Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
File: 1dWXuXOtoQUvZbPqHeHkguI_PSo.mft (raw, json)
Hash identifier: ftkgbGMYxQWXEq3N6TYfLU/R/K59O5hFigYzj7RFR0o=
Subject key identifier: 08:90:03:F4:95:20:F8:01:25:E4:E3:98:52:47:3F:A5:7F:6E:8C:35
Authority key identifier: D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A
Certificate issuer: /CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a
Certificate serial: 01991763F46BEF684B79B40473AF44BDD689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
Manifest number: 166A
Signing time: Fri 05 Sep 2025 01:00:50 +0000
Manifest this update: Fri 05 Sep 2025 01:00:50 +0000
Manifest next update: Sat 06 Sep 2025 01:00:50 +0000
Files and hashes: 1: 1dWXuXOtoQUvZbPqHeHkguI_PSo.crl (hash: HFGCWoPtG4hH7XG1+fEBhHf939+IaNMS7Bs37XtB4sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:63:f4:6b:ef:68:4b:79:b4:04:73:af:44:bd:d6:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a
Validity
Not Before: Sep 5 01:00:50 2025 GMT
Not After : Sep 6 01:00:50 2025 GMT
Subject: CN=089003f49520f80125e4e39852473fa57f6e8c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:02:d1:a6:20:f2:49:29:f5:21:a1:7b:85:d6:
cd:70:e7:e9:1f:5d:eb:be:f6:69:34:20:b9:cf:0e:
6a:d4:83:46:6f:f3:62:c3:e8:f8:5d:b4:1b:f9:02:
ae:b6:9a:c4:c7:25:94:b4:d2:5e:7c:b3:ce:d2:81:
33:7e:37:2c:60:50:a5:6d:b4:ed:c4:ac:9d:91:b4:
14:1b:53:e4:27:ef:00:67:8d:ab:c9:f7:e6:97:7e:
15:1d:7c:ad:00:da:27:87:e5:5f:81:ca:c9:e3:94:
98:0d:6d:2f:99:42:97:a7:c9:82:f6:f6:7d:9a:26:
ef:a8:93:e9:0d:9d:76:5b:32:21:ca:97:8f:1c:51:
f7:b8:85:a5:8d:5e:8f:bb:69:8b:fb:e6:73:cf:1c:
a6:cc:20:aa:8c:be:2b:16:b4:62:f4:8b:15:94:8b:
88:21:ea:2c:41:0b:1e:97:ab:e6:7a:54:65:d3:b4:
18:d5:f0:dd:b8:09:0f:17:1e:45:cd:94:39:16:47:
9a:d7:d9:a7:26:19:8c:40:95:c7:0a:b0:15:41:ce:
fd:22:7b:5f:88:16:47:15:cb:28:94:a0:cd:a6:93:
05:c0:5f:68:80:4d:58:a2:af:cd:54:f1:56:8e:a7:
57:a4:d6:eb:a0:34:f9:d0:e1:40:5a:01:48:95:34:
af:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:90:03:F4:95:20:F8:01:25:E4:E3:98:52:47:3F:A5:7F:6E:8C:35
X509v3 Authority Key Identifier:
keyid:D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:8a:90:a9:41:02:f1:f6:d0:e0:51:0e:21:09:2e:dd:e5:5d:
fc:53:e7:4e:36:1d:a8:7f:7a:f5:ff:3a:7e:81:c2:fd:de:f4:
a9:f2:38:11:64:8f:ff:a7:c8:e9:d0:65:9c:8a:a2:6b:74:fe:
b2:2f:9e:73:a1:ed:51:d0:86:04:74:89:93:6d:ae:39:fd:cb:
04:1c:19:2d:73:f9:55:d6:3c:df:ea:06:7d:8d:f3:d7:b7:a9:
e3:3e:23:88:8a:d5:01:a2:8d:a6:7d:8b:8c:c0:6d:80:b6:c0:
07:96:19:83:ff:52:64:3a:cb:98:72:8b:d7:3b:c4:c6:92:99:
0f:e4:cf:27:7b:cf:14:e8:56:88:78:1c:64:0a:48:da:31:7f:
2d:15:5c:86:d2:26:f5:c4:27:5d:ba:23:76:35:f0:71:58:36:
9e:d3:7e:dc:77:b5:ed:96:82:c3:00:6c:ef:32:4f:55:90:1e:
17:3d:ab:22:f9:83:4d:c1:d0:fa:af:65:3a:9a:84:4a:e0:35:
a6:cc:73:2b:20:15:f4:fc:fe:f9:b3:2f:5d:6a:9c:d6:89:94:
45:fb:95:20:0e:27:a7:bd:a9:f7:dc:fb:dd:b4:68:85:02:81:
c1:25:e7:c7:65:c2:40:85:54:21:5f:e1:73:89:d4:26:18:a6:
2f:66:54:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:22:37 2025 by rpki-client