Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
File: 1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft (raw, json)
Hash identifier: GqdbzOMxLcXvjdHZVF+CwZxZauSQX6YuY0dUg/Xc4Zw=
Subject key identifier: 48:5B:F3:B3:5B:1B:82:8F:B2:98:C4:B4:F9:AE:FF:E9:BD:82:9A:8B
Authority key identifier: D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72
Certificate issuer: /CN=d422367433765b541a37390a998997b737c46472
Certificate serial: 01984E54D0E9ED4FBE7B65F892C6A61E409B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
Manifest number: 1596
Signing time: Mon 28 Jul 2025 00:00:37 +0000
Manifest this update: Mon 28 Jul 2025 00:00:37 +0000
Manifest next update: Tue 29 Jul 2025 00:00:37 +0000
Files and hashes: 1: 1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl (hash: Wn5mDi2mlI8TwtTqDnPfJ/Wz8kwyUx+474xT1RYEObQ=)
2: dO1sDlUm4GNT1NLwZmfUYJ1pPqA.roa (hash: JWs3QU5N8u442ANJ16//ujHqSWgzP2/558mG+17RvNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:54:d0:e9:ed:4f:be:7b:65:f8:92:c6:a6:1e:40:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d422367433765b541a37390a998997b737c46472
Validity
Not Before: Jul 28 00:00:37 2025 GMT
Not After : Jul 29 00:00:37 2025 GMT
Subject: CN=485bf3b35b1b828fb298c4b4f9aeffe9bd829a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a2:8c:a9:67:93:5d:24:71:11:5e:72:1c:55:
f5:4e:d6:dd:ef:70:25:b2:75:20:3e:37:cc:48:8e:
e1:3d:d2:4b:8a:30:77:fe:e0:6d:a1:58:14:64:b3:
53:52:c0:21:8b:50:4a:43:2d:9b:25:4e:72:6b:21:
14:f4:bb:5b:80:fc:83:25:7b:56:72:62:58:c6:2a:
61:16:e6:cc:f8:e8:e4:c6:8b:5b:04:54:e3:1e:7d:
1a:68:e6:09:52:2f:bb:df:8c:91:ab:09:7f:fa:e0:
fe:26:5a:b2:f0:8c:af:2e:d8:be:e1:04:2d:a5:3c:
79:87:4f:c3:6e:81:ef:ad:0b:32:a7:52:ce:7c:33:
58:b4:4b:ab:54:9f:ce:b7:9c:64:c2:a0:1a:f5:97:
88:b8:69:cd:6d:90:78:3c:e9:30:a7:f5:62:1e:08:
a5:ec:0c:8f:d0:de:e4:d2:a2:81:a1:2f:e2:99:09:
ea:85:55:fa:ae:64:6a:8e:d7:bd:50:7f:33:6b:58:
6a:26:00:4c:06:80:c2:0d:08:ad:0d:a5:0c:a7:e2:
1e:b4:c6:9d:51:e6:82:a3:c0:0d:f4:60:2c:1a:a4:
94:b4:23:d2:08:9a:14:eb:33:ab:f9:7e:51:c6:04:
4d:8d:40:79:35:8c:9c:47:97:4b:da:e2:9d:50:e9:
a5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5B:F3:B3:5B:1B:82:8F:B2:98:C4:B4:F9:AE:FF:E9:BD:82:9A:8B
X509v3 Authority Key Identifier:
keyid:D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:69:6a:58:72:d3:af:2d:a4:31:d3:86:01:88:d6:98:8f:95:
ec:ec:13:49:d0:f0:3a:37:ff:d4:0c:04:f9:ef:ea:3e:eb:6b:
38:d8:06:4a:f2:6a:69:60:8f:b6:97:37:41:34:6d:22:5b:c8:
0d:e3:99:2f:11:e3:7f:d1:8c:b2:c6:39:c7:a2:b0:cf:fa:3b:
bd:29:0d:ca:a7:a3:c9:27:90:6a:c6:e1:c8:2f:16:ae:ab:66:
2c:25:11:01:2d:14:b0:65:b3:c6:f3:f6:be:21:71:47:23:e4:
72:2e:96:bf:d8:ff:cd:5d:f1:22:2b:62:45:c6:2f:93:99:7f:
3b:fb:33:b4:00:07:b6:85:6f:d7:40:d0:67:4a:a2:0e:f8:c0:
1e:e0:22:d6:b4:c1:22:6d:99:b1:69:3d:d5:82:06:34:14:6b:
81:7c:75:e1:7e:bf:cc:f2:59:3a:cd:be:14:74:9f:58:8b:6e:
f3:82:22:80:c4:25:55:8d:1a:75:bb:07:14:3e:0d:5d:ad:66:
6d:ab:be:c2:8f:58:d9:5a:f6:5b:ca:16:3a:1a:e9:9e:b7:2e:
06:85:f8:b9:dc:06:94:1a:75:d8:fb:0d:8b:83:ff:ff:bd:68:
a1:19:19:47:01:7d:f4:52:1f:ca:47:7c:16:c3:9c:48:01:c0:
99:91:ba:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 02:05:37 2025 by rpki-client