Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft
File: 1V5WEXiBQrMVQorlH2fLus-At-g.mft (raw, json)
Hash identifier: 9GcWE0NRFjwJ5dyyMddacVqyR7qGi/GIis3x+BzoYzE=
Subject key identifier: 0C:98:95:7A:5F:0B:A2:51:76:BA:EF:24:CD:C4:22:E4:75:33:C4:DC
Authority key identifier: D5:5E:56:11:78:81:42:B3:15:42:8A:E5:1F:67:CB:BA:CF:80:B7:E8
Certificate issuer: /CN=d55e5611788142b315428ae51f67cbbacf80b7e8
Certificate serial: 019935011D37E86420050270DEE0B1C17CF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft
Manifest number: 03CE
Signing time: Wed 10 Sep 2025 19:01:29 +0000
Manifest this update: Wed 10 Sep 2025 19:01:29 +0000
Manifest next update: Thu 11 Sep 2025 19:01:29 +0000
Files and hashes: 1: 1V5WEXiBQrMVQorlH2fLus-At-g.crl (hash: xUlANZkYDXYbjGHhpOh5rJxnaOuJSCWNoPCd/enwft8=)
2: y49JuAVDoy-LfsHdEc6QYgh16LA.roa (hash: lgV8xv23uaL4oGyw+8u8NKX5nD6V6ZzdAGMuEZqxGwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:01:1d:37:e8:64:20:05:02:70:de:e0:b1:c1:7c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d55e5611788142b315428ae51f67cbbacf80b7e8
Validity
Not Before: Sep 10 19:01:29 2025 GMT
Not After : Sep 11 19:01:29 2025 GMT
Subject: CN=0c98957a5f0ba25176baef24cdc422e47533c4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9f:d6:45:e8:1a:13:65:72:fe:56:8c:27:b4:
be:ce:85:bd:54:ff:ca:7b:bb:13:f3:49:3f:34:82:
8b:9d:33:ff:89:57:80:10:5f:ba:63:79:89:8d:ed:
44:c1:90:fb:78:9a:48:43:4e:77:52:35:85:58:aa:
e9:42:00:12:9b:0d:ca:7d:85:0e:13:51:76:58:a3:
a4:46:ab:4a:b8:59:96:4c:51:c1:42:e5:81:6b:40:
d5:12:68:fe:99:be:96:85:e7:dd:ce:38:0e:10:1d:
c1:9b:3b:df:16:2c:fd:50:74:2c:0a:22:29:79:ab:
33:fe:32:a3:cb:df:30:a1:51:5d:3a:76:38:df:d6:
53:66:dc:7f:81:69:37:ad:6c:ae:b9:eb:b4:cd:ec:
74:1c:90:4e:e6:b5:25:9d:de:9c:3f:e2:bb:47:ed:
81:8e:af:1f:e6:1b:8f:8b:53:6c:cc:2b:ea:f2:86:
2d:a6:f5:cb:dd:b9:df:99:2c:17:18:8a:f3:b6:eb:
49:63:69:3c:f6:d4:46:49:09:26:44:f6:21:20:00:
c4:62:97:16:3d:90:1c:70:87:2f:a7:87:5e:00:1a:
d8:fb:dc:a7:5e:90:9a:eb:f2:56:8b:00:8c:fa:18:
63:57:6a:45:48:c8:4f:9f:32:30:02:c0:33:08:ec:
b0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:98:95:7A:5F:0B:A2:51:76:BA:EF:24:CD:C4:22:E4:75:33:C4:DC
X509v3 Authority Key Identifier:
keyid:D5:5E:56:11:78:81:42:B3:15:42:8A:E5:1F:67:CB:BA:CF:80:B7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:b3:dc:c2:a9:19:ba:23:a7:27:93:cf:b3:eb:46:cb:d5:e2:
f8:09:b2:40:05:1f:46:72:d3:f4:62:11:cf:3f:f5:23:45:6a:
f9:fb:95:31:77:71:0d:01:a8:b0:b3:37:b8:aa:4b:1d:3f:b9:
d7:de:e1:bc:3b:ff:33:82:31:4b:6c:7d:99:0f:66:f0:eb:4a:
c8:b2:fa:20:c6:56:08:fc:87:95:c7:57:88:c4:b3:94:ac:45:
68:4f:8c:82:02:04:4c:cc:52:a9:ac:a0:2b:ef:ea:09:34:2f:
88:28:44:97:d6:da:b2:4c:83:1b:7d:4c:2a:23:f7:41:d2:fb:
25:b8:bb:fa:c2:97:58:b7:06:ae:74:cf:c2:44:21:4b:45:d9:
ce:cf:20:d2:8b:6a:55:c5:dc:c1:7b:d6:7e:ff:9d:55:7b:90:
5d:ad:d7:b3:c2:dc:22:31:79:0c:81:5d:53:93:e9:65:c4:cb:
6a:bf:ed:05:01:7b:8f:30:cb:81:ff:82:62:02:dd:a5:dd:29:
5d:a8:e5:a0:0e:2d:86:3a:89:2e:35:2d:19:b9:b0:9a:fc:d5:
ab:45:b7:16:e6:73:d4:80:78:6c:ab:8b:ef:27:0d:cf:ec:2e:
3e:5c:3e:ee:92:ec:0d:db:81:f1:3b:84:ab:b5:04:61:6d:6d:
b8:85:28:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:43:51 2025 by rpki-client