Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
File: 1M8PvV9uF1mQPMad4NxOokwfg98.mft (raw, json)
Hash identifier: vMwOg9HcshDHxnFBiTKZV+ujMLj6I6LjvsZzFx2zKyA=
Subject key identifier: 73:FE:A5:86:6F:44:B4:99:E5:0A:05:58:CB:DB:B3:AA:62:F6:D8:33
Authority key identifier: D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
Certificate issuer: /CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Certificate serial: 0198500CD40417B18BFF16DF86A62E8AD27B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
Manifest number: 133F
Signing time: Mon 28 Jul 2025 08:01:14 +0000
Manifest this update: Mon 28 Jul 2025 08:01:14 +0000
Manifest next update: Tue 29 Jul 2025 08:01:14 +0000
Files and hashes: 1: 1M8PvV9uF1mQPMad4NxOokwfg98.crl (hash: DZRxIdNBLa/iTvolcCCOF7x442yYR9NBJZuSR1u2phE=)
2: skjABuaYQdSyDecgxOrBPzscPeU.roa (hash: kzk4xU92DAB+Vcg2V/rYHygGxD8dQRxlWxtwdylCcxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:50:0c:d4:04:17:b1:8b:ff:16:df:86:a6:2e:8a:d2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Validity
Not Before: Jul 28 08:01:14 2025 GMT
Not After : Jul 29 08:01:14 2025 GMT
Subject: CN=73fea5866f44b499e50a0558cbdbb3aa62f6d833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:17:ea:87:9b:6e:a7:a8:74:44:1f:a7:54:f5:
57:53:08:08:3e:e5:52:47:b2:fa:94:7e:77:bd:3c:
ab:f4:dd:6e:79:b2:17:4b:45:1c:01:3c:b8:13:21:
23:78:7a:c2:fa:c4:66:2c:20:96:ef:95:91:b8:a5:
b9:3b:d9:b2:c4:ee:ec:ab:4a:c6:45:04:f5:96:e3:
06:63:58:c7:0c:74:63:cf:6f:dc:ec:87:54:20:e5:
9f:04:0b:74:0c:ec:be:92:a2:ed:e1:03:9f:a7:4f:
d6:66:88:f5:2c:86:bd:1d:c0:34:2d:db:a5:35:a1:
60:1b:73:14:86:91:38:b0:7c:7d:af:1f:ae:b4:56:
19:b9:8c:4b:20:9b:c1:2c:43:f1:24:3f:4f:43:a7:
6f:ac:9f:19:05:db:35:02:63:d5:ed:68:2d:ed:f6:
e9:fb:4c:ad:43:cb:3d:ed:ef:37:cf:a4:c3:7e:66:
f1:8c:04:36:2d:47:4f:1f:99:ef:71:e7:cc:5a:00:
67:11:02:cb:64:13:49:68:4a:52:b0:6d:08:88:a6:
32:22:f8:2a:eb:52:fd:18:de:f2:a5:92:57:77:b8:
cf:a2:9b:4f:59:22:9f:56:5b:d5:8d:dc:ca:28:c8:
37:b7:dc:12:e3:6e:fb:95:23:34:b6:6f:1e:b7:5d:
ac:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FE:A5:86:6F:44:B4:99:E5:0A:05:58:CB:DB:B3:AA:62:F6:D8:33
X509v3 Authority Key Identifier:
keyid:D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6c:9b:aa:0c:da:65:fe:7e:ef:cc:9b:bc:a5:62:97:22:f0:
87:3b:10:40:c6:05:c3:45:96:22:12:db:c6:1b:66:9b:bb:98:
dc:72:46:a3:6e:e3:46:ae:18:94:32:ef:79:45:48:47:72:09:
60:77:b4:41:4f:45:8d:35:92:48:dd:0b:70:47:46:94:8a:66:
bc:83:7d:b6:30:97:6a:8f:93:58:61:6c:a2:f0:be:76:f5:ef:
ba:2f:56:2d:a3:32:61:b6:3c:f7:d0:94:ef:7d:ce:96:a7:17:
63:78:74:65:29:f0:6c:c2:a0:13:e4:02:ba:d7:51:9f:1c:5e:
4b:fa:40:80:96:e2:8a:bf:a0:2c:1c:a1:3f:5f:e2:b1:2c:50:
33:7c:f8:6c:8d:0d:31:52:44:f7:37:8d:3c:f7:a8:1f:66:b4:
b9:11:d9:22:04:f0:84:cc:c3:8f:fa:f4:f1:f2:35:3c:5d:43:
50:27:72:ee:bd:85:7e:2a:bc:c3:f1:32:19:70:6b:92:b7:e0:
10:71:a0:5e:af:54:ba:b9:76:72:32:cc:3a:c8:3e:c8:9e:8b:
02:38:b0:e3:62:2d:77:9f:75:c5:f7:36:80:3d:3c:b8:ef:7e:
3a:df:38:a8:d8:6a:b6:f4:14:09:98:e5:db:df:ba:00:85:f1:
c0:45:06:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 17:36:23 2025 by rpki-client