Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
File: 1sJp-ek7D7i8SxyUerxbIfIfIwU.mft (raw, json)
Hash identifier: cD78I81i/rW30qIO4/4MT1XrpOE3H7vf+oKPngiQ2fE=
Subject key identifier: 01:13:99:DB:57:D3:64:2F:EE:38:88:B8:25:EA:D4:10:93:28:96:02
Authority key identifier: D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
Certificate issuer: /CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Certificate serial: 01984106F8D490356329C3C471D741534C69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
Manifest number: 053C
Signing time: Fri 25 Jul 2025 10:00:32 +0000
Manifest this update: Fri 25 Jul 2025 10:00:32 +0000
Manifest next update: Sat 26 Jul 2025 10:00:32 +0000
Files and hashes: 1: 1-4EUUJ60y6tCuL7fMYLuUTMussI.roa (hash: ZCZ3I6CzJy+9WHfI/N/oUofNXCUICsdPSdQOOtiTJMs=)
2: 1sJp-ek7D7i8SxyUerxbIfIfIwU.crl (hash: zQBxwEMD1hcTkA06VAtL9ccG5wJ8YdzrCZgkiAuX8Wo=)
3: AJ8BcEY-DdXcTmxMdYHCmI3RxoU.roa (hash: 3dzyfVQpkuELs7hezXS9c0EUIsSeRiw+pnrqw/PWP6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:06:f8:d4:90:35:63:29:c3:c4:71:d7:41:53:4c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Validity
Not Before: Jul 25 10:00:32 2025 GMT
Not After : Jul 26 10:00:32 2025 GMT
Subject: CN=011399db57d3642fee3888b825ead41093289602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:07:cd:f4:8a:5d:f9:b8:74:cb:06:bb:df:f1:
bf:81:ef:b6:f3:de:71:45:b2:f6:f0:c1:79:f5:59:
a3:6a:1f:10:bf:85:74:ad:3f:46:0f:86:da:96:37:
94:8f:0d:e5:43:ca:94:1e:89:cf:7c:39:4b:4e:1b:
f0:a0:82:c6:86:32:15:d4:6c:d1:62:34:21:08:b8:
58:fd:4f:1a:ae:5d:9d:87:12:ce:4b:be:bb:b1:ad:
82:ec:f2:d8:2f:27:72:e3:af:19:b1:f0:57:5a:7e:
22:55:bb:37:58:4b:fa:ce:63:aa:7e:3c:35:e8:b6:
ea:cc:f5:3d:c1:6f:ab:26:6f:1b:70:c0:f7:3f:c2:
fa:2b:82:1d:d4:61:07:ca:44:67:30:ee:61:5d:f9:
55:6e:ab:d6:5d:6f:94:1c:bd:54:aa:cb:fe:a5:e7:
1e:e7:2f:1e:3a:4f:7f:e1:d0:93:e0:c6:28:d7:90:
cf:c1:ee:05:97:6c:4c:fd:17:b2:a0:a1:6e:f5:96:
77:8d:a0:d9:01:6a:a2:fc:2c:30:f7:9f:df:cb:62:
15:4a:ee:b0:21:48:22:fe:ee:ca:16:e0:b6:ba:f0:
88:0c:1d:55:7d:3c:6f:07:fc:e5:d5:70:60:ec:88:
88:0f:ed:fc:c6:88:ff:4f:68:19:b8:33:58:61:94:
16:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:13:99:DB:57:D3:64:2F:EE:38:88:B8:25:EA:D4:10:93:28:96:02
X509v3 Authority Key Identifier:
keyid:D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f8:be:01:e9:35:bf:04:4a:bd:0e:07:54:3b:d1:51:bb:b6:
10:f1:70:cf:c2:94:08:e7:14:40:25:6d:c4:7b:1b:d5:c0:33:
46:c4:9e:58:89:45:f2:fe:1f:38:01:54:2a:31:28:14:fd:2c:
9c:00:49:c0:5d:ec:ce:93:80:9a:4f:d7:6e:ff:2d:84:ec:38:
f7:4e:e0:39:f8:c7:cb:70:91:de:a1:4e:b8:f1:ed:10:f3:c1:
07:f4:e7:0e:23:ad:2e:c9:04:8b:7c:87:30:68:a7:3b:1e:c2:
fd:2c:23:54:0a:df:04:19:ef:6d:9f:b1:ae:16:9a:af:17:c7:
a8:aa:0a:fc:ba:2f:b9:37:70:4c:7b:e5:d4:70:57:ba:dd:bc:
f7:0c:e8:f4:c5:48:e2:16:ea:62:68:92:4c:95:27:d5:aa:8c:
ed:b7:4b:7c:10:13:e0:8b:ea:ea:50:99:ab:ce:4b:2f:1a:29:
d7:be:eb:72:a5:f0:d1:cf:86:24:d9:00:45:0f:c9:65:a4:48:
ca:9d:eb:0f:ba:a4:15:a0:4f:ed:be:7c:57:b0:b5:a8:59:f1:
ec:a0:e3:20:ee:49:e4:aa:e5:44:96:e5:bf:96:53:31:36:8b:
5e:d9:6d:b9:1a:99:0a:97:82:6a:6a:fe:01:f4:a6:f9:b5:e2:
4c:5d:c1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:06:16 2025 by rpki-client