Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
File: 1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft (raw, json)
Hash identifier: H3QWwXbA57oYFR5l6CUZa7tHplImOpGSEvSWbzX+mMI=
Subject key identifier: B0:2E:8A:08:24:5D:4E:B7:6E:89:AD:D9:2A:08:28:24:12:2D:BB:49
Authority key identifier: D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
Certificate issuer: /CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Certificate serial: 0198529F8CDFB31A6B72254D9716A23F574B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
Manifest number: 0127
Signing time: Mon 28 Jul 2025 20:00:44 +0000
Manifest this update: Mon 28 Jul 2025 20:00:44 +0000
Manifest next update: Tue 29 Jul 2025 20:00:44 +0000
Files and hashes: 1: 1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl (hash: Ca5upseU7uEmwELEXCCRkxMZm2SZAAaY7+ubJBFL/DU=)
2: Mhhz4wUnWbhungV9qmdIiiClbC4.roa (hash: vs++Lho+ybbPqiNcZp7StywgPzEvRC+QjSZW2g6/U6I=)
3: Ri1W5hGdOA2IQn0eWHH7b3-bfws.roa (hash: P/qvYKsl5b2W4hd0B25iig5CdZGpWYsMZEWjWtHjTyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:9f:8c:df:b3:1a:6b:72:25:4d:97:16:a2:3f:57:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Validity
Not Before: Jul 28 20:00:44 2025 GMT
Not After : Jul 29 20:00:44 2025 GMT
Subject: CN=b02e8a08245d4eb76e89add92a082824122dbb49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:37:83:7a:1a:56:87:e9:97:f7:46:fc:78:b7:
74:12:1d:81:f6:4e:d2:bc:20:33:dd:b2:8f:9d:1b:
d2:88:44:3a:9e:16:61:90:55:86:68:e9:fa:ac:47:
b2:6f:06:94:77:02:e5:c5:dd:66:75:4e:fd:ce:ca:
6e:ba:98:0f:72:f8:05:b1:b3:46:e5:79:c6:59:5e:
83:77:c3:60:aa:43:f4:e7:b1:66:ff:41:a6:f5:4e:
08:fd:6c:2a:80:7b:a4:01:4d:e2:52:98:1b:80:3f:
03:6c:46:89:1c:b2:4c:c6:1e:43:d3:f9:fc:a6:58:
9f:3f:4a:9b:32:57:d1:6f:6a:7d:00:7b:8b:87:92:
85:6c:46:1b:77:67:6d:81:b4:0f:62:46:ce:b8:9e:
cd:e4:dc:04:87:de:fa:2d:c6:ae:06:9d:de:d1:0c:
41:a2:03:e3:a1:99:aa:39:68:a0:84:94:d4:1c:1c:
2f:2c:73:e6:79:91:52:a2:40:43:3f:41:5c:5b:b0:
e9:06:1a:ab:bb:57:31:68:86:d5:63:86:f6:21:9c:
ef:4a:ad:30:ac:ce:4e:52:b7:65:61:64:f7:e3:5c:
6a:a8:05:d7:50:a6:88:80:90:11:ca:dd:1d:ff:2c:
32:f8:1f:51:a8:e8:35:ba:a2:b4:bc:09:47:09:2a:
4f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2E:8A:08:24:5D:4E:B7:6E:89:AD:D9:2A:08:28:24:12:2D:BB:49
X509v3 Authority Key Identifier:
keyid:D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a2:61:f5:85:b2:a5:3a:b1:c5:e7:98:fa:1f:95:9c:64:91:
1d:10:7e:1e:97:48:cb:f2:07:49:22:69:79:7f:57:96:df:b5:
b0:bc:1b:ee:df:8d:2e:ec:4f:1d:a4:92:97:84:31:c2:ad:fc:
b2:0a:4a:c0:c3:e0:3d:78:61:02:09:c2:a9:73:9a:1d:6b:4c:
08:52:3c:9c:63:ba:ad:b3:dc:df:cc:78:c6:47:e4:2b:ef:83:
82:4e:a6:64:fb:a4:4c:7e:d3:62:d3:3a:4f:d1:b6:8a:72:e3:
04:16:4d:ea:79:7b:bc:4a:fa:95:30:07:39:e7:6f:41:61:3c:
5b:38:75:4a:4b:27:dc:7a:7a:ac:78:3d:66:8c:1f:70:0e:1e:
c3:2e:4d:4d:5b:ee:a1:0f:f3:cd:c9:a0:d1:b2:80:8a:2d:63:
99:a6:c1:d7:72:71:16:20:bc:be:ac:ce:fe:cb:18:5e:0a:de:
7b:51:95:c1:d8:47:b9:b7:31:0b:04:e3:d5:fc:c0:27:ad:3c:
fa:6d:86:b8:e1:2e:0c:68:c6:0b:ea:d6:2d:05:a3:23:a6:d5:
f7:5a:1b:8f:e6:9d:32:e0:97:50:e4:a9:d2:89:34:c1:04:13:
86:60:ec:d4:85:a1:b1:e3:5e:12:e4:fd:59:d3:65:a4:66:f5:
45:b8:55:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 05:22:48 2025 by rpki-client