Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
File: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft (raw, json)
Hash identifier: xunp5GOtIKi02VKXeM9cqfS8CIZqy6IJOYq6Nld5EVg=
Subject key identifier: CD:73:F7:C8:66:8E:87:5E:20:26:BF:F5:33:A8:E6:DE:12:ED:A8:BB
Authority key identifier: F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
Certificate issuer: /CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Certificate serial: 01984DE6C5F70991D535024559039EC36377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
Manifest number: 035B
Signing time: Sun 27 Jul 2025 22:00:26 +0000
Manifest this update: Sun 27 Jul 2025 22:00:26 +0000
Manifest next update: Mon 28 Jul 2025 22:00:26 +0000
Files and hashes: 1: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl (hash: pWnNCIhvTsdcE47XKSRRI0/jDPwpgFrZJyixGeBbDAc=)
2: HexBDB0ALKRx19vAL_olvRM_0pc.roa (hash: ajSzA7jvEEstqpYQIZuBqV7eWXJVONLQH581vvaQYJc=)
3: PrcLqHgKnfIRGf3YM80gSjoYr6I.roa (hash: ZkwH8oTWm6e+gIX3jU/BvkpmjX7EH4UuYT++yIKL1DQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:e6:c5:f7:09:91:d5:35:02:45:59:03:9e:c3:63:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Validity
Not Before: Jul 27 22:00:26 2025 GMT
Not After : Jul 28 22:00:26 2025 GMT
Subject: CN=cd73f7c8668e875e2026bff533a8e6de12eda8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:04:90:c8:f0:e8:6e:a1:31:71:20:49:d6:e2:
f0:e7:fe:e9:77:6a:8b:1f:a4:39:56:93:45:5c:f5:
a2:8c:1d:3e:31:d7:f1:12:4b:2a:d0:95:cd:e1:f9:
ec:fc:55:fa:9a:35:bd:01:82:70:80:3b:9c:3e:43:
fe:88:09:d2:af:a4:ea:ca:b7:73:19:2c:1c:e3:a8:
47:b5:55:5e:e3:c8:c3:27:f7:7d:84:fd:94:34:98:
11:e3:e3:fa:dc:c4:6a:be:8c:17:a4:f5:b7:53:d1:
b6:43:31:bf:0e:f6:7a:99:ab:00:4c:51:a6:26:ee:
c6:74:4c:73:f0:3c:ff:d3:87:ff:27:35:bc:21:76:
53:cf:f1:b4:b8:e4:86:b6:7e:1f:e1:d2:a8:57:29:
f3:73:65:f4:19:66:ec:6b:97:de:69:38:13:87:ab:
47:e1:99:fa:55:97:a8:3d:7a:b3:e2:94:70:95:bd:
de:0b:77:79:07:6e:d3:65:0c:e5:51:9c:db:e3:97:
53:7a:50:67:f0:3b:81:cd:fa:cb:94:8c:f0:ba:b7:
63:ae:26:e5:eb:15:14:a5:e8:43:b0:ea:21:a2:1f:
e4:8d:fd:06:06:26:c4:3c:44:91:4c:b2:e3:37:51:
19:3f:61:fd:09:26:8e:9b:20:a1:d6:e1:5d:6b:62:
f7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:73:F7:C8:66:8E:87:5E:20:26:BF:F5:33:A8:E6:DE:12:ED:A8:BB
X509v3 Authority Key Identifier:
keyid:F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:8e:aa:d9:59:be:bb:54:f6:e9:5e:1a:ea:6b:b0:d2:ab:94:
f9:88:fb:b9:8b:54:15:8f:73:32:fc:ba:28:61:72:53:98:ca:
34:6d:e9:f7:4a:1d:db:8c:aa:d7:a4:05:04:14:6b:52:db:11:
54:60:77:4d:59:84:bb:23:19:e7:e6:a6:f6:5b:51:be:55:b1:
f7:f9:16:bb:bd:91:bd:76:30:5b:c0:6a:9b:c6:87:0c:6b:4b:
ba:81:9b:ab:d6:82:d5:48:72:b4:ed:33:17:aa:8d:8d:70:5f:
04:d5:97:cc:82:fc:b0:3c:68:c8:e4:fb:ab:98:22:54:0a:ea:
bd:6c:e0:55:06:ba:d9:b0:98:44:5d:6c:8c:19:3d:f6:e4:7c:
81:a1:3b:c8:77:91:de:88:1d:f7:b5:91:bc:d5:d8:3e:39:7a:
85:07:33:55:46:5f:0c:c7:5c:17:21:a6:e3:ba:bd:a1:f3:93:
8b:d9:4c:b6:de:44:3f:63:b4:cc:35:45:fa:0c:1d:f8:19:87:
bf:38:cf:ec:e3:c7:38:18:c3:4e:f8:4e:ec:f3:c9:e8:01:ce:
0d:83:09:60:17:4e:66:a3:81:5f:98:86:88:a7:80:f3:a0:e3:
7b:f6:cb:3f:bf:d8:74:19:61:65:29:76:6c:84:dc:8d:bf:4a:
d2:33:b7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 01:11:15 2025 by rpki-client