Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
File: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft (raw, json)
Hash identifier: PrmjjfWCjChW2L5mwh3VGB6DBuvBncczPOKejhlqj6k=
Subject key identifier: C1:AC:CD:8B:40:D8:D4:97:3D:4F:4B:BE:50:1E:DC:97:3D:AC:8D:36
Authority key identifier: 0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
Certificate issuer: /CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Certificate serial: 01988D344B7E3FB24E2B8AFFC61899FF30C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
Manifest number: 1502
Signing time: Sat 09 Aug 2025 05:01:11 +0000
Manifest this update: Sat 09 Aug 2025 05:01:11 +0000
Manifest next update: Sun 10 Aug 2025 05:01:11 +0000
Files and hashes: 1: 1tRI1NAS620irGWcDu4y9Qfw5Oc.roa (hash: cB16kbTr6A/atusEQcb+v3J61xx/lkSsq3ehr1/v5HA=)
2: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl (hash: 6wOJXl+v4sNyiGi700fJqV/CF3m6UJ8zfD3P8P8wOKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:34:4b:7e:3f:b2:4e:2b:8a:ff:c6:18:99:ff:30:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Validity
Not Before: Aug 9 05:01:11 2025 GMT
Not After : Aug 10 05:01:11 2025 GMT
Subject: CN=c1accd8b40d8d4973d4f4bbe501edc973dac8d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9f:2d:66:7d:a8:45:9e:10:87:24:b5:74:9f:
16:ea:22:4b:5d:7c:1a:75:7f:94:97:51:45:44:25:
52:f2:4a:65:f2:6a:4a:81:27:81:fc:ec:94:f3:ee:
34:11:09:28:f2:f1:32:8b:24:51:c5:e3:2e:cd:d0:
71:56:05:90:3e:28:a9:2d:3e:6c:fa:d9:6d:aa:a8:
0e:7c:83:a7:55:5c:21:f1:ee:74:45:25:a5:c5:38:
52:80:e7:88:f2:de:31:6c:e5:66:9f:67:d6:74:a7:
21:f1:c6:e2:ec:c9:f7:e8:7a:b7:3e:e4:82:6d:11:
d1:be:17:67:66:6a:85:b2:78:ef:9f:d1:de:a7:20:
ca:3e:67:d3:c7:a4:e6:c7:69:57:84:4e:0f:82:0a:
8b:31:51:a1:9c:61:f5:77:5d:a5:17:7f:35:2d:05:
93:c2:52:cd:07:c5:e3:7a:66:86:be:55:f2:a1:2d:
2d:02:15:cf:96:8f:12:d7:32:26:79:a9:3b:24:95:
c8:c3:25:21:50:26:38:60:90:3a:62:fc:32:71:17:
38:1f:09:1e:b9:4b:9c:69:db:3e:68:53:b1:9a:0e:
e0:36:b2:ab:01:67:97:61:dd:3e:87:b8:16:4a:f1:
b9:36:a6:37:0a:94:1d:7c:79:25:4d:c2:29:dd:e2:
79:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AC:CD:8B:40:D8:D4:97:3D:4F:4B:BE:50:1E:DC:97:3D:AC:8D:36
X509v3 Authority Key Identifier:
keyid:0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:11:4a:6f:e4:0a:86:10:00:ad:73:c5:5f:26:27:25:2f:ec:
5f:55:f2:6b:df:eb:47:cd:d9:d1:b2:d9:67:c0:16:ab:b4:c1:
74:03:ac:0b:db:a8:5d:7b:4f:96:18:0a:12:a5:c0:c0:ee:c6:
de:7a:5e:a2:f9:a7:c8:84:a1:ee:f6:56:e6:55:40:18:2c:8e:
85:1e:df:07:07:b4:08:03:71:48:ba:68:46:65:06:b0:db:f5:
11:1d:f2:bf:b1:ed:8a:3f:7f:7b:cc:ab:c2:7f:38:bf:05:86:
11:75:06:68:3f:fd:e2:18:ab:e1:55:5d:37:86:6e:02:06:50:
d8:e4:af:15:b1:be:7a:30:c2:b3:9d:a8:dc:20:09:7e:6a:55:
d7:01:37:e4:61:e1:bd:15:0b:28:5b:3e:d7:5c:5a:dc:8c:33:
be:29:b5:89:97:a9:ce:e9:3b:16:c2:83:77:ca:17:41:3c:76:
a7:74:13:9a:39:bb:7d:b0:04:eb:7a:a5:d8:a9:34:4d:a6:3b:
f5:66:fe:48:a7:dc:f4:86:31:00:fe:05:58:b7:5d:9f:31:7b:
a9:85:d4:02:83:d8:aa:95:74:67:84:9f:fd:fb:cf:ac:09:b4:
5b:00:4e:6d:ac:f3:cc:e5:ac:3a:bb:b7:a6:6b:db:82:c7:4b:
1e:5a:4b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:02 2025 by rpki-client