Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft
File: 1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft (raw, json)
Hash identifier: zAW4m7ZRmCjfhDp1Upo8nKU1MGnpB9eckV9B/BraQsI=
Subject key identifier: DC:9F:6E:2D:55:7E:51:77:27:F6:9D:33:DC:42:A2:28:D0:AE:11:BC
Authority key identifier: D7:0A:F9:42:46:5F:F2:65:B8:96:F0:D1:B7:62:49:0F:27:DC:32:2C
Certificate issuer: /CN=d70af942465ff265b896f0d1b762490f27dc322c
Certificate serial: 0198D1A7B8429698F4E578205203BBACDED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft
Manifest number: 12F2
Signing time: Fri 22 Aug 2025 12:01:26 +0000
Manifest this update: Fri 22 Aug 2025 12:01:26 +0000
Manifest next update: Sat 23 Aug 2025 12:01:26 +0000
Files and hashes: 1: 1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl (hash: 5trlE/ldrjxNM2sffn7Hl0cbIhZcMaPgmadARfnicyo=)
2: do1YRGxwXBzhu7NScxWRh1sCTkI.roa (hash: tvb6mnRRTkKS3vhIPuaGGEBZgzp8Y6OmqBEm+R+Kc5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 11:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d1:a7:b8:42:96:98:f4:e5:78:20:52:03:bb:ac:de:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70af942465ff265b896f0d1b762490f27dc322c
Validity
Not Before: Aug 22 12:01:26 2025 GMT
Not After : Aug 23 12:01:26 2025 GMT
Subject: CN=dc9f6e2d557e517727f69d33dc42a228d0ae11bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:65:08:ad:c6:0c:9e:de:8b:63:ce:b4:84:f3:
64:a2:54:05:66:73:2e:28:da:e9:30:27:8c:35:41:
6d:e7:b5:31:8c:7f:5c:d0:32:66:69:29:d8:56:8c:
78:e1:7f:c2:2c:af:7d:ca:dd:b4:6f:78:41:f7:7a:
d9:9d:46:32:85:71:dd:71:bd:9c:c6:eb:38:cc:c7:
13:6b:26:73:85:31:48:df:d4:af:76:94:a2:e0:6b:
49:38:a3:8e:92:df:82:58:a0:c7:66:eb:ff:c4:6b:
65:01:35:12:23:b2:f6:9a:20:93:bc:15:f9:9c:c1:
66:81:2a:dc:dd:3f:89:ad:ad:59:ea:06:d5:e7:52:
9b:c4:c1:a2:3a:5c:3b:4c:65:1c:c7:54:15:c0:ab:
58:e9:bd:65:48:c1:f2:fd:2d:4f:65:c3:25:8e:ba:
bc:de:93:58:2b:66:7c:2e:da:62:b5:1a:ab:4a:07:
cb:44:c0:e6:6b:7d:a5:02:f4:19:63:f2:07:d1:4c:
88:aa:28:e7:db:cf:6e:6c:3a:64:67:8a:e3:e1:d6:
66:e6:1b:c0:a2:93:a2:a8:da:55:37:1c:e6:e9:46:
8d:d8:06:60:b2:57:5e:25:81:b6:dc:1a:4f:d9:96:
7a:54:95:f8:5f:36:e8:22:93:e4:f4:f3:e4:75:44:
0c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9F:6E:2D:55:7E:51:77:27:F6:9D:33:DC:42:A2:28:D0:AE:11:BC
X509v3 Authority Key Identifier:
keyid:D7:0A:F9:42:46:5F:F2:65:B8:96:F0:D1:B7:62:49:0F:27:DC:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:3b:b9:a9:f0:da:96:83:80:70:84:f6:ba:63:cb:4e:8d:1a:
05:bd:ed:4e:7d:75:22:eb:06:96:24:bf:7c:0d:0d:b6:d5:59:
ff:1b:5a:e6:f2:9c:bd:1c:f4:c3:be:7d:80:a5:f0:da:b5:d3:
42:c6:b4:c3:7d:4a:d3:5e:7b:20:4a:cb:b7:eb:9b:54:61:03:
f1:e5:9d:9d:c4:19:1b:b1:76:f1:25:a4:ed:bf:54:d7:6c:58:
ad:21:d7:52:c9:f1:fb:9e:61:96:44:5b:8a:59:d0:61:ee:7f:
62:83:2f:1a:e6:f2:27:07:56:43:56:1f:2d:a0:65:c2:29:a4:
d7:91:a3:41:61:79:e4:1d:91:ff:e8:2f:9d:7d:f5:fa:e1:fe:
5d:be:d6:ec:c4:05:aa:5a:1c:93:2d:a4:1e:97:1a:21:0c:8c:
8b:ab:29:25:d3:6d:96:a6:9c:0e:24:4b:0d:11:3b:6f:e9:1d:
3a:60:53:ee:1d:6d:1c:26:82:76:30:3c:e1:cf:09:ce:c0:dd:
f7:6b:bd:35:67:4b:2a:c5:58:1d:41:a8:c5:59:93:05:04:af:
6b:21:b2:54:23:45:ba:4b:6b:07:b7:40:22:43:63:2b:5f:55:
8b:61:64:1c:d7:f7:59:a7:9d:20:d1:37:fc:66:9e:f8:9b:2b:
b1:e8:51:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 15:58:19 2025 by rpki-client