Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
File: 1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft (raw, json)
Hash identifier: jiYoTIt94bIIl994JCUz33SCEP5G8SNr5aRR1HiEwUg=
Subject key identifier: 62:1D:B0:84:DB:41:42:53:D7:EF:BF:37:AD:E2:5A:75:0F:A6:88:68
Authority key identifier: D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA
Certificate issuer: /CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa
Certificate serial: 0198469B35B6F78F6A997A75D977E0B87F49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 12:00:33 +0000
Manifest this update: Sat 26 Jul 2025 12:00:33 +0000
Manifest next update: Sun 27 Jul 2025 12:00:33 +0000
Files and hashes: 1: 1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl (hash: plIufWcgWlHfHj3hc0dauIHBk2ICBwWCSEbqwbb/TYk=)
2: qflKZTF3zhSp7clCgQY6deaVcuQ.roa (hash: YrrT0H2VFpPiuVpFBvUMkkYVOwRQGbWJWicWDvr4Ns0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:35:b6:f7:8f:6a:99:7a:75:d9:77:e0:b8:7f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa
Validity
Not Before: Jul 26 12:00:33 2025 GMT
Not After : Jul 27 12:00:33 2025 GMT
Subject: CN=621db084db414253d7efbf37ade25a750fa68868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c8:5b:18:5e:5f:94:51:0a:28:ec:c5:de:2f:
74:5f:d3:1b:9a:54:af:5c:af:4f:9e:a1:63:5d:ad:
45:ce:ed:56:b8:2d:12:06:1f:dd:29:2f:c8:0f:dc:
36:14:a8:99:a3:97:64:b6:03:dd:11:48:89:4a:f6:
75:56:2a:0e:d5:05:bd:e3:c9:3d:09:04:93:4e:d6:
3b:95:f4:b2:49:d3:07:b3:dc:7a:b2:2d:64:fb:ad:
6e:8a:67:c0:2d:70:28:e7:16:57:48:67:63:60:1d:
6a:98:f5:75:9c:98:f1:98:ed:94:bc:b6:c7:38:26:
b5:82:cc:4b:9b:56:e8:9d:51:d4:fe:b1:17:56:53:
b1:63:cf:45:5c:a3:94:4c:78:6c:8e:04:d7:90:df:
29:df:d7:5a:1b:7d:53:9b:b0:d7:75:0a:b8:9d:42:
b3:9b:26:61:d8:8f:f5:d6:e4:ec:9a:70:48:4b:c5:
96:c7:a6:72:96:de:68:1a:9b:63:a5:4b:5e:8d:80:
eb:11:b5:31:b8:85:a8:98:b8:04:d9:4e:e7:c3:d5:
d5:5d:79:92:8d:ca:e5:ec:99:40:d6:23:a1:64:28:
b7:fd:3f:bc:3b:7a:76:91:3f:17:d9:58:93:6c:86:
ca:36:f4:bf:5d:e3:26:9e:c0:b6:89:9e:b6:b1:f8:
41:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1D:B0:84:DB:41:42:53:D7:EF:BF:37:AD:E2:5A:75:0F:A6:88:68
X509v3 Authority Key Identifier:
keyid:D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:4b:81:a7:1c:3b:b8:44:21:5e:04:41:31:2b:4c:36:7f:1c:
48:a4:cb:0d:8f:7c:d2:b9:27:50:52:f3:41:22:84:94:32:71:
63:ab:dc:c1:18:d3:c5:77:a3:61:43:d7:c1:55:58:fc:f1:91:
f1:c4:55:41:55:9e:cc:b9:e8:d1:38:af:53:5b:28:5d:43:46:
90:54:6b:fe:13:48:95:34:bf:f7:14:9b:3d:ad:02:9c:a7:62:
c2:a1:fd:c2:5f:5d:47:9f:e7:b6:27:52:27:de:2c:e8:c3:44:
14:8c:d9:70:de:e4:4d:11:03:38:64:9b:1a:8e:35:5b:b7:e3:
46:e0:13:b5:01:50:36:3a:22:d8:a2:3c:75:5c:a1:20:ae:dc:
b8:30:8c:d8:13:40:61:f0:b3:64:1d:3d:12:35:7f:39:f1:08:
a3:1a:10:f7:13:9d:41:a4:9a:55:d6:71:63:f7:83:06:d8:15:
fd:ee:0b:37:4a:d7:68:33:7a:5a:c2:1f:c0:62:c6:59:00:08:
24:a4:fe:7e:b5:42:74:cb:5e:03:45:d8:1d:53:2e:f0:85:47:
86:37:5e:90:5b:03:5b:ce:d3:f7:38:c5:a3:04:99:4d:8b:3d:
73:dc:f1:f8:5e:65:24:ab:91:5f:17:bf:88:08:c7:58:34:94:
ad:64:30:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:44:39 2025 by rpki-client