Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
File: 1LvtYwkUOYI-05GkclNsD8r-iVc.mft (raw, json)
Hash identifier: JMu/BJ9PrM+3R8Pb+NxTle2uzersSYWaB8inHNPgIGI=
Subject key identifier: 9E:AD:88:CE:A6:45:02:AA:00:19:22:F9:81:1A:ED:7B:77:2E:45:8A
Authority key identifier: D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
Certificate issuer: /CN=d4bbed63091439823ed391a472536c0fcafe8957
Certificate serial: 0198542018B3AAB93BE02965131941D2D506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
Manifest number: 1606
Signing time: Tue 29 Jul 2025 03:00:46 +0000
Manifest this update: Tue 29 Jul 2025 03:00:46 +0000
Manifest next update: Wed 30 Jul 2025 03:00:46 +0000
Files and hashes: 1: 1LvtYwkUOYI-05GkclNsD8r-iVc.crl (hash: dZzBNT0hJnlE5Gv2J7EnCCZt3nG6eKfjxTQUFgmwG6M=)
2: xwtPGS1yMeN-HM3DHZ4Zn1vag7Y.roa (hash: L3GBOsFd0bBnPhXITzZhpRuxfNXWQNfdanb1RhnwKUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:20:18:b3:aa:b9:3b:e0:29:65:13:19:41:d2:d5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4bbed63091439823ed391a472536c0fcafe8957
Validity
Not Before: Jul 29 03:00:46 2025 GMT
Not After : Jul 30 03:00:46 2025 GMT
Subject: CN=9ead88cea64502aa001922f9811aed7b772e458a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:10:b7:8f:80:d1:da:2b:33:b3:07:27:82:ee:
f6:6f:e6:ff:7b:44:41:52:02:5d:00:9d:1e:3d:28:
90:a7:73:98:43:d4:6a:bd:62:a2:98:5b:3c:a8:2a:
b7:7c:1a:8d:6d:6c:e9:2a:d4:92:06:f4:a3:a2:e5:
03:e1:25:1b:88:61:8c:92:c9:be:fa:62:58:00:af:
c4:ce:34:a7:ae:dc:a9:e0:0a:35:d5:d8:96:9a:c7:
f2:cb:6c:bb:b6:a0:3c:5d:d0:98:24:4f:ad:35:08:
2c:5f:1b:85:64:43:90:ca:ed:4c:d8:03:df:93:0d:
8e:05:f9:29:fc:83:d9:41:fc:ed:b4:49:d0:bb:76:
6a:9a:13:5a:af:3c:7c:e7:97:4a:91:bb:45:29:24:
4e:6a:f3:bf:d8:43:1a:b6:34:fd:97:5d:47:07:e8:
2d:1e:e8:da:df:e7:9e:64:6b:0a:7a:be:e9:1e:81:
de:dd:6d:85:28:82:cd:cb:9c:81:82:94:35:47:af:
87:8a:96:e2:99:72:e4:75:d6:b6:1c:e9:1d:47:b7:
2f:90:00:ef:fc:9e:c1:b6:72:0d:4b:ea:b3:e8:92:
1d:7a:52:ca:1b:29:2d:e4:2f:45:2c:d9:dd:8a:23:
14:8d:46:7b:b2:75:2a:80:0f:85:2b:32:70:69:5f:
d6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AD:88:CE:A6:45:02:AA:00:19:22:F9:81:1A:ED:7B:77:2E:45:8A
X509v3 Authority Key Identifier:
keyid:D4:BB:ED:63:09:14:39:82:3E:D3:91:A4:72:53:6C:0F:CA:FE:89:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LvtYwkUOYI-05GkclNsD8r-iVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7757ed-d020-471f-bbc5-17bf202e5eee/1/1LvtYwkUOYI-05GkclNsD8r-iVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c9:61:e2:20:c8:bc:03:1e:7a:a6:6f:99:d7:3b:01:ab:32:
23:6c:db:d1:eb:7c:ad:6b:0f:6e:ca:0d:04:bd:1d:18:90:98:
6c:6c:4a:77:98:1d:7e:a8:17:c4:31:19:8f:31:e8:17:92:35:
f2:f4:6a:d6:f7:5d:77:b4:cc:7a:64:d5:fb:db:cf:d1:dc:dd:
17:ff:32:4c:bb:15:13:da:86:d4:12:99:1a:bf:a3:1f:f0:82:
b9:ea:f0:39:c1:90:74:d5:d2:5e:da:90:1f:5b:c1:89:69:39:
ee:5d:7d:09:bd:c6:96:20:86:f2:af:ef:5e:52:7f:0f:45:d1:
d0:67:35:dc:44:1f:17:4d:1c:2f:25:8a:45:3f:41:e2:d7:f8:
41:ac:24:ec:41:e5:18:63:13:92:f5:fc:df:a4:6e:0b:e6:d8:
e8:f6:78:75:62:07:b0:c7:2e:7d:a4:93:32:64:68:1e:64:b0:
fc:58:59:d9:0c:83:e3:dd:83:7c:e9:8c:e9:b0:d3:a0:76:c1:
a8:81:d9:15:63:db:f2:55:bf:f6:bf:84:fc:ea:65:2c:42:10:
10:59:33:85:82:90:4f:c2:52:eb:80:f0:7f:f9:5e:cd:ff:bf:
4b:7c:6d:cc:43:97:a4:b6:a9:b2:25:df:88:bf:36:f8:0a:ef:
44:a3:c0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:32:21 2025 by rpki-client