Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
File: 1IW26difsBA2mXHtiIVyBZhdSRg.mft (raw, json)
Hash identifier: EZ6vih+jSOofgnLUICVXB68605veH9r8iaJMcz/4ifU=
Subject key identifier: 39:2F:C1:A9:62:86:47:CF:F2:A6:FA:E8:38:F5:FF:DD:A9:EE:CB:25
Authority key identifier: D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18
Certificate issuer: /CN=d485b6e9d89fb010369971ed88857205985d4918
Certificate serial: 01985155BE2903B6952908FCD1DE8A6FD666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
Manifest number: 1605
Signing time: Mon 28 Jul 2025 14:00:30 +0000
Manifest this update: Mon 28 Jul 2025 14:00:30 +0000
Manifest next update: Tue 29 Jul 2025 14:00:30 +0000
Files and hashes: 1: 1IW26difsBA2mXHtiIVyBZhdSRg.crl (hash: vYi+27n0eMxTo1L+rzKQ8cSuft8Pesl8r5IgRC9Fcdg=)
2: kFp1ntirY-_nRj5W9JqqX1ydSnU.roa (hash: NWOTQpr3hkXHB9fkn9UXRHKGkCwc9Gafyc4Z5IuHimc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:55:be:29:03:b6:95:29:08:fc:d1:de:8a:6f:d6:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d485b6e9d89fb010369971ed88857205985d4918
Validity
Not Before: Jul 28 14:00:30 2025 GMT
Not After : Jul 29 14:00:30 2025 GMT
Subject: CN=392fc1a9628647cff2a6fae838f5ffdda9eecb25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:23:64:61:9b:c8:a8:67:cb:ef:62:20:5a:95:
13:85:d0:48:00:73:66:dd:1e:15:e9:fc:5e:9c:8b:
f3:08:22:8f:30:2f:33:8c:fc:ff:9c:06:ba:e1:e5:
f6:d1:55:c7:de:63:44:07:6e:61:83:97:94:d1:cb:
d7:da:f9:04:8a:6e:7d:07:14:c2:de:e5:ec:31:78:
01:2b:87:a7:21:24:b5:0b:ad:23:72:b0:bc:fb:da:
88:bc:87:6a:7f:2e:ce:7b:01:f4:c2:32:23:5b:7e:
8f:81:b9:e7:91:a1:9b:6f:69:dd:d6:d8:f8:c9:b6:
4c:7d:c4:ee:a7:d1:43:d2:2e:d6:ec:4d:95:61:51:
ff:3c:27:47:0c:19:44:78:42:e7:0f:1a:42:3c:6e:
91:a7:db:1c:2f:15:ea:2c:03:2b:8d:11:5c:a1:df:
ff:bd:99:54:82:30:2a:12:fd:66:85:07:b9:ea:a4:
d1:c6:f8:76:af:1c:da:5c:86:f9:3d:b5:ad:2a:05:
9d:b8:6a:26:d4:09:aa:ed:03:df:dd:4d:c4:75:d4:
79:51:54:91:8a:3a:2b:75:e1:81:42:6e:74:e7:af:
bf:d9:e6:f2:1f:5d:c5:d9:b6:7b:3b:42:20:b9:4a:
c0:b5:33:a0:85:7f:0f:6a:1a:23:6c:14:3c:74:99:
94:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2F:C1:A9:62:86:47:CF:F2:A6:FA:E8:38:F5:FF:DD:A9:EE:CB:25
X509v3 Authority Key Identifier:
keyid:D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:38:54:c2:42:ab:63:3b:b3:91:2d:93:4b:71:c0:99:65:37:
0f:65:e1:ab:1c:03:e2:33:ef:c5:34:64:57:d5:5f:cb:bf:46:
99:7a:7f:59:5c:10:fc:16:fb:2c:4a:e3:0c:ca:f8:f5:8f:ba:
f5:e4:32:30:dd:cc:6e:b1:e3:2f:2b:ff:2b:63:db:0a:8a:a3:
ff:a6:c2:fd:39:b5:4d:b9:0f:39:aa:82:bf:ba:63:52:25:9f:
04:1c:34:33:bf:e5:0e:8a:a0:ce:2a:22:91:6f:25:bf:7b:41:
eb:9f:21:c0:de:36:2d:1a:4f:ed:0d:f3:d7:de:62:7b:d7:fb:
87:7b:52:d1:ae:2f:bd:cf:65:25:ac:f6:a6:c2:8f:e8:93:c8:
49:c5:89:3d:28:78:a7:6e:9a:19:0c:d7:6d:a7:b5:12:6f:41:
c2:e4:75:ca:3a:94:fa:52:87:3a:bf:2c:04:06:91:e7:78:d2:
cb:73:a9:c4:64:b2:5f:ac:16:fb:3a:85:4c:e5:a4:93:2e:2a:
05:5e:01:e3:00:63:64:e5:d9:3c:70:ce:bf:17:d2:4f:dd:7a:
cd:ff:f2:0a:4d:ee:cc:ad:c3:64:83:06:17:17:9e:64:91:0d:
48:9a:78:ff:55:90:4e:e1:ed:98:dc:9b:32:d1:6d:04:e3:b3:
96:8d:5f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 20:06:49 2025 by rpki-client