Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
File: 1zeCTg_6efGLn8SdbLDdgcmmyig.mft (raw, json)
Hash identifier: aU2Xe14ppfN3MmnHP/ZjiBkgx0i1BlsYk5ucoQq9TBc=
Subject key identifier: 3A:06:DF:5D:83:F3:1F:7D:32:FD:CD:4B:73:D1:22:CA:57:01:04:42
Authority key identifier: D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28
Certificate issuer: /CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28
Certificate serial: 01987298658C44EA5D24D88D7B0874CE0EAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
Manifest number: 1010
Signing time: Mon 04 Aug 2025 01:00:46 +0000
Manifest this update: Mon 04 Aug 2025 01:00:46 +0000
Manifest next update: Tue 05 Aug 2025 01:00:46 +0000
Files and hashes: 1: 1zeCTg_6efGLn8SdbLDdgcmmyig.crl (hash: qkkduainuLrHh+BXmjMzpxMBcP+Nbz9t44TGaSUxayk=)
2: gx5eiwrC9QRov09jLW6Ry8a41tM.roa (hash: +LsTPMN/8+zCvgXobio7naaWnMZxaGw5toiq6o6GEUA=)
3: kdM69EkWu9GxJCcShuJ7ttDKH4Y.roa (hash: vxcNPrB9DwOKLJbClf/tkagm/g99z1Vy26rmuXa9BjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:65:8c:44:ea:5d:24:d8:8d:7b:08:74:ce:0e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28
Validity
Not Before: Aug 4 01:00:46 2025 GMT
Not After : Aug 5 01:00:46 2025 GMT
Subject: CN=3a06df5d83f31f7d32fdcd4b73d122ca57010442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5e:a0:8a:da:6d:96:ac:d8:90:b4:b8:b3:16:
84:2b:af:a9:36:38:f4:19:51:73:4a:35:cb:a5:7c:
e3:b4:dd:3c:4f:5c:37:21:eb:41:a1:3a:1b:cd:c3:
84:d4:76:4e:5e:e6:b8:b9:99:7c:aa:88:dc:57:9e:
d1:2f:fd:bf:52:ce:0c:93:cc:73:f4:d4:89:42:73:
b8:e5:87:57:8b:45:24:bf:92:73:c0:78:78:f7:d4:
b2:5a:9e:e0:f6:70:2c:12:70:7e:57:13:75:04:a5:
f1:dd:fb:51:3d:5f:4f:af:db:bb:f8:73:c2:70:48:
92:b2:30:90:ea:74:9e:57:aa:b3:e3:ac:a6:3d:bb:
1d:5a:84:9b:3a:bf:d8:d3:79:e6:f9:ea:3d:7b:d0:
4c:91:20:63:9c:ea:8e:17:7c:d1:be:3a:ba:eb:59:
2b:85:a3:76:5b:a4:6e:92:ca:59:9f:87:62:d0:57:
1b:ef:f2:a6:84:70:84:73:2f:e0:be:10:a1:11:91:
0c:e0:13:10:c0:d0:3d:c3:29:31:ad:5e:12:28:a1:
24:bf:cb:b6:50:59:60:b0:02:75:94:a4:9d:8d:3f:
f4:eb:e9:64:8a:4a:1d:65:af:6d:8e:24:a9:ab:54:
d7:34:55:7e:bc:b7:18:16:fd:4b:77:48:1c:36:96:
c7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:06:DF:5D:83:F3:1F:7D:32:FD:CD:4B:73:D1:22:CA:57:01:04:42
X509v3 Authority Key Identifier:
keyid:D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e9:63:5a:21:12:b5:6a:40:dd:a1:43:3e:0c:ef:3a:6f:c0:
c2:de:64:2c:1e:8d:73:77:64:8a:8c:16:96:4d:5f:66:b3:dc:
82:78:e2:78:f0:e1:34:da:84:6e:28:de:82:c5:27:0e:60:8f:
5c:ea:f9:86:7a:ac:e5:cf:31:81:87:a3:c0:0f:a0:a7:c9:85:
99:cf:0b:b6:db:a6:06:ed:46:56:04:e8:34:35:d5:28:c0:03:
8b:cc:08:d9:a8:74:3a:0e:92:9a:48:5d:10:90:8d:a4:af:a9:
30:95:82:cb:9f:fd:0e:f5:34:57:25:8a:4a:83:88:5d:de:ca:
a2:67:05:3c:2e:73:2e:94:6b:21:21:b7:c5:f0:75:77:39:a0:
bc:87:ec:4c:7a:50:ed:aa:88:a5:2d:16:39:20:81:8d:fd:e6:
7e:08:f1:20:c9:fe:1d:94:6c:88:bd:ea:b8:25:c5:ab:be:48:
e6:32:3a:72:26:3b:67:4a:8a:e0:d3:6b:18:d7:74:28:b1:9d:
a7:0f:34:cc:39:91:d0:1d:35:12:e0:e0:1d:19:57:66:a3:76:
51:1a:b1:a8:6e:bb:49:7f:16:f2:da:0f:6a:86:07:2d:c2:6f:
41:e3:0d:36:1b:75:81:9f:25:02:80:66:f2:14:a7:59:95:96:
fa:40:8d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:25 2025 by rpki-client