Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
File: 1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft (raw, json)
Hash identifier: IFNtYyuSefA8rdQp2chmDh5sABVJ9YaFupj3RbQB6A8=
Subject key identifier: 01:05:19:DB:51:9E:DE:72:7B:27:DC:8E:98:93:68:CE:8C:67:54:E5
Authority key identifier: D4:25:90:03:12:FF:3B:DA:4D:2F:89:6F:64:DF:65:64:6F:D9:C2:51
Certificate issuer: /CN=d425900312ff3bda4d2f896f64df65646fd9c251
Certificate serial: 0198586B34EEA12369837C55E4744E761B90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
Manifest number: 1608
Signing time: Tue 29 Jul 2025 23:01:17 +0000
Manifest this update: Tue 29 Jul 2025 23:01:17 +0000
Manifest next update: Wed 30 Jul 2025 23:01:17 +0000
Files and hashes: 1: 1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl (hash: 1XbfM80e82mw6l1kGkYmFsTu0KPWZ7abnje45sYymsQ=)
2: g_HTJXlqiVwcXNQwQ-5NsdWLDwY.roa (hash: T8aREzkEhzdTgcqG/dOQatsiFG6CYLxa2kl0FfKGWAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:58:6b:34:ee:a1:23:69:83:7c:55:e4:74:4e:76:1b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d425900312ff3bda4d2f896f64df65646fd9c251
Validity
Not Before: Jul 29 23:01:17 2025 GMT
Not After : Jul 30 23:01:17 2025 GMT
Subject: CN=010519db519ede727b27dc8e989368ce8c6754e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d9:27:d6:b2:98:13:84:77:57:6f:43:47:e1:
08:32:9d:03:45:75:d3:e0:cb:7c:9c:dc:cd:df:b2:
7b:99:53:79:0c:a6:1f:c5:62:28:bc:d8:68:34:5e:
13:7a:d1:48:f1:79:3b:ff:28:9e:c6:0c:79:2c:ef:
f1:59:23:67:72:d8:a4:d3:b4:92:54:1b:17:6d:fa:
44:5f:76:e9:93:22:d5:5f:5d:43:d6:06:8d:80:37:
36:b9:1e:4a:f5:c8:17:dd:28:90:05:0c:b2:3a:77:
12:34:0f:c7:f9:49:ae:30:30:13:6a:0b:73:c0:2a:
3a:6b:0d:1d:f7:5b:ec:5f:5b:ea:bc:f6:b5:86:fa:
23:6b:09:aa:d1:df:c0:e7:65:7a:ee:d6:d5:13:c9:
a6:94:3c:24:b8:1f:5f:62:f6:da:1e:f2:42:98:1e:
32:01:dc:f8:74:a9:c4:9c:63:ea:af:94:bd:49:54:
f6:d5:d4:e0:2e:db:06:d0:b5:3a:af:71:88:95:eb:
0d:82:99:67:94:c4:55:3b:58:61:d7:77:48:ac:83:
0b:77:2a:17:76:ef:26:ce:be:1d:58:7a:7f:f2:93:
c1:3e:2c:a2:5c:87:74:ef:29:b7:a5:73:95:e7:41:
b2:66:05:87:1f:c3:94:af:bd:22:05:77:37:b5:7b:
b8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:05:19:DB:51:9E:DE:72:7B:27:DC:8E:98:93:68:CE:8C:67:54:E5
X509v3 Authority Key Identifier:
keyid:D4:25:90:03:12:FF:3B:DA:4D:2F:89:6F:64:DF:65:64:6F:D9:C2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:35:06:15:c6:b6:71:41:0c:60:b1:e5:17:f9:f1:c3:96:fe:
21:55:22:d2:e7:03:62:7f:79:b7:cd:9b:6b:76:a3:ee:80:75:
91:d4:ef:78:cb:a0:c1:98:8d:7e:66:bd:63:1c:f1:25:fa:af:
9b:87:0b:02:be:45:4f:a3:d0:46:27:53:c8:9d:81:8e:96:06:
e3:70:9b:e3:2f:6f:f9:21:f8:c6:a7:5f:08:a4:2c:94:26:c2:
f6:f5:4b:33:b8:11:2c:42:d4:15:a1:7f:1c:3d:03:98:4c:f1:
4c:2e:a7:6e:2e:31:6c:7f:73:34:ec:65:3a:43:bc:70:21:50:
d1:88:92:8b:d1:b4:74:85:7d:42:03:1c:32:7b:26:86:2a:6a:
ad:da:4e:07:a2:cf:7b:59:c9:b5:0d:d8:7e:22:72:c9:0b:e5:
dd:a9:26:9a:1b:04:b3:9a:f1:02:e7:ff:b0:af:4d:8d:f1:e6:
4e:46:f5:88:1b:9a:60:ea:b7:cc:ae:af:44:46:e6:e3:7b:60:
29:9b:14:09:eb:9c:1e:43:95:d4:9f:7c:0c:ed:c4:07:3d:cb:
38:94:6b:a4:81:b8:26:b0:70:22:1e:4e:bd:a8:d4:ab:d4:30:
c6:99:9e:e0:68:44:94:0e:23:b8:b4:cd:08:18:0a:3a:e0:d7:
a6:76:94:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:39:27 2025 by rpki-client