Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
File: 1BcD2zAgzB7y_XEJGkaPSmScI48.mft (raw, json)
Hash identifier: CGR+Mv4TNB+UuhiiuZlkoXVOxmCm4ZtLJjGRfHgnmQk=
Subject key identifier: 0D:0F:94:C6:2B:6C:67:06:18:33:48:A7:59:C6:6D:9B:9F:8D:41:96
Authority key identifier: D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
Certificate issuer: /CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Certificate serial: 019841746BF941BCAAB4536FABC5B8C34F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
Manifest number: 1611
Signing time: Fri 25 Jul 2025 12:00:05 +0000
Manifest this update: Fri 25 Jul 2025 12:00:05 +0000
Manifest next update: Sat 26 Jul 2025 12:00:05 +0000
Files and hashes: 1: 1BcD2zAgzB7y_XEJGkaPSmScI48.crl (hash: 6HyXYOcYXgVzrt83oTCGwja/6p/PvGNv4IAnehH5mMs=)
2: SwxmsvxnegUK_dz06j_bmvCP-xU.roa (hash: qF5sISq5xs4U3hp9EFxCSMocasNmdfjsoQWek7B0tOQ=)
3: dumiLPj8dIgbkOu_ODKjUhmF_rM.roa (hash: kFpbhODmKPkVFS8czIjYIk5us47dHmcmchszyizHwz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 12:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:74:6b:f9:41:bc:aa:b4:53:6f:ab:c5:b8:c3:4f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Validity
Not Before: Jul 25 12:00:05 2025 GMT
Not After : Jul 26 12:00:05 2025 GMT
Subject: CN=0d0f94c62b6c6706183348a759c66d9b9f8d4196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b5:7c:74:c8:44:17:cb:4d:9e:a7:ce:71:8b:
72:0c:81:bf:ac:9b:e9:80:1e:39:57:a0:b5:d2:d0:
c0:07:8c:47:af:5a:31:c4:65:89:b7:50:7a:80:90:
f6:6d:82:fa:06:c5:fe:bb:e1:ab:74:2a:eb:f6:ae:
0d:0c:b2:59:c0:54:81:53:4c:41:13:a1:47:55:92:
7c:d3:92:4c:8b:99:13:d4:25:1a:62:b1:f2:1c:77:
a1:f6:96:ca:a8:7b:10:d5:3b:6e:c7:9c:ec:03:03:
15:a8:a2:90:d1:f0:3e:8a:7a:09:3c:c5:4c:16:13:
2b:fc:8a:03:ba:63:a5:52:23:52:03:dd:e2:26:f7:
49:99:49:54:db:28:3a:2e:d9:d4:33:cc:d5:c1:b4:
ff:f8:b9:81:e2:77:1e:20:6b:7b:21:13:af:92:e4:
fb:9f:70:fc:dd:f1:d4:55:a6:71:b2:fd:88:5f:98:
39:30:c5:a3:00:0a:be:1a:ee:bb:5d:c7:6c:10:0b:
9f:aa:e7:a1:1b:5c:2d:16:27:a7:95:c6:1f:16:90:
36:6f:49:32:2b:46:d3:9f:da:a1:2b:6a:d9:b7:05:
da:57:b3:0d:48:30:8c:2e:3d:58:eb:a8:46:9e:da:
da:f0:b7:27:89:4b:39:68:e7:97:95:75:19:f6:4b:
c6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0F:94:C6:2B:6C:67:06:18:33:48:A7:59:C6:6D:9B:9F:8D:41:96
X509v3 Authority Key Identifier:
keyid:D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:37:4f:02:4e:ed:f5:32:58:39:52:d0:62:de:55:4c:2e:94:
b1:be:00:b8:62:33:b5:44:00:9a:7b:95:03:5a:a5:b4:93:31:
9f:ca:a0:37:3d:12:74:e3:44:e5:5f:d6:f7:61:c5:a9:d6:a2:
b4:9b:92:2c:5a:93:0a:69:45:02:08:45:4d:9c:a9:4c:85:0a:
c5:6a:65:3d:aa:2a:12:73:b2:48:9a:bb:64:80:a7:c3:c0:20:
8e:48:a9:dc:e0:ec:33:38:b4:42:cd:21:a5:cf:ae:d9:66:f1:
0a:0d:7e:fe:a0:e3:1e:40:07:9c:9c:1c:51:d2:e6:1f:be:08:
b3:e1:86:2f:50:5e:58:d7:f5:90:50:44:d8:c2:95:7f:1e:ea:
be:98:37:5e:5e:c1:a7:13:ca:39:11:3b:f0:c8:39:d6:e4:11:
79:43:4c:4c:8a:21:c8:d9:87:9c:33:f7:bf:b0:43:81:b9:93:
7d:38:80:e0:d3:d3:6a:8a:d5:a7:c6:de:93:3b:2e:5d:0f:cc:
b9:0a:ab:3e:4a:01:08:58:20:ee:15:20:5b:ee:af:41:33:a6:
3d:a8:03:35:fc:22:8f:91:7e:6c:b9:3f:3d:11:16:79:12:d5:
1f:54:ac:93:15:9c:b5:18:ef:54:26:e1:d6:1d:12:98:06:10:
cc:e9:26:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:36:21 2025 by rpki-client