Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
File: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft (raw, json)
Hash identifier: EmsFhpB4a7sfrHf8HOSqW9AUeSbUgm518IGfTcaAx1s=
Subject key identifier: 0F:2C:68:F6:E9:ED:76:A8:4B:18:1E:99:43:19:FC:C4:31:06:C7:97
Authority key identifier: D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
Certificate issuer: /CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Certificate serial: 01987A8982637C764833C4BEEE78171E8AD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
Manifest number: 0DFC
Signing time: Tue 05 Aug 2025 14:01:28 +0000
Manifest this update: Tue 05 Aug 2025 14:01:28 +0000
Manifest next update: Wed 06 Aug 2025 14:01:28 +0000
Files and hashes: 1: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl (hash: 4KFLC8HR/mWQS+wXQTiYz66rzO9Atvt1YboCSwF153o=)
2: ZrVj2s197OVZslr8l0eL6BOnr3w.roa (hash: MfbdU/hx9JIBrv7/G68X/y0zTkmoV59GNKmYnsQV+5o=)
3: mwni58KyYHbpUQER4Pt8qtMcan4.roa (hash: 1zAR9iZ3h0/evzy5xE5e6DnfwvHvR1HUWm8sNJWcti0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:89:82:63:7c:76:48:33:c4:be:ee:78:17:1e:8a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Validity
Not Before: Aug 5 14:01:28 2025 GMT
Not After : Aug 6 14:01:28 2025 GMT
Subject: CN=0f2c68f6e9ed76a84b181e994319fcc43106c797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:39:be:e9:ce:60:ee:f6:01:7c:30:f7:3c:1f:
3b:eb:c3:d1:86:a3:08:b8:27:93:f6:23:76:12:e2:
11:e4:d8:66:b8:13:d3:cf:43:73:94:ff:31:33:a9:
da:3c:5d:f3:a3:9b:28:9a:eb:3d:0a:40:ea:57:3d:
06:4f:bf:ac:61:38:29:d6:3a:b2:8a:7b:6a:da:c7:
7f:2f:4e:64:9a:e1:f8:a7:10:7f:fa:73:68:e6:96:
ee:6e:35:7a:be:0a:a9:b5:09:bb:75:19:f3:f1:3f:
d6:a0:71:01:14:b4:5f:ba:8c:86:f3:99:21:18:fb:
fc:54:86:ae:d0:26:14:f9:ff:51:50:fe:78:f9:1a:
b2:4e:6f:f9:1d:4e:7e:67:47:11:d2:b4:06:72:df:
87:06:ce:4a:d4:f9:6e:1d:e7:18:90:06:94:ac:27:
87:b0:06:42:d2:96:95:4b:64:37:bf:86:2e:e1:5e:
c1:fe:51:ea:98:5e:fa:0b:44:48:3d:6b:52:e3:84:
f7:a9:8b:63:73:db:7a:fc:b7:33:f0:29:fd:05:bb:
a5:f0:8d:75:b6:b5:16:fb:db:ca:62:52:aa:81:8d:
0c:97:15:1e:26:fa:b4:5b:b7:ca:f0:4c:9a:2f:6d:
a0:8c:04:4d:f6:ac:2e:68:a7:a4:38:65:b2:78:29:
36:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2C:68:F6:E9:ED:76:A8:4B:18:1E:99:43:19:FC:C4:31:06:C7:97
X509v3 Authority Key Identifier:
keyid:D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:11:0e:b9:03:12:f4:98:74:a1:18:96:5e:1c:d4:f1:61:4f:
33:ef:68:37:1c:91:58:64:5b:5d:0a:2b:62:95:97:69:50:0b:
db:25:94:14:5c:fc:e6:ed:a2:4f:b6:b4:47:50:37:3a:a9:21:
b1:21:d4:76:96:db:24:f2:5f:43:ad:bf:c4:6f:fa:74:b7:d5:
55:60:ec:f3:e5:09:cc:c0:1d:59:26:c4:87:bc:db:80:d5:ba:
1d:0b:77:8a:cf:ba:03:e0:39:6d:80:32:54:10:60:d3:9f:5d:
7e:b4:04:ed:89:57:21:79:58:25:07:60:aa:eb:84:aa:87:4b:
de:14:22:48:b6:51:8f:7a:6e:1c:ec:9f:88:0e:76:ae:55:07:
c2:1d:c2:6f:52:6d:a9:64:65:b1:2f:f8:cd:3a:27:fc:29:56:
18:09:f1:d1:c4:42:8e:91:6b:b7:bc:2e:d5:ad:a9:51:b0:75:
b2:8d:0c:16:b6:8b:6e:c1:f4:97:06:e5:c1:31:60:c0:4d:9c:
0e:b6:26:36:23:62:61:64:65:f5:b6:1e:1c:8e:b3:52:27:db:
2e:63:70:91:9c:9a:5f:93:50:30:c5:31:9d:11:fe:5c:b1:47:
a0:45:b6:1d:c8:66:fc:6d:7b:30:cd:99:d5:60:d9:fc:87:f1:
d0:ce:54:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:23:18 2025 by rpki-client