Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
File: 1-U3y-PWhPGRTaJFOPb5Coko22l0.mft (raw, json)
Hash identifier: UB5uOOpeEjCigWhbW7S6h4rJ91TxvNiiJ2LTnQFsCg0=
Subject key identifier: 2E:52:BC:A8:EB:A8:A0:5B:7A:84:67:EF:03:EE:A3:A8:44:86:F5:5B
Authority key identifier: F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
Certificate issuer: /CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Certificate serial: 019848C05BF194EBA480E83613DFBF7379D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
Manifest number: 084F
Signing time: Sat 26 Jul 2025 22:00:22 +0000
Manifest this update: Sat 26 Jul 2025 22:00:22 +0000
Manifest next update: Sun 27 Jul 2025 22:00:22 +0000
Files and hashes: 1: 1-U3y-PWhPGRTaJFOPb5Coko22l0.crl (hash: kwJhg7pa7+7FovHXqnHtKVEoY6VZ3QcWykBTfzDorSE=)
2: 6ZlUqBOWy6SfY78F6eyD54lMPAY.roa (hash: SE9+hxx8Z232AXhES9ATqyXkhpq/sJNlQEl+ue1Fkso=)
3: bxOTocJnEMQaZpcfRu6SqZ9nVWk.roa (hash: 24LpjnsSFmDuGUExqtfPTVWojNEGWlT3a13WwNuUa60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:5b:f1:94:eb:a4:80:e8:36:13:df:bf:73:79:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Validity
Not Before: Jul 26 22:00:22 2025 GMT
Not After : Jul 27 22:00:22 2025 GMT
Subject: CN=2e52bca8eba8a05b7a8467ef03eea3a84486f55b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7c:77:24:83:bf:9d:89:1c:67:fa:a4:85:88:
47:c0:94:a7:d9:d2:93:97:14:27:4d:9b:60:81:90:
42:0a:34:19:f9:5a:7b:9d:21:bc:0d:8d:25:f3:6e:
c6:cf:0c:a4:9f:c1:a1:c5:55:1e:e8:18:99:c7:53:
70:64:e5:f2:2a:f8:92:23:ea:36:c4:9a:7c:22:56:
82:0e:7b:26:48:b8:99:35:f1:bf:32:12:89:00:13:
6a:0e:b3:75:29:63:58:b7:69:4e:96:0f:41:4f:7b:
92:5c:02:81:78:be:d6:b8:e4:a3:3f:34:07:e7:c8:
ee:2e:06:b8:bd:e6:d8:49:a9:39:29:be:5f:7f:11:
ee:8a:68:c4:3d:c7:ff:a3:79:48:80:a3:59:a0:d1:
b3:df:e8:45:71:be:28:32:30:89:82:b6:45:0a:44:
57:1b:31:65:bf:56:51:e2:7f:2d:bc:56:68:f0:3d:
d7:a8:c7:6a:2a:e7:c5:21:63:a0:54:7c:9c:5f:c5:
17:87:bf:17:01:8c:c8:d8:12:b7:64:a7:31:70:9b:
1d:d3:09:a7:83:8c:8f:b5:5f:6e:aa:27:57:2b:6e:
ac:c3:fc:8c:26:1e:44:44:73:69:48:8d:51:c0:43:
9a:15:be:c1:14:35:85:c9:2d:2a:45:f1:ad:ae:26:
1f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:52:BC:A8:EB:A8:A0:5B:7A:84:67:EF:03:EE:A3:A8:44:86:F5:5B
X509v3 Authority Key Identifier:
keyid:F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:5e:bd:3f:93:3f:f2:c1:9f:1f:eb:27:d3:02:b7:d3:a0:38:
fb:ee:0f:57:80:de:4b:de:60:5a:c9:08:83:9b:ad:8a:82:52:
dd:01:6b:9a:6e:46:5a:df:bb:84:a2:46:f8:b0:ee:43:d4:97:
e7:06:63:53:cb:60:aa:93:15:c2:ad:98:b6:3e:cb:f1:4f:15:
85:6b:87:e8:fe:07:46:f5:91:5d:19:78:0a:1e:c8:01:55:ab:
32:70:90:ea:37:eb:9e:03:bd:36:7e:a6:76:d8:d6:73:1b:ad:
55:f5:fc:f2:d1:8f:c4:fa:6c:00:dc:e1:33:13:2f:4e:a4:02:
f8:97:19:01:7f:08:af:30:9a:52:f8:dc:64:70:0b:72:08:11:
87:58:3c:31:02:e1:7c:ba:ce:ad:ca:57:0f:ed:6c:7f:cb:78:
25:a6:5c:d9:33:f4:36:27:f5:80:f2:ba:4a:2c:b1:e5:72:4c:
21:28:a3:10:34:aa:0f:60:ec:71:8b:fc:63:91:b5:ae:e2:11:
73:a7:73:52:e0:7a:35:b6:a0:d4:bb:b3:7f:6c:5f:87:97:fa:
ef:ce:29:59:ee:ea:c7:fb:e6:5e:98:24:95:7e:f3:72:93:11:
03:41:31:86:92:58:ce:56:ea:f1:5c:16:8f:47:0b:b2:0e:6d:
bc:01:15:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:35:18 2025 by rpki-client