Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
File: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft (raw, json)
Hash identifier: CyyoUR8CrZ9pskZIs0FcP7QUgQ3RpcQ3NNBJXpxDhgM=
Subject key identifier: BB:13:71:CB:34:91:4A:93:B1:8A:C2:D3:6C:E8:D0:30:80:16:C2:25
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Certificate issuer: /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial: 0198733DC8D05D4B14EFA21C955AF27157EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
Manifest number: 1635
Signing time: Mon 04 Aug 2025 04:01:25 +0000
Manifest this update: Mon 04 Aug 2025 04:01:25 +0000
Manifest next update: Tue 05 Aug 2025 04:01:25 +0000
Files and hashes: 1: 0PRh-Ryf5Bbnr0lOh4NNRU5Dvtk.roa (hash: jgK2NNDoTbWiQ7uIBzHm15T4lQ1IK4iXj6RZrP5o0x4=)
2: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl (hash: B//TstyRWXmT3DnxIWsoRbtGBwio+R57u4mcw/Qbb4s=)
3: 2LNh2IK4jZn1zUGBoSeuOCdHsXI.roa (hash: oJ1ixo11Dgt3gqct0Oh6zVb2kz2NqX0+yoE97/FL8Fc=)
4: Mj33PSIVDFEMWJHgu59FVh30wBE.roa (hash: LnMHKUsXF7KzdF90MCgfrbR5YbM5UFpQOfqwvOjdFkc=)
5: X3rPCUQOCzHRW1aOB1JMsXT6ETw.roa (hash: Mnw7vSeAR5wWc2r0nd1dxOLcS1XganxG0iGji5vuiZQ=)
6: YdSHkmxaKGsPWAVPOrWWw_ZEGMQ.roa (hash: xbMbtDkZuBR3igPRUOZT/UOnmnpg5z7C9ymnyoxmkCQ=)
7: dkGowCxyAk57tMP-82kGQeDdynY.roa (hash: Vdu4x0hDwdG5RaDwCyJZJseIjrU0RN3jHw1tXALp/yQ=)
8: eV94BXe8LtEfrEreyIQkc6VGevg.roa (hash: n/7ce91I2ejVxdCN2rHxzeGGcgk6A9ogkMPQOK3FmSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:c8:d0:5d:4b:14:ef:a2:1c:95:5a:f2:71:57:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Validity
Not Before: Aug 4 04:01:25 2025 GMT
Not After : Aug 5 04:01:25 2025 GMT
Subject: CN=bb1371cb34914a93b18ac2d36ce8d0308016c225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ec:c8:80:d2:da:38:54:0b:54:15:b3:72:2d:
b3:bb:d3:b2:ab:69:4d:c0:11:12:03:78:ac:77:5a:
d8:fc:c7:cc:8a:fc:a0:12:6f:a2:bf:f5:5a:b5:e1:
a6:0a:a3:c6:0e:e1:df:48:32:79:3c:67:59:64:6f:
12:12:5a:13:ed:3a:2d:b6:cc:f8:a9:bf:20:08:5f:
53:c8:cd:96:f8:73:d9:32:12:5d:62:88:1e:fc:28:
0a:7a:e3:32:fb:fb:13:32:ea:96:c8:08:75:d9:b6:
7a:59:59:d2:10:72:02:9c:6f:ad:f4:eb:29:e6:d8:
7c:81:75:49:66:d9:c1:61:85:c7:7f:dd:15:6f:c8:
b1:95:27:18:1f:ed:be:fa:17:ad:40:2c:36:32:71:
9e:ae:ec:ed:62:d8:ac:e8:ef:75:f4:ad:89:b3:83:
81:8b:c9:c5:52:39:a5:59:8e:10:f7:50:b3:38:7a:
39:a4:a9:19:9d:62:a1:0d:23:5c:75:5f:cb:6d:7f:
f3:cf:3e:97:89:8a:69:ae:96:0d:42:6b:0c:db:60:
5c:4c:cc:58:e7:66:f3:fe:fd:86:bc:f5:70:c5:8e:
91:60:70:f5:fe:8d:c8:cd:24:37:f2:12:c5:e8:cb:
5d:71:e5:2c:ed:c1:8a:04:4d:3e:1c:ae:b7:fb:0b:
57:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:13:71:CB:34:91:4A:93:B1:8A:C2:D3:6C:E8:D0:30:80:16:C2:25
X509v3 Authority Key Identifier:
keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ea:78:79:9b:0d:41:b9:7b:78:f6:08:14:1a:e7:66:16:1e:
e2:a3:ff:d0:79:4d:78:f2:a9:79:53:e0:94:40:8c:28:2c:86:
ff:c8:e7:01:26:2c:16:87:1a:87:fa:a9:4b:70:88:84:8a:c0:
47:49:3c:ee:f3:80:fc:8f:10:e3:94:05:5f:93:d7:de:4b:4d:
87:76:8a:cd:13:71:4e:4f:09:60:da:33:38:ac:ea:f0:76:56:
ab:8a:c1:f3:2b:70:1c:53:d0:d4:93:1b:28:39:ea:37:68:84:
59:a2:62:5e:e6:7d:48:96:7e:86:78:bf:ed:d7:5e:91:86:ca:
b8:0e:00:5c:8d:15:d3:a5:55:6c:e4:62:d4:c8:b3:e0:7d:c9:
11:76:5e:09:a0:3a:f1:2a:28:f4:1d:42:cf:41:40:ba:e4:29:
f7:96:a6:f8:cb:d1:07:aa:76:d7:e8:d5:14:74:94:9d:71:76:
90:9a:e8:f8:fc:3c:af:40:34:da:a5:98:c9:92:b9:4b:82:e3:
23:ef:3c:a7:38:15:b3:ab:db:38:4b:9f:0f:71:81:af:e2:33:
35:f1:1c:b0:a3:24:ab:37:a9:b1:ff:f7:0c:1d:18:1d:5f:5d:
0a:23:ab:cb:cc:f8:98:75:c3:4b:a4:41:f0:58:94:85:1f:38:
5e:9c:0e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:09 2025 by rpki-client