Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
File: 1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft (raw, json)
Hash identifier: 10rc63wxsP3olkAKrkHY9YJwjEJ1sJSSIogJ9gl/ZPU=
Subject key identifier: AF:2E:CB:2C:DD:1C:59:EB:88:5C:45:3F:48:4D:9E:9E:02:81:27:40
Authority key identifier: D7:03:CE:AC:90:6D:07:F7:4C:A9:4C:44:63:03:D9:54:66:6B:58:3A
Certificate issuer: /CN=d703ceac906d07f74ca94c446303d954666b583a
Certificate serial: 01983314B38761BE0CA22618200B91FE6A6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
Manifest number: 15F6
Signing time: Tue 22 Jul 2025 17:00:51 +0000
Manifest this update: Tue 22 Jul 2025 17:00:51 +0000
Manifest next update: Wed 23 Jul 2025 17:00:51 +0000
Files and hashes: 1: 1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl (hash: aCGqvjl0NLXWJPl+36HWDCdCvlfRiHu6YTmMdw3hcLU=)
2: FkDDEmYYETOpVMpWkL7RuuEpqTY.roa (hash: kK3s8Vv/PXYJJP7bWNTiE/RHQRNUSZAURtLuU/aMQ6g=)
3: _X7C7V6gpKHfD2GzsHWwwqpaOyU.roa (hash: YNwkjNTaSE+wVt7Z8QQHUfLIQalMph9DlkM4NPeZKPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 17:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:33:14:b3:87:61:be:0c:a2:26:18:20:0b:91:fe:6a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d703ceac906d07f74ca94c446303d954666b583a
Validity
Not Before: Jul 22 17:00:51 2025 GMT
Not After : Jul 23 17:00:51 2025 GMT
Subject: CN=af2ecb2cdd1c59eb885c453f484d9e9e02812740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:45:af:b0:51:63:a2:42:48:09:f1:30:db:2b:
e8:bc:cb:40:1e:e6:ac:28:b4:5f:c6:95:36:5f:f4:
53:eb:ac:af:11:b4:94:be:56:63:1a:72:9b:c8:2b:
de:be:74:80:65:30:1f:66:52:51:6d:cb:b9:c5:c7:
8d:1b:7d:ac:aa:74:1b:eb:62:4e:3f:d0:a2:a9:17:
4a:a7:77:65:45:bf:4b:51:1c:1a:f1:a9:32:85:67:
01:3f:26:56:08:19:e1:1c:3d:0c:61:43:1c:8b:b4:
38:45:02:27:76:6a:64:cf:0e:db:64:c2:9c:21:0a:
17:bb:b5:7e:8c:9c:d5:c0:e7:4b:e8:d7:b5:57:2d:
75:4d:7c:4e:61:df:3a:44:7f:9b:95:d8:dc:5a:71:
73:d0:6f:1d:63:8d:cd:b6:47:78:41:31:9a:d5:84:
ae:fd:6f:2d:1c:60:31:bb:bc:43:6a:63:85:9e:47:
1e:43:1f:bb:4a:85:cb:10:9c:64:d5:27:83:8e:b9:
e0:c2:90:2f:cc:d1:0d:e9:a8:e3:9a:82:c3:d4:4d:
8d:79:2a:de:1f:18:c0:e9:91:a1:70:91:39:5c:1e:
8c:f0:a6:60:93:55:96:d8:9e:57:d2:e3:a2:2d:42:
b6:4f:f8:91:27:cc:da:10:ed:6e:6e:af:6d:f9:a3:
43:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2E:CB:2C:DD:1C:59:EB:88:5C:45:3F:48:4D:9E:9E:02:81:27:40
X509v3 Authority Key Identifier:
keyid:D7:03:CE:AC:90:6D:07:F7:4C:A9:4C:44:63:03:D9:54:66:6B:58:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b2:41:9e:39:aa:af:23:85:c6:ac:70:13:81:e2:3d:ad:c8:
ab:49:f0:95:e6:21:6a:dd:9d:bb:04:14:04:eb:9c:08:83:6c:
b4:f6:c3:d2:6f:20:11:8a:9f:fd:e9:c7:0d:68:58:a8:da:42:
cf:a6:df:21:77:00:76:a2:86:8a:ec:71:eb:81:fb:65:27:81:
04:6a:a7:99:ce:a8:c4:4c:f9:57:20:69:1b:c6:1f:f1:72:07:
e3:3d:39:c0:3c:73:08:d2:0f:e8:01:66:57:51:d8:ff:a0:27:
ea:dd:76:a8:d9:0a:2a:32:44:27:5f:9b:fd:6a:ab:e0:c2:1d:
1d:75:cf:2d:4a:44:6a:fa:77:8c:bf:4f:22:3f:dd:16:e6:9a:
25:04:dc:d8:6f:8a:cd:50:e8:74:0a:8c:7d:ac:54:fb:76:1c:
ac:ca:4c:ec:6d:d2:6e:bf:23:0c:08:09:f7:ad:4d:03:e9:a9:
76:97:40:c6:3e:0a:95:a1:8a:aa:12:b4:43:93:39:a8:1f:9b:
00:4c:c6:8d:b6:ba:a3:94:12:72:79:b9:06:c9:c9:96:16:6e:
36:28:f8:be:49:24:1a:5b:f0:c5:87:05:87:f2:53:e8:10:2c:
c5:71:c3:1b:2e:d7:d1:38:a0:c1:27:60:0b:c1:da:2a:1b:01:
31:92:30:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:15:59 2025 by rpki-client