Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
File: 1ztArr-IwXsbViEopW9CRfLxVDg.mft (raw, json)
Hash identifier: O1x8OUdqwaHgpGbGbaeHcc8y73C4eSdGyZUFP9/WpFo=
Subject key identifier: 9F:BB:2C:EF:75:53:06:61:5E:CD:30:A0:52:93:CC:06:CC:79:C3:41
Authority key identifier: D7:3B:40:AE:BF:88:C1:7B:1B:56:21:28:A5:6F:42:45:F2:F1:54:38
Certificate issuer: /CN=d73b40aebf88c17b1b562128a56f4245f2f15438
Certificate serial: 01984852AD9E383107DDFE767ECFD65BF3EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
Manifest number: 14D7
Signing time: Sat 26 Jul 2025 20:00:34 +0000
Manifest this update: Sat 26 Jul 2025 20:00:34 +0000
Manifest next update: Sun 27 Jul 2025 20:00:34 +0000
Files and hashes: 1: 1ztArr-IwXsbViEopW9CRfLxVDg.crl (hash: rNMs5TySFkousWIlRs2v+S++67WSm1dgtROYFMdvQG8=)
2: fAenkccYvoOHEDML32yn807Jw6Q.roa (hash: 3BpxdC7ljMXfXdlUeHh5VXiJ8eVP4DoTTn7sLwUeuhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:ad:9e:38:31:07:dd:fe:76:7e:cf:d6:5b:f3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d73b40aebf88c17b1b562128a56f4245f2f15438
Validity
Not Before: Jul 26 20:00:34 2025 GMT
Not After : Jul 27 20:00:34 2025 GMT
Subject: CN=9fbb2cef755306615ecd30a05293cc06cc79c341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ea:16:7a:96:c3:1d:90:ce:10:18:90:a5:00:
a3:1a:98:1f:fc:9d:c9:8f:84:f3:7d:45:00:d1:e2:
61:ad:90:89:d9:c1:bc:41:de:c0:d0:0d:b7:ef:7f:
36:81:41:9d:d7:28:45:25:ac:fd:6c:7a:64:e7:2c:
0c:ae:59:31:97:b6:cb:7c:ae:be:55:86:cf:77:8a:
7c:99:2f:93:be:7c:cf:7b:7f:76:e0:88:65:7d:cb:
76:26:08:8c:2b:1f:6d:0b:c5:aa:7e:a8:95:c3:1b:
60:7f:89:bc:12:87:cc:f0:3f:78:bd:cd:9e:be:16:
18:43:ba:1d:59:fe:45:8c:85:82:d1:27:c5:01:a4:
9b:72:33:1c:af:c8:8b:33:8b:38:b9:39:40:ca:f8:
80:e9:dd:36:ba:42:d0:91:9e:6c:23:a8:2e:b1:46:
7c:37:c0:1d:cb:c7:84:24:f9:2f:13:c4:3f:e5:4e:
34:1e:c1:77:83:21:ff:9c:8c:e4:75:68:b6:0c:d7:
cc:7a:c1:ea:25:e1:84:1e:79:42:c7:cb:70:de:dd:
fe:e1:d5:ec:dd:04:4c:2f:d5:f3:0a:61:e0:d8:a6:
72:4c:dc:43:dc:9d:aa:94:de:0b:cc:f2:d1:71:b1:
28:8d:68:6d:08:bb:01:68:e4:a2:f4:c3:21:1d:06:
4e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BB:2C:EF:75:53:06:61:5E:CD:30:A0:52:93:CC:06:CC:79:C3:41
X509v3 Authority Key Identifier:
keyid:D7:3B:40:AE:BF:88:C1:7B:1B:56:21:28:A5:6F:42:45:F2:F1:54:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:c8:88:47:8f:63:17:ac:31:26:23:d3:a6:33:0d:e6:4d:3c:
22:c8:fe:42:26:5b:05:2b:aa:fb:d8:6f:4b:0e:c2:29:a8:09:
72:73:24:4c:53:8d:1f:27:e6:37:0b:19:43:7e:95:a7:15:41:
be:50:22:75:75:55:3b:1b:ae:99:c9:1f:01:37:91:b9:33:75:
64:99:b6:a9:a8:37:44:50:52:89:ee:39:b7:14:e8:ef:e6:80:
48:71:6b:d4:2f:67:32:90:c4:ac:61:8e:9e:fb:87:62:49:d6:
14:a9:bc:98:9d:1b:5c:d5:44:2b:7a:d2:4a:13:5c:05:e8:7e:
4e:a4:ed:5c:ff:35:c3:27:45:6e:f2:c6:a1:65:51:f8:57:3c:
d9:43:62:dc:cb:f9:b9:83:87:00:9d:79:f2:83:47:26:67:9b:
4f:c4:dc:6e:e1:ce:9b:8b:d7:57:7f:12:28:41:8a:80:ef:b8:
22:98:8e:61:67:39:94:92:df:f1:e3:59:18:96:5a:27:fe:ce:
76:d9:2f:7e:29:21:bb:06:66:b4:9c:84:28:00:c9:5f:a3:c2:
49:5b:a7:c1:bf:53:9f:a6:a2:37:ab:70:11:7b:ab:79:aa:0b:
45:9d:45:df:fe:0c:38:a3:68:a0:b8:fe:75:f5:dc:1f:d1:28:
8e:d4:61:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:58:01 2025 by rpki-client