Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
File: 1P3VliZ9VvfOVuv67IajJwj-3gA.mft (raw, json)
Hash identifier: 3XqglE8topDe4tONqpsN08Z0yH7sI8eYAX1L1x2Wunw=
Subject key identifier: 41:2F:4C:75:F2:41:E2:0B:08:F5:42:C7:0F:C9:A8:35:6D:0A:F9:CD
Authority key identifier: D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
Certificate issuer: /CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Certificate serial: 01985CB61FABF460849E92725E7E5F53AD6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
Manifest number: 1611
Signing time: Wed 30 Jul 2025 19:01:36 +0000
Manifest this update: Wed 30 Jul 2025 19:01:36 +0000
Manifest next update: Thu 31 Jul 2025 19:01:36 +0000
Files and hashes: 1: 1P3VliZ9VvfOVuv67IajJwj-3gA.crl (hash: XJ2oRjQkqldK34mjLDEKbYg/v6uOHzjX7HdkAgEPwGk=)
2: kXAoycjFnk5ToJYqqTkBxzOraGU.roa (hash: +7rp8yWmgsLGmzgq1w+1h/kN+7iJKvOfloIbj12Qykg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 19:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5c:b6:1f:ab:f4:60:84:9e:92:72:5e:7e:5f:53:ad:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Validity
Not Before: Jul 30 19:01:36 2025 GMT
Not After : Jul 31 19:01:36 2025 GMT
Subject: CN=412f4c75f241e20b08f542c70fc9a8356d0af9cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:02:bc:6d:91:f7:b8:87:d4:44:22:b1:fb:78:
95:30:96:92:23:79:6b:c3:46:6d:c4:a6:3b:06:89:
b5:ba:66:e6:b1:1a:ab:74:a5:39:8d:7d:6b:7f:3f:
2f:5d:3a:1c:0b:d8:e4:e8:8a:67:6b:51:94:af:52:
32:a8:08:9e:1b:58:2a:00:c4:60:cc:44:f6:1b:6f:
64:b2:b5:4f:fd:e1:0e:3a:09:5c:bd:8b:67:8b:8c:
d0:b4:fc:4b:be:9f:fb:21:9c:ba:0d:e6:1a:77:f7:
dc:09:16:e0:41:c5:10:1a:00:eb:e7:f0:9b:b5:95:
39:c8:fc:e9:08:74:93:2b:c2:9b:5d:85:32:d3:d9:
4a:c9:a9:04:e4:0d:ba:0b:ed:3d:09:c1:13:ca:f9:
89:06:13:56:e5:98:6d:cd:81:e8:b7:a5:46:8d:c6:
ba:67:79:ed:71:c5:a0:07:97:8e:5e:94:7f:7a:11:
10:70:39:24:e0:c4:a6:c5:2e:b2:65:c0:8a:ed:31:
0c:b1:a6:66:09:e0:31:5c:21:fc:c4:a2:d6:a6:d2:
c2:4a:3a:ee:56:4c:4a:31:8b:1a:88:50:52:ea:99:
0d:ae:72:1a:de:2d:8d:98:6c:79:d1:8a:43:8e:04:
8a:81:3a:6e:4b:f1:9e:fc:cf:95:43:e2:2c:75:8d:
7a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2F:4C:75:F2:41:E2:0B:08:F5:42:C7:0F:C9:A8:35:6D:0A:F9:CD
X509v3 Authority Key Identifier:
keyid:D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:e9:25:f1:90:1f:54:dc:8b:8e:19:48:a1:eb:5d:ea:e5:24:
c2:c0:b8:33:b4:61:79:a1:d2:33:6b:f1:a1:2a:d4:9d:cd:52:
9b:18:2e:2c:e3:56:9a:84:fa:f9:b2:e3:66:c3:70:dd:a5:33:
a2:69:43:bf:87:13:4c:de:98:1d:65:4d:84:4a:7d:91:36:94:
a7:e6:2f:e1:0a:e7:31:79:8d:ff:1b:0c:4e:44:0c:54:1d:32:
5e:5f:32:19:f3:f8:52:6e:0f:eb:8e:cd:50:f8:1d:6e:ac:af:
06:a6:8c:c6:62:c9:57:21:bf:c3:1a:2c:73:a5:2c:05:6d:0d:
9a:1e:fa:9a:f2:61:cd:3c:93:5d:fe:37:ac:07:df:32:eb:78:
53:a8:65:a1:fc:6f:7e:fd:9f:a8:fe:d3:6b:b0:f6:1f:49:7e:
73:9a:46:fc:3a:fe:57:23:b8:02:34:7f:1f:bc:70:9e:7c:a1:
95:37:04:d1:9c:a4:bd:e4:73:98:a3:7d:bf:cd:ca:5e:d7:37:
53:27:82:6e:de:41:30:a4:ca:e3:dc:ee:b3:fd:e9:eb:a5:e0:
74:47:b6:7f:e9:db:f9:b9:e4:f4:c5:64:5a:10:6e:87:cd:a1:
9d:9a:09:a1:65:df:0e:fd:d1:ae:82:0a:37:c1:63:8e:dc:f4:
2a:2c:8a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 03:53:12 2025 by rpki-client