Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
File: 1ftSajPzZqqJRhiOXTJr3ORuLEA.mft (raw, json)
Hash identifier: KZkL2tBeH/ke9M/XVJzvhHkDzkFr/J5I86GOvs+fa5s=
Subject key identifier: 01:19:CA:A5:00:CF:E5:4A:59:6F:23:14:BD:71:BC:E1:16:14:BA:DE
Authority key identifier: D5:FB:52:6A:33:F3:66:AA:89:46:18:8E:5D:32:6B:DC:E4:6E:2C:40
Certificate issuer: /CN=d5fb526a33f366aa8946188e5d326bdce46e2c40
Certificate serial: 019849D36BC456ADEE9396C24EED916C0693
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
Manifest number: 086B
Signing time: Sun 27 Jul 2025 03:00:49 +0000
Manifest this update: Sun 27 Jul 2025 03:00:49 +0000
Manifest next update: Mon 28 Jul 2025 03:00:49 +0000
Files and hashes: 1: 1ftSajPzZqqJRhiOXTJr3ORuLEA.crl (hash: 5iQNKGUL5uqWDQkTNIsg93RuUTSrdHc2MazvaaXm51E=)
2: qfUgWmjDBIJJxDCL7jiouOIMq6E.roa (hash: 8LoPzts8EEAcumqZ7LuONp4lduak/H5FziwN8+pOFJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:6b:c4:56:ad:ee:93:96:c2:4e:ed:91:6c:06:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5fb526a33f366aa8946188e5d326bdce46e2c40
Validity
Not Before: Jul 27 03:00:49 2025 GMT
Not After : Jul 28 03:00:49 2025 GMT
Subject: CN=0119caa500cfe54a596f2314bd71bce11614bade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0c:6f:70:21:96:f6:43:22:f6:71:80:8d:5f:
92:b5:83:22:55:dc:4d:a8:af:da:e7:22:cf:49:62:
6e:ab:09:1b:c1:5f:d4:40:0d:08:b5:57:29:61:f6:
90:00:13:fc:33:76:5b:4f:af:43:9a:b1:08:89:98:
f1:dc:1d:25:82:91:4a:ad:46:00:e3:b2:2d:d1:fb:
09:72:e7:1a:b8:79:5f:e6:5e:73:e5:cf:56:12:ac:
66:67:18:bc:d7:6c:98:1c:12:26:e2:67:90:ea:fc:
58:05:d7:68:41:16:4e:f4:83:78:3e:4a:9d:5f:cd:
bf:07:f2:9e:18:49:3b:f9:b5:8c:58:00:86:be:8e:
a1:4c:45:36:eb:22:1d:0c:47:72:d4:f6:1c:0c:01:
26:4b:15:fe:29:43:1a:13:06:fb:b9:a5:36:b5:6a:
4e:f1:b3:ec:3d:9d:14:78:09:ea:7f:b3:dd:82:13:
31:1c:f8:52:0b:be:5a:17:46:62:9c:d5:fa:e8:c6:
2b:e2:8f:90:38:75:f4:bb:73:b6:8b:c1:0d:31:e9:
44:8f:12:41:05:09:f9:f2:ba:4c:af:18:52:ee:27:
94:f4:91:e9:96:26:0a:c9:12:39:a1:61:e2:31:bf:
ab:dc:4b:01:09:59:3c:76:3d:05:7c:38:6b:90:79:
70:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:19:CA:A5:00:CF:E5:4A:59:6F:23:14:BD:71:BC:E1:16:14:BA:DE
X509v3 Authority Key Identifier:
keyid:D5:FB:52:6A:33:F3:66:AA:89:46:18:8E:5D:32:6B:DC:E4:6E:2C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ec:1a:e6:33:e7:2e:01:42:ee:b6:83:0a:ec:d8:7e:b9:91:
70:39:3e:43:3a:e6:0b:78:d6:2d:06:63:6c:22:84:cf:e8:ee:
47:1f:db:16:02:87:20:8d:4d:2d:e6:44:57:4f:21:b3:0b:aa:
77:b8:01:b9:54:fb:d3:e7:c2:24:45:d2:d2:f6:da:d7:1a:7d:
e6:8d:3b:74:5f:63:70:63:0e:b5:a6:72:02:6b:64:28:50:91:
d3:42:0f:f4:fc:74:7c:6b:0b:83:1a:07:6f:d3:4b:ca:42:26:
02:a3:f0:32:14:57:5e:58:01:46:e1:45:94:7e:38:c4:52:04:
06:3d:a7:8f:82:5a:64:f6:60:08:e3:1e:22:69:15:80:25:3b:
f3:3b:31:ed:76:37:bc:f4:8c:1c:c4:48:40:4b:02:11:fa:45:
7a:fc:d5:f5:71:98:e8:67:bb:57:9f:37:38:9b:92:3a:a5:70:
4c:44:2c:74:a9:8c:1c:30:0f:8d:7f:e8:01:c9:95:37:1f:6d:
1b:35:bb:77:aa:8c:b3:e6:9c:3d:ec:b5:25:4d:83:eb:17:f8:
09:e1:86:c8:96:75:10:fb:d8:56:75:70:50:6a:53:c4:c7:5e:
58:59:8d:f4:96:92:f8:3f:ea:a3:cb:bb:70:a6:93:bd:c5:e1:
19:af:6f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:56:23 2025 by rpki-client