Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
File: 1RWTKWDzwXTUlXq-n1qylSZNVFM.mft (raw, json)
Hash identifier: ymESkXiZK/sbCrULOeN/JWK6jTkD2UF5s6lV6UnydEc=
Subject key identifier: 4D:6B:6A:84:8B:A0:99:36:EF:6D:C1:7F:25:30:A7:CC:A2:26:88:16
Authority key identifier: D5:15:93:29:60:F3:C1:74:D4:95:7A:BE:9F:5A:B2:95:26:4D:54:53
Certificate issuer: /CN=d515932960f3c174d4957abe9f5ab295264d5453
Certificate serial: 019828231C59D54841922DDF89DD1879D763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
Manifest number: 58
Signing time: Sun 20 Jul 2025 14:00:46 +0000
Manifest this update: Sun 20 Jul 2025 14:00:46 +0000
Manifest next update: Mon 21 Jul 2025 14:00:46 +0000
Files and hashes: 1: 1RWTKWDzwXTUlXq-n1qylSZNVFM.crl (hash: NEWRFDV++IYwizGxexSXEAADPvqYYqVJCQOn2I5OVDU=)
2: 5-grPTSSQ46ki6vrVlQC7SeehIc.roa (hash: vQAPGdX1KSbjltYnmf1gVhaVezYrxmfY7AB2aHZ+pA4=)
3: NBYK9HcV9zHH6p3edxqHgVRXk0w.roa (hash: ctgn9UPX1hGKPuPf8G1MPg9i0aaG134wq4vfRAm3Qis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:28:23:1c:59:d5:48:41:92:2d:df:89:dd:18:79:d7:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d515932960f3c174d4957abe9f5ab295264d5453
Validity
Not Before: Jul 20 14:00:46 2025 GMT
Not After : Jul 21 14:00:46 2025 GMT
Subject: CN=4d6b6a848ba09936ef6dc17f2530a7cca2268816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e2:2b:ad:0c:54:45:80:dd:af:09:9e:fb:95:
8d:6e:01:42:9d:12:57:95:84:0d:75:01:63:2f:1f:
5f:91:31:fd:22:80:96:ba:5a:d5:fe:86:d5:8e:84:
f9:ae:99:db:3e:01:10:ff:28:f2:a7:63:12:75:08:
96:8b:7c:0b:a9:32:a7:f4:42:8a:e5:a0:b9:a8:2d:
21:83:b4:01:58:4f:99:f3:83:8a:5c:c3:8e:0e:d3:
bb:91:0a:f1:1b:62:11:b2:2d:e5:90:3d:83:2a:c7:
16:e3:e0:92:39:5c:f2:88:4b:a4:fe:2b:ce:8c:33:
96:2b:2b:27:62:47:0d:e2:f6:9e:b5:0c:da:57:bb:
ed:ba:4b:0a:a4:c8:18:1f:9c:f7:0f:dc:7b:e2:8a:
78:ba:62:bd:c6:50:0c:34:e0:77:f8:a5:f8:bc:03:
5d:72:2f:60:7f:94:6d:2f:d4:ca:1c:cd:8a:75:e2:
b4:96:6a:a7:40:42:df:7f:c1:3b:70:06:6c:56:aa:
57:a9:7d:9f:96:58:1c:06:7a:45:76:c9:8b:b4:34:
99:d7:0b:cc:34:f8:28:10:3b:3e:28:da:4f:42:73:
44:62:77:cb:2a:d3:75:f0:10:f0:fa:76:ee:27:b0:
ac:34:3f:f2:f4:9e:3c:68:8b:d7:10:79:13:fa:4b:
48:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6B:6A:84:8B:A0:99:36:EF:6D:C1:7F:25:30:A7:CC:A2:26:88:16
X509v3 Authority Key Identifier:
keyid:D5:15:93:29:60:F3:C1:74:D4:95:7A:BE:9F:5A:B2:95:26:4D:54:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:72:d4:f3:5d:d8:91:5f:b7:a2:88:bb:2f:25:88:3c:f9:b2:
c1:f0:73:6f:91:47:04:76:2b:87:df:a8:e2:b6:f3:4a:24:b1:
fb:38:77:c2:d1:9d:3c:d0:dc:5c:61:98:c5:77:45:13:a9:bf:
92:c7:23:5c:e2:c7:e1:03:04:68:11:d6:01:0d:2f:a8:2d:26:
c1:60:ad:83:45:39:a5:fe:cf:1c:6f:fe:4f:ed:07:65:56:12:
94:e1:a1:a5:9b:75:9f:39:cc:c7:9e:04:07:ad:f3:67:97:25:
6c:5c:55:22:26:16:c8:59:9a:5f:42:74:41:f7:e9:50:97:61:
90:01:78:78:5e:a3:ad:41:68:e6:b4:3a:2a:93:6a:48:b4:82:
12:d2:93:55:90:1e:31:4b:27:a1:58:85:57:9f:04:e7:1a:5c:
8f:fe:88:d0:17:a9:7e:3c:b4:6f:bd:82:d3:b0:ea:62:01:da:
53:c3:f7:e9:29:1e:3c:40:9a:8a:93:96:13:f8:64:2f:9e:a3:
cc:d9:58:6c:c0:fb:c5:10:80:7f:8b:7d:00:97:80:54:e6:41:
65:83:98:b6:0a:62:05:31:53:22:28:67:71:d4:ad:67:e6:0d:
77:e1:6c:74:71:58:8e:27:bf:9b:d1:4e:55:b1:93:ff:83:c6:
a9:e1:00:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:24:52 2025 by rpki-client