Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
File: 1-3grePIKbktwZDBSvRpArxWlYzg.mft (raw, json)
Hash identifier: hm9DrZzRNrLR3OK/yDIhDvVRUYZ5hI0COWktAI7HSSA=
Subject key identifier: 07:67:27:7C:3F:CE:98:15:27:CC:2B:BB:D1:1F:F7:03:8F:2E:58:18
Authority key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
Certificate issuer: /CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Certificate serial: 01987298AD128FB0E9D9C786AB5D2688BC6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
Manifest number: 14BD
Signing time: Mon 04 Aug 2025 01:01:04 +0000
Manifest this update: Mon 04 Aug 2025 01:01:04 +0000
Manifest next update: Tue 05 Aug 2025 01:01:04 +0000
Files and hashes: 1: 1-3grePIKbktwZDBSvRpArxWlYzg.crl (hash: j0U4gnRG2s4DIMTNUA4qe148/LVNZOar4AoLHgzUWWA=)
2: B1dTi0f_of0kmb1xPgeCM0wY_So.roa (hash: AUmVPkVAQPCmSbSqHlAfz6SLH5DutLJ3OBZdx5Ql8g8=)
3: g4GI57zRcwc78atAcKzvcX8O_Jg.roa (hash: I42VDUXmjO3wztnHcn35mdQWvB1AtZN/AkJrcxSWDOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:ad:12:8f:b0:e9:d9:c7:86:ab:5d:26:88:bc:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Validity
Not Before: Aug 4 01:01:04 2025 GMT
Not After : Aug 5 01:01:04 2025 GMT
Subject: CN=0767277c3fce981527cc2bbbd11ff7038f2e5818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d3:70:bc:db:40:1d:42:14:d3:bb:19:81:47:
7f:db:20:db:73:f9:ab:ae:99:ee:6a:3b:7b:41:b5:
5b:1e:2d:58:f1:f3:7f:27:01:ed:07:ab:01:ee:26:
41:b3:c4:48:97:56:78:98:16:6f:69:84:10:47:84:
82:00:72:ea:0d:4b:80:3f:b7:35:bc:c2:81:5f:12:
47:3f:90:8f:d4:03:61:99:20:4d:68:e7:f5:a7:1b:
40:77:1b:c6:e6:bc:a2:e8:24:61:b7:43:9d:44:e8:
d0:a6:0e:30:84:bc:26:8f:a7:07:b8:e4:52:29:40:
73:86:31:fd:7c:5d:5f:e7:6c:ec:d7:15:dc:42:cf:
5f:bf:6c:c5:dc:14:ed:83:8a:fc:06:40:eb:88:67:
fb:5b:1d:27:cf:3a:73:b7:43:56:77:cd:56:06:52:
ed:18:3c:d0:4f:e5:40:f5:32:bf:e8:24:75:67:d7:
86:f0:5e:cb:d5:81:4c:f3:6b:7f:95:4e:77:3e:a1:
6b:c8:27:ad:5c:91:e9:b1:f8:9d:18:62:fe:59:9c:
81:74:6b:a4:38:e7:fc:5e:c4:b2:3d:ea:39:89:5a:
04:2a:77:43:a0:77:5b:f0:98:38:c3:93:e9:70:96:
62:c4:14:e8:96:51:66:55:7b:b2:49:8f:a9:9f:2b:
14:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:67:27:7C:3F:CE:98:15:27:CC:2B:BB:D1:1F:F7:03:8F:2E:58:18
X509v3 Authority Key Identifier:
keyid:FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:48:19:e5:b8:e2:d1:29:62:49:fc:5f:29:3a:2f:34:b6:a9:
90:f9:8f:86:ca:cf:51:08:f3:b5:22:8c:f0:4a:82:6e:20:90:
55:6b:83:a4:ea:4e:be:d1:4b:6c:c4:be:d6:0a:60:18:82:a1:
b3:62:91:e0:ff:d2:05:4f:fb:cc:a8:3b:a5:e0:ff:6b:d0:67:
ed:61:c2:79:44:2a:5a:65:72:ec:92:76:9d:ce:8b:02:b1:f2:
5b:12:69:60:01:f9:32:4e:94:0a:bf:f4:9c:fb:ec:54:25:4c:
a6:22:5d:38:dd:0e:20:01:31:3f:80:12:97:3b:e3:6d:39:fd:
d4:4f:c0:ab:e0:8f:c3:d9:bc:f7:11:dd:41:28:da:95:97:2e:
8e:13:b0:14:16:7a:bc:88:ec:ae:00:0b:6a:ef:6b:81:dc:88:
db:b1:31:09:af:d2:d1:5f:08:1a:a0:99:af:60:e5:01:40:e2:
e7:f4:00:03:a0:88:89:53:c7:6b:a4:ec:45:95:f7:06:a1:a2:
bc:3b:e6:eb:31:5d:b0:63:a6:90:96:35:3a:30:2b:72:66:91:
ec:49:1d:e5:2f:aa:e2:fb:b8:16:e1:3f:a2:e5:93:c7:d1:c0:
7a:99:de:6e:ec:99:78:04:df:15:5a:4a:9f:05:c7:59:22:28:
66:62:27:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:49 2025 by rpki-client