Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
File: 1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft (raw, json)
Hash identifier: 7L3QTE1AxZjf8s06kKk81XVzppgg7Ng8FrnWbM0H6Ek=
Subject key identifier: 3E:A3:A4:41:02:FA:99:DB:AB:B4:50:24:E0:81:6F:0C:07:D7:98:11
Authority key identifier: D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
Certificate issuer: /CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Certificate serial: 01984A09BD7B247463D3773C7503BCFC3AEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
Manifest number: 0C91
Signing time: Sun 27 Jul 2025 04:00:08 +0000
Manifest this update: Sun 27 Jul 2025 04:00:08 +0000
Manifest next update: Mon 28 Jul 2025 04:00:08 +0000
Files and hashes: 1: 1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl (hash: MrmVWv0FNGSw6Yo8g2ekyn8jxriQzDvCp9uK/83mqNs=)
2: 3ZY4SnX1yy3L1vAgX9voAeMkVFA.roa (hash: tg2AmRn5Z2Y+ThyLPd/HKMkLP9Uc9wkQQiNjIF3J+mw=)
3: ugCHO46pUQzd5zqdNawWJEPystY.roa (hash: BahKiNdd/pZ/56ATzb3cvkxPGvUYcM+QZnAs5IV/tZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:bd:7b:24:74:63:d3:77:3c:75:03:bc:fc:3a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Validity
Not Before: Jul 27 04:00:08 2025 GMT
Not After : Jul 28 04:00:08 2025 GMT
Subject: CN=3ea3a44102fa99dbabb45024e0816f0c07d79811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:37:48:83:b1:e5:07:5e:e9:82:d7:a7:2b:4b:
ab:b8:30:a5:b8:53:76:82:e2:1e:26:24:4a:b1:d0:
46:8d:1e:ec:4b:09:5b:a9:da:07:43:36:58:22:8b:
13:c4:bf:aa:38:1d:90:69:e9:c6:ac:e2:f0:57:8f:
d3:eb:84:59:af:78:76:fb:01:af:06:37:f7:c8:31:
c7:d0:29:07:c2:f4:85:12:d5:0b:76:69:80:62:bf:
bd:a2:7e:a6:cd:46:a1:5f:10:1f:e3:dc:27:29:b2:
49:a6:f7:31:be:ce:02:c2:4d:0f:40:43:0b:dd:64:
ca:da:26:19:e8:0d:ee:05:f8:9b:98:61:c5:fe:8a:
0c:20:67:52:d0:55:08:b7:eb:bf:2f:f1:41:c1:8b:
15:46:5d:69:6b:7b:52:e3:6e:bd:59:ee:ed:dc:9d:
d2:81:65:c3:2b:f4:8f:20:5c:fd:99:f3:fd:4b:e4:
44:7e:99:d9:e4:d6:b3:64:2a:bc:e4:af:15:a2:71:
67:a3:05:51:55:18:de:20:2b:b0:00:32:bd:d2:71:
99:9e:e2:aa:28:a6:56:8e:43:9e:cc:04:ee:f9:2d:
fb:87:1e:ea:fd:89:18:dd:38:a6:9c:e8:5c:f7:d9:
7a:e2:2d:90:f7:d8:40:3e:4b:c3:33:0b:14:ac:4f:
01:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A3:A4:41:02:FA:99:DB:AB:B4:50:24:E0:81:6F:0C:07:D7:98:11
X509v3 Authority Key Identifier:
keyid:D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:01:59:21:ce:69:1a:53:2c:1c:74:60:c4:be:5b:43:26:66:
55:c4:a3:83:41:74:83:73:33:d9:37:3f:f6:9f:04:a2:bd:65:
d2:7b:a7:26:eb:ad:2c:1f:99:e7:c5:57:ca:eb:52:cd:0d:86:
84:76:ac:d0:35:fd:e5:e7:15:86:59:cc:94:11:fa:75:ba:09:
58:fa:07:aa:34:2d:e9:29:45:e6:18:4a:ba:28:a7:51:42:78:
e6:d2:91:d5:ea:10:2f:6a:69:68:21:55:b6:57:b7:b5:7b:ac:
93:f3:df:e7:42:20:20:dc:c7:26:9e:65:09:49:29:66:a4:e7:
d7:06:5a:69:38:61:1a:9a:ff:62:d6:63:bd:e0:a6:cf:d3:26:
65:c6:84:0b:4c:b0:2c:e6:cf:42:c2:de:5d:6e:53:1a:af:4f:
09:5a:ca:9c:ad:f9:a2:03:31:0e:ec:c6:83:1b:9c:01:e0:b4:
ad:f0:d6:50:a1:0c:9f:62:ea:b3:e1:0f:7c:55:bc:40:a6:24:
1e:21:8b:23:44:e6:63:33:78:d4:02:c7:e1:ea:f7:d3:2b:b7:
c3:f5:6a:eb:56:28:05:7c:f9:0b:6b:82:d1:cb:d0:6e:fc:a8:
8e:83:c3:b0:93:2f:73:04:ba:55:33:ca:e3:cf:ce:bc:33:ed:
e3:f9:a2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:16:29 2025 by rpki-client