Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
File: 1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft (raw, json)
Hash identifier: KFqxyt/pXziDKZ3RFJYHR/B+3zsk5gH3A27oledexQQ=
Subject key identifier: 65:83:9E:11:CC:DB:AA:C9:50:04:FC:C9:D0:79:35:4B:8A:37:03:07
Authority key identifier: FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6
Certificate issuer: /CN=fa1d54e1585ac097c3f91defc033dda5722ea1e6
Certificate serial: 01984B543B3BBD72CE8241FD5562CB68610E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
Manifest number: B7
Signing time: Sun 27 Jul 2025 10:01:07 +0000
Manifest this update: Sun 27 Jul 2025 10:01:07 +0000
Manifest next update: Mon 28 Jul 2025 10:01:07 +0000
Files and hashes: 1: 1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl (hash: J/NTOOSyldPVh8PaEtDwDyZIXg33qmdH32PAUb2k2So=)
2: aw0urpJM4p93PhWqM7da0_3Fozc.roa (hash: y+1M15neToXwBCTOLJI0dSNYHmOEXNHkxHoQ5Af6Zqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:3b:3b:bd:72:ce:82:41:fd:55:62:cb:68:61:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1d54e1585ac097c3f91defc033dda5722ea1e6
Validity
Not Before: Jul 27 10:01:07 2025 GMT
Not After : Jul 28 10:01:07 2025 GMT
Subject: CN=65839e11ccdbaac95004fcc9d079354b8a370307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ed:74:26:57:d2:4d:49:8a:34:6a:a0:7f:4c:
2a:94:80:c0:f0:12:ac:ab:85:fc:a2:29:aa:a2:fd:
a7:01:52:24:db:e0:f9:46:59:28:91:28:ec:14:8d:
aa:4e:97:14:17:40:53:6c:1f:42:3e:ca:53:78:24:
0c:2c:9d:a8:b6:5f:bd:c5:d7:9f:06:68:b6:f3:07:
19:a5:5d:48:24:45:f6:93:98:82:97:fc:50:9a:c2:
ec:ae:40:5f:dc:93:61:68:bd:9e:73:52:e9:cc:a7:
23:c8:9c:e3:c8:2a:d3:65:2e:53:17:3f:2e:41:f1:
2f:71:a4:ab:6c:0d:78:4a:ad:ca:54:2a:38:4f:5b:
0f:f8:24:38:61:e9:a3:49:b3:44:71:8d:65:fa:ea:
f9:3a:1b:6a:34:bb:ea:4f:99:59:cd:32:b0:bd:45:
50:a5:98:47:81:f7:24:50:ad:56:18:e5:dd:c6:17:
50:96:98:2f:b7:c7:1d:33:6b:94:85:c9:9f:5c:02:
a3:b0:18:a6:09:de:26:2b:43:ec:04:85:ff:87:64:
c7:c3:2a:d2:c7:6f:7c:00:80:0a:ca:75:54:d1:d5:
16:fd:ac:ae:96:73:52:a1:4d:db:90:3f:90:ed:cc:
de:02:2d:fb:e3:da:12:56:fc:1e:ff:eb:02:ac:ea:
ff:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:83:9E:11:CC:DB:AA:C9:50:04:FC:C9:D0:79:35:4B:8A:37:03:07
X509v3 Authority Key Identifier:
keyid:FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:f6:d9:b1:a1:cc:c7:a9:f8:31:e1:41:fa:04:de:02:29:91:
1b:ea:d4:e4:8f:03:6e:2b:62:8b:be:c5:99:3f:6f:1e:5e:a6:
fa:f6:5f:ad:11:3d:72:88:13:70:4b:54:c5:eb:b8:7a:71:ef:
83:cc:05:c2:01:f9:dd:a4:00:d5:35:8a:74:72:2e:0a:1f:79:
a3:08:fa:b4:bc:68:1e:5b:c4:97:94:62:95:0d:28:cc:4d:80:
f5:be:50:5c:7c:ee:6c:2b:e1:05:fa:07:e4:12:f4:ca:ff:ec:
73:0f:4d:23:d4:f4:0a:ab:d0:90:da:59:1f:95:f6:26:2e:dd:
ec:0e:cf:77:1f:0a:85:ce:00:0c:38:23:9b:c6:e4:a4:1e:6a:
97:7f:36:78:65:3d:bf:4e:c3:3b:9a:4b:42:64:3b:df:c3:35:
f1:d1:f2:81:c3:84:86:b1:06:18:d9:e5:73:e9:5e:e3:fb:0a:
a3:50:4a:c1:29:b1:c2:d3:66:af:52:76:67:55:4a:d7:73:27:
4e:6f:74:40:5e:c2:d7:0e:17:77:72:b5:7d:4e:b7:1b:dc:00:
96:77:a8:73:0d:b9:97:d1:bf:1e:a9:ae:24:87:04:4f:92:5f:
51:cf:38:7b:16:f5:bb:84:5f:68:66:b1:74:11:8f:8f:15:39:
cd:7a:ec:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:49:57 2025 by rpki-client