Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
File: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft (raw, json)
Hash identifier: 2yw2HIfKIXm2I2MFEEwkMVZcEl0rLssgT9fQUrsxP5Q=
Subject key identifier: BB:AA:A3:0D:38:0E:1E:8F:E9:54:70:FA:7B:02:F5:88:25:E4:98:6A
Authority key identifier: D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
Certificate issuer: /CN=d5a193671dc59d76fc311db2d6689a3c88299094
Certificate serial: 019849D2C4EBD70609F33394CF23521CC553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 03:00:06 +0000
Manifest this update: Sun 27 Jul 2025 03:00:06 +0000
Manifest next update: Mon 28 Jul 2025 03:00:06 +0000
Files and hashes: 1: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl (hash: FOH+8yEIq5Lev69bX2GuoTEyelkWMnliXoKTpsN4ELg=)
2: ceTKZ_Kbl5fdTbjM1BoGVl6TegM.roa (hash: DR/tSwdyZFDYwu3nLD2VKueV4ylVlrU59jgXrK70o90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:c4:eb:d7:06:09:f3:33:94:cf:23:52:1c:c5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a193671dc59d76fc311db2d6689a3c88299094
Validity
Not Before: Jul 27 03:00:06 2025 GMT
Not After : Jul 28 03:00:06 2025 GMT
Subject: CN=bbaaa30d380e1e8fe95470fa7b02f58825e4986a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8a:70:c5:86:55:ca:49:c8:83:7d:11:cd:bd:
c4:47:2d:a4:3f:f0:3f:b9:df:93:16:1f:dc:22:1d:
0e:b7:bc:c0:08:3c:19:03:9d:62:4b:2b:17:f0:05:
1d:48:b5:0b:2d:0b:8e:1a:de:b4:1d:d5:e1:3d:bb:
4a:14:4b:76:8c:f3:65:e8:27:14:4a:fd:52:5c:7d:
93:78:dd:3f:05:37:87:da:f1:d0:3a:3e:de:ce:d4:
0d:95:8f:d7:28:39:ca:36:5e:84:94:27:9c:0f:c8:
ac:73:31:84:d2:c2:ff:23:95:cb:94:9e:8f:36:db:
4d:de:3d:c5:8e:4f:47:f3:97:d8:64:8d:6f:6e:f2:
f2:7d:11:d1:d1:56:39:a0:01:7c:2f:43:6f:cd:a8:
31:46:c2:b4:46:b8:38:72:23:a2:2a:76:fd:19:ec:
1c:7c:3f:4b:0d:4b:ce:6f:d9:51:b0:c1:69:40:20:
70:05:8b:91:57:55:0b:d0:2d:fd:cd:83:76:ad:5e:
a6:6f:c2:86:9c:50:76:ab:1f:5b:7c:6b:e5:b1:80:
81:f5:5f:5c:74:5a:21:86:60:7b:80:07:aa:f8:76:
8e:f8:30:5a:50:8d:0f:09:a8:5e:0f:78:30:cd:56:
76:c3:1e:32:55:03:e5:a2:d5:07:9c:bd:41:42:06:
51:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AA:A3:0D:38:0E:1E:8F:E9:54:70:FA:7B:02:F5:88:25:E4:98:6A
X509v3 Authority Key Identifier:
keyid:D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:a8:43:6e:9e:38:48:fc:61:99:92:ae:0f:2f:89:a4:b5:f7:
56:48:d5:28:78:cb:62:5f:7c:c4:19:47:22:0d:d2:e4:ac:ec:
6a:a3:81:ec:4f:b4:6f:0d:c8:17:e6:8a:57:25:dc:b1:29:2b:
92:c3:ed:e0:1f:ff:98:eb:34:68:00:df:eb:d9:58:40:0c:3a:
b8:68:59:66:2a:0f:fb:1f:96:54:30:e6:21:00:b8:99:6a:d9:
60:aa:d4:6a:1b:bb:7e:fc:eb:b7:64:77:cc:aa:87:e0:11:cd:
fa:cb:e6:0b:7c:aa:5f:3c:df:67:21:5b:d4:74:35:04:86:54:
eb:23:e7:ff:39:10:85:0e:65:31:5c:95:41:74:89:4f:01:d0:
52:fc:4b:5a:2a:c4:07:95:03:bb:c1:c6:cb:13:80:5d:0e:fd:
47:58:40:39:69:02:61:33:56:d5:b2:85:4e:0a:84:25:05:65:
c8:55:96:c0:c0:3b:25:21:7e:15:63:09:4d:1c:74:dc:58:5c:
82:4c:03:2a:af:cb:bd:68:36:b6:11:d7:2a:19:5d:f7:71:7e:
c9:08:60:8e:a3:69:56:38:c8:14:99:8b:c3:f3:cd:ec:2d:d8:
07:9e:26:90:e1:7c:4e:d3:9d:d2:e8:91:5b:c8:ab:09:38:00:
c0:45:89:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:48:59 2025 by rpki-client