Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
File: 1--2UOaTkstMuS-5kfzthBVsWnj0.mft (raw, json)
Hash identifier: iucqbj1SQM+6kH34JbUIiVYYhEv9oaK0lMGsFR2KO88=
Subject key identifier: 05:BA:C9:88:0A:12:3B:03:6F:97:E0:8C:CF:33:1A:AB:68:A2:0C:C3
Authority key identifier: FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D
Certificate issuer: /CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d
Certificate serial: 01984BC22C64988BA6859DB1055BA7EB6968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 12:01:13 +0000
Manifest this update: Sun 27 Jul 2025 12:01:13 +0000
Manifest next update: Mon 28 Jul 2025 12:01:13 +0000
Files and hashes: 1: 1--2UOaTkstMuS-5kfzthBVsWnj0.crl (hash: hOAC+NzZSh9bi2L6z0dp0JOPF0kebOV7HoYxxEG2UX8=)
2: 61waeYhYDVs6iShTSFPZPK9QSkM.roa (hash: QQBDA8/+LK2nAVHB2ah071aV/uPCqnuOIT4KbDJAkyE=)
3: dCHPtj1Enu9C_p2jfaqFMRHkj4c.roa (hash: xa0IfezLBVX21PV8VhLDZSxsFF3gEUGakSX8RC4YWfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c2:2c:64:98:8b:a6:85:9d:b1:05:5b:a7:eb:69:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d
Validity
Not Before: Jul 27 12:01:13 2025 GMT
Not After : Jul 28 12:01:13 2025 GMT
Subject: CN=05bac9880a123b036f97e08ccf331aab68a20cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:aa:d7:7e:ed:d5:86:9d:b0:15:93:56:85:df:
2e:8d:eb:df:7b:16:f2:f7:35:83:0a:ec:63:a7:fb:
bf:54:bb:93:74:9c:43:6a:05:ff:cc:78:45:9b:ee:
95:e5:f4:d8:13:4b:e6:37:03:b3:9a:f3:b3:51:d3:
1c:12:c2:66:59:22:3f:36:92:f5:ac:c1:24:31:74:
7d:df:25:47:a0:c7:16:51:ce:ac:f3:87:6f:43:36:
9f:70:86:3f:45:5c:a4:87:75:8e:4f:ff:8a:55:cc:
c6:cb:70:c0:4b:99:f5:75:8e:36:56:24:9c:c2:c5:
e2:71:5a:bd:fb:a3:3b:2b:5b:82:cf:9d:3f:8f:6c:
07:1e:85:25:22:89:fb:d7:84:3f:74:72:24:da:1f:
33:ad:87:ba:51:0d:9c:43:ec:33:bf:6b:f7:fc:2f:
64:cf:88:21:57:25:19:f7:2a:76:31:ba:43:38:ed:
72:a5:24:59:80:fa:a3:79:f1:15:ec:4f:89:5a:d8:
5b:06:6d:30:9e:78:20:6a:cd:69:2c:3f:8a:18:03:
21:20:9a:0c:b1:07:9c:b4:d5:b1:09:02:25:74:af:
8a:92:a4:47:bc:f8:4f:32:0d:86:15:be:4b:5e:bb:
d1:0d:48:fb:e6:f8:f0:b5:0f:5f:24:44:f5:10:f3:
fa:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BA:C9:88:0A:12:3B:03:6F:97:E0:8C:CF:33:1A:AB:68:A2:0C:C3
X509v3 Authority Key Identifier:
keyid:FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:5d:ba:fe:e8:69:dc:ff:ae:06:44:92:13:47:6b:ed:ff:c1:
8c:bb:a8:4a:50:51:73:4a:d4:07:f9:48:14:00:f3:d0:81:ff:
10:3f:f7:6b:dd:a9:7b:a5:a3:d3:62:8f:7a:02:dc:3e:24:2e:
c5:d2:46:28:e3:7d:48:7b:86:11:e1:05:5d:a8:a0:58:49:a4:
3e:c1:13:3b:d1:71:9f:a4:f3:e4:3b:86:44:02:2e:7f:02:c6:
82:a8:ec:7a:aa:03:be:e2:f3:d5:08:01:71:37:e5:05:f2:29:
ed:aa:a1:10:7a:c9:a4:24:0e:25:41:4c:93:3c:d2:04:42:75:
0c:85:89:bb:4d:e0:cb:de:3e:5c:f4:be:51:6f:8b:c4:0b:b1:
4b:91:78:fc:19:2f:4d:71:11:9e:13:54:41:2b:28:4b:87:4a:
88:9f:16:b9:e8:cf:b1:17:02:0c:5f:ac:3a:82:87:55:64:d5:
8f:fd:56:d0:07:d0:39:59:86:5b:fb:66:10:2a:3c:6f:45:7d:
48:89:28:64:ec:7a:f3:91:23:0d:5b:ba:c3:2c:2a:86:bf:4b:
b0:c0:65:b0:7a:ed:12:e3:78:f8:69:a7:8a:39:30:44:e5:b0:
d0:f1:9e:09:93:e0:5d:2d:62:a7:97:2c:89:a8:a5:9d:f3:2e:
4a:50:c7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:32:11 2025 by rpki-client