Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
File: 1DdYFDRN8L9tAXczrNxIjwAmMbI.mft (raw, json)
Hash identifier: yZyEPRh1YiCTbDkTTv97KwO7aSpfj9cG2pS6HpXu5lw=
Subject key identifier: 7A:34:8E:94:D7:C3:B3:B8:88:E8:74:6D:CC:3E:9A:84:74:57:74:DC
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 01984A77C4448480F08722DB8CAF884167C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
Manifest number: 161D
Signing time: Sun 27 Jul 2025 06:00:19 +0000
Manifest this update: Sun 27 Jul 2025 06:00:19 +0000
Manifest next update: Mon 28 Jul 2025 06:00:19 +0000
Files and hashes: 1: 1DdYFDRN8L9tAXczrNxIjwAmMbI.crl (hash: p+AoPsf38jqPHbSAdUVUnn3OaihT8nR+JTSqI5c+5zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:c4:44:84:80:f0:87:22:db:8c:af:88:41:67:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Jul 27 06:00:19 2025 GMT
Not After : Jul 28 06:00:19 2025 GMT
Subject: CN=7a348e94d7c3b3b888e8746dcc3e9a84745774dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:37:0c:2b:2e:f6:a7:5d:2e:26:d5:bd:36:85:
a6:a9:c8:19:dd:4e:0a:6e:d0:f3:e8:2b:ae:a6:05:
96:02:3d:84:64:fd:1c:e9:57:13:bc:4f:d5:c3:1a:
21:2d:8e:fb:c9:7e:ba:50:ce:2e:55:fe:06:ed:f9:
de:82:38:0f:21:20:fb:1a:30:f1:a8:2e:66:1f:1a:
55:f6:95:86:4a:f0:f0:81:c5:46:ce:86:0f:ab:b4:
2e:01:c5:81:9b:f5:aa:f6:85:1f:a8:65:06:55:8e:
10:96:f8:db:9b:f6:73:ad:f3:2b:83:e7:d7:cb:82:
74:ba:26:f3:15:01:67:10:5a:5f:50:72:5b:f3:8b:
4b:b7:e7:1c:cb:98:f5:f5:13:31:4f:b7:bf:10:ea:
cc:ee:d2:c2:5e:cd:89:b4:6e:7f:f7:aa:e5:aa:51:
ee:fc:cb:13:fc:db:d2:ff:1b:42:4a:84:68:37:ec:
3b:6e:82:a5:eb:8a:ab:4c:1f:d8:ba:aa:0d:c3:fb:
ae:88:3e:db:b8:c5:f1:fa:cb:1c:e8:38:c6:23:05:
bc:e6:47:a3:d1:81:80:8f:7e:fe:32:c2:bd:42:6c:
ce:b5:ac:c8:03:71:40:6b:01:e7:37:d3:89:69:f4:
dc:13:43:3d:1a:61:c1:cc:6d:69:19:c0:24:51:73:
99:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:34:8E:94:D7:C3:B3:B8:88:E8:74:6D:CC:3E:9A:84:74:57:74:DC
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:9d:58:f8:89:9a:0a:60:75:fd:33:a6:6c:2f:6f:ae:b4:42:
39:a8:1f:8f:83:41:80:22:15:04:32:06:07:72:24:52:9f:ec:
ea:8a:37:79:a7:2d:e8:b0:63:a2:f0:b3:1f:f4:84:36:f0:f0:
04:f7:ac:c7:1c:c9:47:a4:42:b3:8a:da:e0:3d:ae:7e:33:61:
18:d6:3f:18:99:e9:35:8d:2f:93:91:76:67:a5:8d:37:9c:8b:
2a:f3:fd:a6:b2:96:ac:5b:45:0a:f2:86:3f:83:ef:e2:52:7f:
7e:5f:54:a7:c4:0e:93:70:dd:76:3a:21:15:04:ec:cc:1a:eb:
b1:4a:35:17:0e:bc:f1:5f:33:fe:ab:8e:ae:2b:bd:ea:1d:dc:
70:83:9c:01:bb:6f:b9:fa:b9:1e:33:aa:d3:b1:ef:e4:e2:fa:
b1:38:c7:88:25:e0:fc:df:f0:6f:1d:03:06:53:28:d7:3c:a6:
06:9d:19:0b:57:6d:2b:c8:54:3f:08:b7:70:6a:0c:b8:2e:df:
48:76:aa:6c:f8:cf:4c:7d:d3:b5:1e:fb:7e:d7:99:87:19:3d:
20:44:27:5c:be:db:f1:f5:b8:90:b8:3b:24:c8:ec:20:be:2f:
02:52:53:ad:d6:a2:e2:93:1d:ed:d9:db:35:3a:30:c4:88:dc:
01:97:f9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:13:57 2025 by rpki-client