Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
File: 1ITgzuV1xhkFP47isQBMxEL9LO0.mft (raw, json)
Hash identifier: raMzcMNdEoIqdc3ZCGUCdfhKOMMTTATCQKXyyfV/qWE=
Subject key identifier: 29:C3:6E:95:DA:3B:34:94:FD:EB:D7:A6:F0:DE:48:3A:2D:DE:D7:65
Authority key identifier: D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED
Certificate issuer: /CN=d484e0cee575c619053f8ee2b1004cc442fd2ced
Certificate serial: 019849669249D467BB0211D6FCD4B9CA1C1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
Manifest number: 142A
Signing time: Sun 27 Jul 2025 01:01:55 +0000
Manifest this update: Sun 27 Jul 2025 01:01:55 +0000
Manifest next update: Mon 28 Jul 2025 01:01:55 +0000
Files and hashes: 1: 1ITgzuV1xhkFP47isQBMxEL9LO0.crl (hash: bp8P1BmNheDxAFadYs2IPGrb5RAvkHy4woX5swUivu4=)
2: LlAa--5nsX3tUHGAFZ_HSMFrn7I.roa (hash: 3b1C9Ph3SGavY+PSGpBTlLw28V2WqXhlaeYP73oghL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:92:49:d4:67:bb:02:11:d6:fc:d4:b9:ca:1c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d484e0cee575c619053f8ee2b1004cc442fd2ced
Validity
Not Before: Jul 27 01:01:55 2025 GMT
Not After : Jul 28 01:01:55 2025 GMT
Subject: CN=29c36e95da3b3494fdebd7a6f0de483a2dded765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:61:33:87:dc:ae:64:14:d7:70:79:0f:d0:d1:
27:d5:e5:8d:4a:de:dd:92:ca:c6:05:7a:b9:ee:e4:
e0:ee:95:ac:72:a1:b6:73:e4:6c:cd:7b:1a:b6:9e:
2e:02:70:74:b2:e0:9f:56:a2:6e:f8:1c:43:f2:88:
59:e6:c8:18:7e:fe:cf:dc:c0:79:7a:c4:cc:11:4d:
1b:2d:24:3a:6a:ca:5c:59:37:01:5b:f2:8f:e3:f4:
06:57:62:f5:05:a4:b2:8a:6c:f8:c7:62:f9:5c:22:
b2:c2:68:a6:74:fb:58:9a:27:40:30:db:85:18:34:
86:bb:de:f6:09:db:5d:63:e2:b1:05:3d:c4:0d:1b:
f1:ad:70:2e:42:96:da:08:be:cc:16:09:9d:b0:2e:
f3:36:b2:da:61:60:64:2e:96:af:61:90:e6:ca:0d:
00:b4:b7:e5:15:55:33:cd:d0:d0:08:d9:11:67:66:
be:2f:26:f3:32:db:b1:7d:9c:14:e5:df:d4:83:8c:
eb:0e:36:9a:6e:b0:14:6d:c0:e5:b0:6e:8b:01:8f:
bb:a9:a0:46:59:0f:ae:1a:b0:39:0a:fd:d2:cf:29:
a7:01:7e:54:f6:1d:18:fa:5c:b6:75:03:8f:3f:5b:
ce:91:87:95:b8:35:c5:4f:65:0c:6b:5b:59:ed:12:
ee:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C3:6E:95:DA:3B:34:94:FD:EB:D7:A6:F0:DE:48:3A:2D:DE:D7:65
X509v3 Authority Key Identifier:
keyid:D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:fb:7c:ca:fc:60:bd:47:88:bd:d6:73:04:30:45:a2:fd:3c:
aa:a3:66:d2:91:56:e0:eb:8c:d7:a6:5f:62:e8:09:01:90:a1:
ce:78:08:80:5e:56:b3:e0:7c:44:1c:76:07:59:66:ef:e2:52:
07:0b:57:76:1c:6a:d6:20:0a:e8:0d:8a:fa:8a:98:94:0e:d3:
54:c3:d8:dd:05:0b:f5:93:8b:85:44:05:6c:7e:13:88:f1:56:
52:ac:79:6c:1c:94:7d:cd:6e:72:a1:c2:df:5b:ab:67:d8:e6:
9a:77:d7:93:47:9e:22:86:ab:ff:87:10:1b:ba:6f:16:c4:d8:
40:b5:d6:13:e6:9b:7e:fd:a3:10:32:bf:5e:b8:85:c3:6c:78:
4b:b9:85:cf:7b:bd:02:b4:2a:29:6f:4e:35:15:cd:2d:a6:6c:
87:87:0a:3f:50:3f:1c:f8:87:47:6c:d4:30:be:9d:3c:5b:6d:
3d:f7:c2:2c:e5:ef:af:a1:49:d8:e4:d7:c0:44:85:b8:31:ac:
db:25:e2:81:33:7b:87:d2:8a:7c:8d:17:7b:08:86:47:70:25:
71:f1:64:8f:cd:0c:5c:4c:d6:4b:32:8c:b0:f3:0b:16:73:70:
88:59:ff:52:80:1e:81:97:eb:54:73:69:fb:e0:f7:fe:d6:d0:
8a:ab:32:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:30:55 2025 by rpki-client