Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.mft
File: 1nYY00F5w-pSMwJkoZZBh7I83SQ.mft (raw, json)
Hash identifier: n0Ewq99pP8LA/e5H2Em7nNHTW6zH9Sl4bnQISdEf09g=
Subject key identifier: DC:A1:53:04:36:8B:5B:47:ED:BE:38:00:9B:A1:9B:85:15:EC:5B:76
Authority key identifier: D6:76:18:D3:41:79:C3:EA:52:33:02:64:A1:96:41:87:B2:3C:DD:24
Certificate issuer: /CN=d67618d34179c3ea52330264a1964187b23cdd24
Certificate serial: 01984BC148149E54870C72FDDA79FA6D8920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nYY00F5w-pSMwJkoZZBh7I83SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.mft
Manifest number: 1116
Signing time: Sun 27 Jul 2025 12:00:14 +0000
Manifest this update: Sun 27 Jul 2025 12:00:14 +0000
Manifest next update: Mon 28 Jul 2025 12:00:14 +0000
Files and hashes: 1: 1lITG_UqnfavYQ_xoQlV3wFv38U.roa (hash: EEjmi7deVkOh9RZ1Yb2ahklKAUhFdcMk/pd79vay4U0=)
2: 1nYY00F5w-pSMwJkoZZBh7I83SQ.crl (hash: WVaAny3uElnHYNqNdHl6beUEERzyRjV6nH9nNkZVnR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nYY00F5w-pSMwJkoZZBh7I83SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:48:14:9e:54:87:0c:72:fd:da:79:fa:6d:89:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d67618d34179c3ea52330264a1964187b23cdd24
Validity
Not Before: Jul 27 12:00:14 2025 GMT
Not After : Jul 28 12:00:14 2025 GMT
Subject: CN=dca15304368b5b47edbe38009ba19b8515ec5b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a0:5a:46:94:c6:bc:88:9a:e8:4a:0f:27:d8:
3d:3c:ea:d7:f1:3b:02:14:7d:84:25:11:20:4e:7f:
4f:a9:c7:05:91:c3:e0:d8:71:f4:d7:93:ab:80:18:
e3:5c:55:12:58:c2:8c:fd:0f:44:1f:23:d0:e8:2a:
3e:8b:db:40:da:43:11:5d:c2:bb:81:11:bf:81:34:
35:ce:4d:8a:56:23:73:c5:50:e8:ad:7c:10:d7:54:
8c:44:ab:9f:b2:db:4d:9a:d6:d9:d8:e9:75:85:cf:
4b:2d:e7:57:38:01:e3:98:9e:c3:5a:29:ad:fb:8f:
94:f5:1d:07:86:fe:1f:75:a1:4f:75:10:68:d2:72:
64:cd:4f:19:30:60:29:ce:47:c4:3e:3e:35:75:d7:
c2:2c:cb:1c:46:c7:4b:23:cd:58:2e:a7:b2:03:e7:
17:43:28:ec:05:c4:88:db:5b:85:9d:8d:1f:46:01:
91:d4:5a:bf:75:0d:3b:e9:74:5a:d9:c0:76:86:75:
ac:1e:1d:e8:81:78:2f:7e:e0:15:b2:97:51:65:fa:
72:c5:e2:18:ad:7d:ab:f1:90:e4:67:ed:8d:78:7c:
7e:93:f9:61:1a:da:5b:c6:26:24:14:6e:24:8c:44:
3f:66:99:9d:83:ba:6a:e4:84:29:ec:79:43:5d:4c:
ee:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A1:53:04:36:8B:5B:47:ED:BE:38:00:9B:A1:9B:85:15:EC:5B:76
X509v3 Authority Key Identifier:
keyid:D6:76:18:D3:41:79:C3:EA:52:33:02:64:A1:96:41:87:B2:3C:DD:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nYY00F5w-pSMwJkoZZBh7I83SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/47f513-76db-4a61-b1be-74dc8386dc6a/1/1nYY00F5w-pSMwJkoZZBh7I83SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:4b:83:e4:0f:30:86:5e:81:04:b0:76:ea:c5:f2:da:30:fe:
fa:67:a1:6f:e8:e3:e2:35:7d:18:18:45:35:75:be:18:09:f8:
a4:9d:0c:e4:2a:e6:7f:fc:f0:c5:51:21:ac:47:8d:f1:99:4f:
c6:f1:53:f8:e8:62:11:53:c1:49:bf:5b:81:80:4e:33:f9:34:
ad:f8:bc:6f:b3:9d:24:9b:91:45:a0:18:d8:1e:bd:3f:6e:a5:
4d:a5:23:13:eb:6c:d9:78:ba:72:b4:78:3e:b1:0f:13:c6:46:
5c:31:54:e7:38:29:19:20:5e:9f:be:20:1c:d2:a8:9f:90:ae:
bc:fc:90:f5:86:37:c1:bd:3f:d9:a6:8b:9b:57:56:e2:63:30:
19:c3:e0:30:e2:5a:f6:5a:44:f4:c7:9b:91:e9:6d:40:a4:49:
26:9f:e0:0f:12:87:20:e5:b6:a5:2c:c8:41:a2:34:3f:8c:36:
ea:97:95:6c:65:4e:3e:87:fa:01:cf:a1:42:22:7d:4b:21:21:
55:15:82:24:9c:06:2d:1c:6d:4e:62:4e:e9:07:32:96:92:ed:
66:97:f9:df:68:eb:70:66:6a:aa:a6:8b:32:0c:ed:78:28:2d:
51:89:a7:c4:1d:9d:4e:3c:23:e6:d8:07:e1:23:93:52:22:c1:
60:4d:04:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:04:08 2025 by rpki-client