
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
File: 1DVli1i3FBlu7zcb2WfAxeLKvWY.mft (raw, json)
Hash identifier: OhBgffV9+WRYXWWO8ZlUou2Ep8qqy7nvJc69QA12eQo=
Subject key identifier: 4C:26:F7:E7:6B:02:4C:4B:20:F4:9F:50:9E:28:5D:DD:59:A3:BC:43
Authority key identifier: D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66
Certificate issuer: /CN=d435658b58b714196eef371bd967c0c5e2cabd66
Certificate serial: 0198530ED7AC69EA0DF1582589D31B1FADA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
Manifest number: 132D
Signing time: Mon 28 Jul 2025 22:02:18 +0000
Manifest this update: Mon 28 Jul 2025 22:02:18 +0000
Manifest next update: Tue 29 Jul 2025 22:02:18 +0000
Files and hashes: 1: 1DVli1i3FBlu7zcb2WfAxeLKvWY.crl (hash: 0Gr7IAIOsUioyFCfEwfBV+qM6F9kH3jfIKrXg0fH9mU=)
2: tZasuPD6JQA_ahjp5Ij5d_DOYcw.roa (hash: m55Anp1468NYkjmZHCfthwEnWOmLpA6A1Rbb77d5auw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:d7:ac:69:ea:0d:f1:58:25:89:d3:1b:1f:ad:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d435658b58b714196eef371bd967c0c5e2cabd66
Validity
Not Before: Jul 28 22:02:18 2025 GMT
Not After : Jul 29 22:02:18 2025 GMT
Subject: CN=4c26f7e76b024c4b20f49f509e285ddd59a3bc43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2b:b3:c5:98:b5:1c:25:c8:3c:87:8e:d8:ea:
da:5c:b9:d4:79:8d:36:3e:19:d8:40:86:f4:45:d5:
6a:28:dc:cd:de:1f:fc:b7:60:b6:3d:d0:c3:c2:dc:
ad:00:71:49:27:55:9a:6a:1f:48:c4:9f:e5:35:69:
d0:b9:a8:1c:f6:64:20:8b:49:2b:6b:05:82:74:07:
f1:25:6f:24:c4:6e:51:e4:7e:27:ff:e9:f2:8b:c0:
19:ff:35:7e:6a:27:c9:de:02:9f:49:7b:59:f5:37:
e1:49:34:a7:ca:14:75:07:c0:ed:0f:40:ee:cc:c5:
3c:77:ae:5e:3f:16:23:fd:16:d8:23:26:f5:de:65:
fe:90:2d:96:c1:19:1a:b7:5b:dd:8b:e7:2b:67:b9:
46:6f:c2:d9:de:78:3c:97:6b:30:7b:73:26:c4:4a:
d0:70:b5:b3:a6:14:3b:d3:0d:c6:b8:9d:6e:46:82:
fc:5a:87:c1:55:86:94:90:9a:49:8d:b7:7e:a2:f5:
20:84:00:ef:cf:21:f8:82:7f:b9:e5:4e:6e:fe:7f:
94:28:dc:ab:e3:df:b7:60:7d:95:e0:2a:14:5a:95:
69:b2:06:dc:26:d7:56:1b:82:4b:c2:34:3c:f9:45:
de:8b:f7:e4:26:41:40:11:25:7a:73:8e:0b:d2:f6:
d3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:26:F7:E7:6B:02:4C:4B:20:F4:9F:50:9E:28:5D:DD:59:A3:BC:43
X509v3 Authority Key Identifier:
keyid:D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b6:33:d7:72:f8:bf:b0:8d:f9:6a:8a:92:c7:a6:37:81:1c:
a6:ce:94:62:35:1c:a6:95:27:99:f8:9a:07:71:a3:61:1d:34:
0e:4b:9b:7c:7f:b9:f8:f5:d2:71:ca:38:84:d4:55:d2:3a:1a:
52:4f:fe:8f:40:26:de:78:e3:68:ae:1a:b6:87:0d:42:8d:cd:
d5:b9:6d:8a:1e:2a:89:9b:7d:fb:6d:35:2a:0f:bc:55:9b:e4:
8f:7a:75:f4:74:45:ec:88:d4:b2:5e:a7:98:b3:2f:45:44:0a:
38:3d:04:b9:09:fb:d3:9c:38:1b:58:1f:90:c9:b4:dc:d4:c7:
55:47:5f:3b:1e:55:74:15:e7:4d:c4:c4:ee:5b:87:23:6e:35:
f6:1b:f1:5b:2a:4e:8d:fb:15:47:fc:48:e9:07:42:dd:64:cb:
9a:31:fb:ab:27:a4:67:0d:31:cd:d9:bf:05:91:b8:9a:5b:eb:
13:99:9f:af:df:15:0d:f0:0d:c4:c4:a2:50:f9:82:3e:7b:9e:
43:ba:fd:bc:bf:22:52:bb:80:ad:42:5e:de:ce:0b:2b:f4:f5:
df:5f:f9:29:5e:d0:10:1e:92:ed:a3:9f:ca:f5:ec:07:60:82:
d3:71:95:79:84:79:61:60:a7:e6:52:22:5a:1b:50:de:6a:20:
63:85:90:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:38:59 2025 by rpki-client