:95:27:93:
d3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:41:4A:3A:C3:D8:D2:B7:60:85:39:4A:C7:87:04:39:E6:CD:AA:0D
X509v3 Authority Key Identifier:
keyid:D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:99:d5:94:6b:29:e8:8e:3c:85:a7:98:7f:cd:b6:d0:0f:14:
f9:f7:36:b9:51:78:b6:7e:5e:b2:9c:91:18:33:94:63:33:f5:
10:d7:ba:55:2f:3e:c7:31:5a:d3:b9:d5:6e:02:56:f3:a4:a4:
a2:18:33:39:3d:47:ec:ae:7b:e2:25:a8:44:64:9d:02:28:48:
1d:51:1d:f0:9c:41:c5:ff:90:fb:76:bc:4a:20:2e:dd:0b:02:
7b:f7:8a:80:27:97:92:10:a2:85:3d:64:5c:39:07:b1:77:15:
02:cf:68:b6:aa:cf:d6:ff:00:2d:af:8c:18:e5:6b:8c:9c:4b:
f3:73:b9:1c:47:6b:cb:4a:7f:25:44:a4:2a:55:5f:11:b3:b3:
e8:00:9b:d9:ee:f5:0a:b9:3d:d3:4d:37:9e:62:54:10:c4:ad:
b1:f7:0a:e7:94:a3:f9:03:8a:15:47:e2:d8:d8:49:d6:58:ce:
2a:db:f3:b1:78:30:0b:ca:a8:3f:44:45:c6:bd:12:30:c2:86:
92:15:0a:af:bb:fb:8e:0a:e8:79:45:0b:b6:83:02:fe:5a:b4:
76:94:4f:68:51:c2:3b:2d:09:65:b1:e5:08:01:79:76:ff:b2:
92:1b:d1:c3:a1:a0:ee:d7:ff:7a:96:14:25:37:34:7d:47:c1:
b2:c1:8a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:02:10 2025 by rpki-client