Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
File: 1R5nmbxcooWjdjcvC2NF3_yHuMA.mft (raw, json)
Hash identifier: sA7KMA6/abcu6Ll5IZyI27xvDgkxByX4ecRJaTks2iY=
Subject key identifier: 90:C8:67:D7:CF:FB:D3:EB:0E:9F:FE:80:A7:BE:D3:51:D7:95:9D:F3
Authority key identifier: D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0
Certificate issuer: /CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
Certificate serial: 019846D25F158A0B9A82864705DE4BD877C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
Manifest number: 1471
Signing time: Sat 26 Jul 2025 13:00:48 +0000
Manifest this update: Sat 26 Jul 2025 13:00:48 +0000
Manifest next update: Sun 27 Jul 2025 13:00:48 +0000
Files and hashes: 1: 0cEqGKjfm76Pz1TjiCr0iAFNt_k.roa (hash: 8zpaYy8O1j58gbBpTxxShajSZwJzqKtViEUnKsc1qt8=)
2: 1R5nmbxcooWjdjcvC2NF3_yHuMA.crl (hash: EkRXOzTpdfQ8UlFKBfMSNe3cholZvexKjSAlgC4Nc00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:5f:15:8a:0b:9a:82:86:47:05:de:4b:d8:77:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
Validity
Not Before: Jul 26 13:00:48 2025 GMT
Not After : Jul 27 13:00:48 2025 GMT
Subject: CN=90c867d7cffbd3eb0e9ffe80a7bed351d7959df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:54:fc:14:d3:05:07:96:45:86:af:04:c7:25:
61:65:ef:4e:67:de:dc:69:e3:d4:a4:17:05:90:9d:
ad:ed:97:1c:39:7c:a2:16:5c:4a:3f:c5:47:a4:c4:
f8:9d:49:bf:07:c4:87:0b:6c:20:4d:60:91:93:f1:
0d:06:0b:72:79:35:25:61:d7:21:6d:6c:37:ab:e7:
53:66:29:37:75:ac:9c:49:33:0e:6a:b8:54:b9:99:
64:e8:19:0c:24:0b:99:e7:48:0e:6f:e4:95:d4:23:
e2:17:11:6b:67:72:2e:7d:f5:3d:b8:bb:5c:17:8d:
84:fa:a6:f1:1e:47:97:e2:b7:e0:15:19:0d:ad:30:
b3:5e:e4:25:c1:a8:bb:cc:01:3f:4d:80:1d:c9:16:
fd:4a:1b:64:0c:3f:d3:af:60:45:33:3d:95:db:70:
a9:25:72:2a:25:db:cf:8b:04:4b:79:f1:65:a0:86:
88:95:22:98:1e:6a:af:4c:b1:45:4f:33:c4:c7:f6:
da:91:88:2a:62:c1:60:73:b8:1a:94:0b:74:a1:95:
19:9a:f1:1f:df:df:e4:fe:d7:2e:a1:0a:7b:a0:e6:
c5:40:e2:02:90:89:f4:99:a8:82:e5:70:dc:65:3d:
b4:7d:8f:0e:d3:b8:2b:02:c4:1e:a3:e8:97:1c:80:
ad:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C8:67:D7:CF:FB:D3:EB:0E:9F:FE:80:A7:BE:D3:51:D7:95:9D:F3
X509v3 Authority Key Identifier:
keyid:D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a7:1a:b9:a9:51:b2:34:b2:1c:87:01:0f:d0:ab:6a:c8:f4:
2f:52:52:ff:6c:b1:d8:e6:7f:e0:da:57:9b:2b:35:ca:e1:fe:
41:09:ad:e4:a3:69:03:32:59:db:e7:dd:1c:23:c8:4e:4a:67:
e0:8e:55:29:b3:4a:57:4e:86:4f:a1:00:55:02:3e:b0:6d:5e:
cd:b5:21:35:f2:ac:56:49:03:8a:41:99:15:bf:56:14:1a:26:
ee:00:a2:ce:20:46:e0:dc:02:48:8a:d5:94:85:8b:3a:30:29:
f7:0f:4a:d4:ab:ce:3d:92:66:ac:e9:c6:71:18:fc:c6:1c:d3:
48:5d:fe:31:9d:1f:94:87:fd:f2:0d:a9:fd:3e:04:2a:3c:d6:
68:c8:df:50:27:06:19:a7:86:c9:3e:06:20:8a:b1:3d:b7:c5:
90:a1:ca:28:17:11:90:80:65:18:43:93:b9:98:e0:82:99:94:
af:37:d4:21:f1:94:e4:79:a0:33:f5:76:c3:a9:ee:06:5e:ef:
cf:00:47:4e:36:32:eb:0a:d8:bc:9a:05:90:ac:26:3d:40:53:
8f:7a:fa:ac:cd:cb:c7:50:a4:25:d8:9c:ae:5f:13:bd:eb:02:
cd:5d:57:26:69:74:47:aa:ac:eb:80:27:63:5b:8d:66:65:d9:
5a:ed:8f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:15:20 2025 by rpki-client