Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
File: 1dzeISXwQFitT0eOF4iEFCzy2tA.mft (raw, json)
Hash identifier: DxixDmM8zV+GhXJ1Ia92p3M9ya6Uj7QfJI+oe+mK3Yo=
Subject key identifier: 4A:43:C2:61:E1:BD:0D:EE:EF:6F:F7:95:36:51:71:85:5C:0F:87:DA
Authority key identifier: D5:DC:DE:21:25:F0:40:58:AD:4F:47:8E:17:88:84:14:2C:F2:DA:D0
Certificate issuer: /CN=d5dcde2125f04058ad4f478e178884142cf2dad0
Certificate serial: 01983D2A8A9B9B414832CAFE8A1A09B8EBFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
Manifest number: 0FC3
Signing time: Thu 24 Jul 2025 16:00:54 +0000
Manifest this update: Thu 24 Jul 2025 16:00:54 +0000
Manifest next update: Fri 25 Jul 2025 16:00:54 +0000
Files and hashes: 1: 1dzeISXwQFitT0eOF4iEFCzy2tA.crl (hash: Cj/NDRY+xADAtLJ2SEL5C/gVc/iNH+CsNTscCog5Gro=)
2: 7RKc8XFi1ZBpZ1fyV1l65spfKVc.roa (hash: hdKthzCCiG0nuzNYJsrtq6rpWOtWCqRiyWfbA+gnE5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 16:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:2a:8a:9b:9b:41:48:32:ca:fe:8a:1a:09:b8:eb:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5dcde2125f04058ad4f478e178884142cf2dad0
Validity
Not Before: Jul 24 16:00:54 2025 GMT
Not After : Jul 25 16:00:54 2025 GMT
Subject: CN=4a43c261e1bd0deeef6ff795365171855c0f87da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6f:ed:29:54:2c:ef:61:67:a3:2b:3a:0f:b6:
e3:05:e4:d6:94:cd:d3:76:3b:ad:a3:82:ed:9d:b4:
23:fc:9e:75:72:7e:67:1e:fa:b5:3c:8c:5a:ea:51:
06:97:09:d2:6a:63:1c:6d:db:eb:91:b3:90:e2:e8:
ef:97:ae:1c:24:7d:2e:29:d9:42:20:76:44:e2:f0:
58:f7:91:7c:ff:05:bb:46:6d:ad:84:8d:2a:42:0a:
56:b8:3e:8d:75:5a:6d:3a:f4:6c:c1:dd:1d:d5:ac:
d2:4b:b3:2c:88:5f:58:44:5e:bd:9a:40:1e:4c:0f:
1a:7d:45:0d:74:c8:c2:91:9e:8c:be:92:4a:b5:e8:
51:eb:62:19:3d:83:51:f6:62:84:12:00:aa:11:3f:
dc:6c:6c:48:64:65:cb:1a:ee:a9:da:ce:8d:88:9a:
16:46:81:30:47:fd:76:c8:d8:54:0a:f1:cf:c5:e9:
24:64:73:fc:08:c6:48:99:11:f1:fd:75:94:2b:b3:
82:ef:b1:1d:ab:ab:ba:0d:a0:87:7e:05:05:11:57:
53:57:8d:0c:1b:0a:b9:b3:c0:cd:be:81:b4:99:32:
7d:8d:ef:b4:37:42:f1:e8:bc:e2:87:74:40:be:c7:
2f:c8:07:3c:f5:34:48:38:5f:2d:98:c7:2c:d1:ef:
82:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:43:C2:61:E1:BD:0D:EE:EF:6F:F7:95:36:51:71:85:5C:0F:87:DA
X509v3 Authority Key Identifier:
keyid:D5:DC:DE:21:25:F0:40:58:AD:4F:47:8E:17:88:84:14:2C:F2:DA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ba:96:cc:5d:dc:0a:e5:7f:82:eb:7a:15:f4:39:37:87:d7:
9c:8b:2f:93:14:22:55:42:8d:a4:ba:c5:c5:fd:92:c2:39:49:
c1:4f:a2:64:0b:5b:96:e2:99:be:cf:df:ab:8f:2e:10:d5:e0:
18:b4:1b:ca:bd:49:fe:95:51:e2:ca:5d:8b:1c:9f:dd:cf:c5:
f7:43:0b:c9:4f:f3:76:81:ec:6b:e4:26:d1:fb:ec:e3:4c:f3:
77:17:df:59:18:00:97:10:5e:38:d3:b7:8c:d6:4f:89:57:16:
b5:ae:d1:72:bd:11:f9:ae:72:94:86:6c:da:53:16:1f:11:f6:
70:b3:66:98:f3:09:81:6e:91:3d:26:9e:11:32:02:b0:d3:08:
25:bc:b4:b6:6d:50:66:e7:54:d5:3e:12:cc:ca:6f:3b:ef:c6:
de:25:f9:ae:2b:55:13:04:42:90:46:87:01:06:77:f9:5d:60:
46:18:e7:85:e8:d6:73:b8:d2:ce:49:31:44:74:1f:97:9f:70:
52:60:d1:4b:bf:7e:fa:fe:fc:60:e5:35:b4:4c:e8:8e:30:ed:
d0:1c:7f:0e:a8:1f:26:99:15:8c:3b:17:e6:13:9e:6e:8c:32:
b2:ac:b7:18:26:89:aa:35:03:0b:97:e4:0b:5c:da:97:9e:17:
fa:87:7c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:01:18 2025 by rpki-client