Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
File: 1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft (raw, json)
Hash identifier: WKL4fEBoe1pHw2txyPE5ur95FsMP2n/ZNCDpJV5sun8=
Subject key identifier: 5D:61:D9:60:C9:1D:D4:D6:96:72:60:33:CE:3D:C8:81:DE:9D:38:11
Authority key identifier: FA:D0:FB:39:D6:B1:1F:D1:5F:CB:B4:16:34:03:15:5D:1D:45:5C:05
Certificate issuer: /CN=fad0fb39d6b11fd15fcbb4163403155d1d455c05
Certificate serial: 0198744FB6795C90B16AF50E826938F20CF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
Manifest number: 11BC
Signing time: Mon 04 Aug 2025 09:00:37 +0000
Manifest this update: Mon 04 Aug 2025 09:00:37 +0000
Manifest next update: Tue 05 Aug 2025 09:00:37 +0000
Files and hashes: 1: 1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl (hash: dgFDMSCpC1QZp8bJBVX4MSPdR1M29xPrvtKaCWa03gg=)
2: h0w_kFKT0XqvvDjFWN0hbdP6R0I.roa (hash: HwjG9qWbKXQOPWt9s3bE5FAbNnpfV2VmVkVACeqa+SM=)
3: mduo7I3wNgYNMDFTnFs9bATZw0U.roa (hash: cwDJD0pk/dLmG1tNo7Q1h2nrGc/1dBKFJ1gp1DO7kqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:b6:79:5c:90:b1:6a:f5:0e:82:69:38:f2:0c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad0fb39d6b11fd15fcbb4163403155d1d455c05
Validity
Not Before: Aug 4 09:00:37 2025 GMT
Not After : Aug 5 09:00:37 2025 GMT
Subject: CN=5d61d960c91dd4d696726033ce3dc881de9d3811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:09:69:f7:c1:4b:fd:7f:58:f7:2d:20:d5:0c:
5e:a7:a9:98:b2:ff:e4:88:dc:67:85:6d:05:39:b8:
c3:6b:95:af:bd:98:66:ed:49:00:5b:aa:29:9b:9e:
93:c5:35:6c:f6:10:c3:87:94:4e:c1:93:05:e5:31:
a7:52:f3:e0:7c:27:a9:89:7f:d4:f0:ed:0d:9f:3a:
da:ed:b0:98:c9:fe:2e:20:80:df:0d:b9:37:a8:6e:
dc:b8:27:7b:ad:10:46:8a:41:9a:7b:b0:a2:52:78:
43:a9:de:65:74:82:fc:f2:35:d0:b9:8c:2a:59:7b:
e6:c2:85:e2:3d:f2:4a:3d:32:02:0c:3f:4b:9d:d9:
73:56:a3:40:79:2f:1f:9b:c9:40:0b:45:5d:5b:28:
3c:32:78:a6:4a:f0:d0:35:06:4e:40:8e:3f:04:01:
e3:80:27:35:2a:d6:80:93:bc:c5:8a:60:8e:8e:21:
26:4f:cf:fc:63:82:7a:19:9e:04:0d:90:3a:6d:00:
70:49:15:a4:f0:89:00:ca:9a:4b:d6:e9:8f:4c:d6:
f1:e6:61:48:fe:7d:aa:17:03:6c:ca:91:f8:3d:04:
50:55:90:c1:6c:8c:85:19:a0:0b:48:b1:14:be:c9:
45:aa:06:2e:8c:7f:c1:2f:c1:dc:43:dd:0b:7a:7d:
70:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:61:D9:60:C9:1D:D4:D6:96:72:60:33:CE:3D:C8:81:DE:9D:38:11
X509v3 Authority Key Identifier:
keyid:FA:D0:FB:39:D6:B1:1F:D1:5F:CB:B4:16:34:03:15:5D:1D:45:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:c3:de:15:dc:98:f8:ef:62:1a:cb:bf:de:bc:6b:88:ad:9d:
1b:67:44:b1:a5:75:a3:55:29:32:c3:7f:1c:6a:18:c5:c9:87:
c2:11:37:32:ea:d8:36:d2:e5:04:bc:d0:f6:90:fe:b2:d7:3c:
9b:38:b4:85:df:67:ed:f7:f7:7f:bb:3f:90:85:31:78:34:27:
61:7f:35:72:22:69:f9:da:c2:20:9c:3f:a4:88:53:de:e2:a8:
d2:88:f6:c5:78:c4:65:d3:ae:81:ec:53:85:4a:38:22:0e:ca:
74:7a:07:3d:04:71:e2:5e:f4:d6:bb:c3:33:96:87:74:f3:6e:
cb:0b:5b:67:e3:a5:73:a9:71:8c:47:53:90:06:44:a8:59:d3:
87:83:1d:ac:7a:17:43:14:d1:1b:77:02:6b:3e:0a:71:49:c8:
b2:aa:d7:95:ab:59:32:6f:9d:a0:70:57:42:f1:cd:99:6e:c8:
8d:a4:e1:b8:17:3b:66:73:9c:c7:80:49:24:35:81:1c:25:64:
ca:36:a0:e9:c0:92:be:63:61:73:9f:8f:01:41:f6:ec:4e:16:
23:7d:3d:4a:f1:8d:36:f9:96:d1:76:2f:35:c5:6b:77:cb:f6:
4f:bc:ac:72:92:72:0f:2e:2e:0c:24:25:0c:36:00:9d:31:ed:
79:cd:d8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:46 2025 by rpki-client