Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
File: 1-Zq-RfIfEuS4AvMJREwkdZAA688.mft (raw, json)
Hash identifier: yoyWx82X3AWsT7AVohStNDO1HoThOpvRur/KV/77C0A=
Subject key identifier: 87:95:FE:E4:10:1A:71:F4:4C:75:CE:49:6D:E2:66:61:74:0C:46:B3
Authority key identifier: F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
Certificate issuer: /CN=f99abe45f21f12e4b802f309444c24759000ebcf
Certificate serial: 01987CE52BB725297942ED974B77720B9212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 01:00:50 +0000
Manifest this update: Wed 06 Aug 2025 01:00:50 +0000
Manifest next update: Thu 07 Aug 2025 01:00:50 +0000
Files and hashes: 1: 1-Zq-RfIfEuS4AvMJREwkdZAA688.crl (hash: 068Y7rfnee8Bo1QQJoQE4GwG5zqbAi864IlqC6AuHFQ=)
2: SeJ_MUIfyEphmZtsrhRCas-Zt7E.roa (hash: 8yf8UNspB0AXwJ0f5mj6a36u/vut8a8srUMh6OwnuMY=)
3: nE72fRq5x2AdGCpsReX1DOqVoW0.roa (hash: LAILnXnxyWYExTH4qCTlNLIx2ujkg7Q+2T14oqEfAzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:2b:b7:25:29:79:42:ed:97:4b:77:72:0b:92:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f99abe45f21f12e4b802f309444c24759000ebcf
Validity
Not Before: Aug 6 01:00:50 2025 GMT
Not After : Aug 7 01:00:50 2025 GMT
Subject: CN=8795fee4101a71f44c75ce496de26661740c46b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:26:f7:40:3f:8d:c3:85:e2:59:32:06:d2:bc:
2b:1f:f1:a0:0d:ea:3d:3f:4d:bd:09:3c:f9:9b:28:
43:6e:9e:59:89:33:93:39:af:2e:70:f2:ed:68:fd:
61:4d:c0:85:79:a7:72:f6:f3:43:ea:a5:f1:29:78:
23:e2:41:af:78:88:f9:5f:85:9f:b6:cf:20:a7:71:
76:a3:f6:db:a3:73:f5:cf:f6:52:e8:14:18:8d:36:
83:55:5f:62:48:ba:e1:b6:7d:f1:30:29:f4:64:32:
9d:7b:66:65:a3:48:32:d1:57:b9:d1:40:c3:cf:ac:
30:41:e0:77:00:77:4d:02:35:5f:66:65:39:3d:51:
b4:ae:ae:bb:ad:45:f4:c3:0f:4a:63:06:66:fd:49:
dd:9c:d6:74:c1:78:de:4c:c6:7d:fd:7c:da:33:fe:
37:37:a9:a8:1d:a7:62:93:04:9a:04:44:c8:79:0a:
8f:a6:b4:cf:38:da:5c:f3:52:7c:a7:c8:62:29:fa:
6a:a3:b9:bb:44:33:65:13:eb:44:20:a7:48:c7:37:
6a:1b:02:7f:26:85:27:5d:74:18:b7:51:e6:39:eb:
29:11:20:e2:54:f6:9a:95:02:96:0c:9c:b2:8e:b6:
25:a9:20:09:df:62:93:e9:1a:6d:2a:6b:e6:93:83:
40:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:95:FE:E4:10:1A:71:F4:4C:75:CE:49:6D:E2:66:61:74:0C:46:B3
X509v3 Authority Key Identifier:
keyid:F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:8a:94:e4:dc:48:02:4c:9b:f9:ed:fd:3c:76:41:8a:a6:f4:
c4:b8:01:db:86:bc:b4:3d:41:c8:95:0e:17:19:90:1d:7b:c5:
4b:11:c1:7b:f5:c0:98:62:ad:86:14:88:57:8b:db:ff:4a:25:
c6:1b:4e:ef:38:cb:3c:37:c0:d2:49:0d:02:4a:f6:72:f1:62:
c3:97:50:f7:29:57:9d:b1:54:1f:c3:2e:d8:b5:61:55:99:1d:
8a:80:45:e8:90:ba:05:d6:81:19:26:0c:59:a8:ad:60:6a:e0:
2f:77:53:7e:19:4f:55:33:2e:21:58:99:80:7e:20:41:64:f8:
a6:c7:89:85:5d:e6:e0:0e:b4:25:b2:30:8d:85:c5:d9:c2:c7:
e1:b7:a1:8c:92:ba:ff:a0:35:ac:ea:6d:38:67:d1:af:a6:46:
f6:bc:75:a2:7e:8d:42:07:9b:30:05:c8:5e:75:e9:fa:70:1e:
ed:f2:6b:4d:84:22:af:bf:c8:c0:b0:a3:5a:9b:6c:6d:0a:28:
32:5e:8c:3b:bc:5b:c7:a6:10:71:84:1c:6c:40:45:5c:bd:e3:
83:40:d9:c3:fb:57:7c:00:10:92:9b:4a:19:5a:bf:7d:36:94:
dd:20:37:a9:40:a4:a2:33:03:70:e2:e6:9c:56:ae:8b:a8:99:
43:c5:69:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:59:53 2025 by rpki-client