Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
File: 1MOxLI1jUZDskoQ3u9bLDow4-ak.mft (raw, json)
Hash identifier: 598K6rnI5Z9v2l0AIuCDnVjP8hAb+1e2WKyDG36Le7o=
Subject key identifier: C7:7E:8E:91:5B:62:92:24:2E:83:9D:D1:EE:E6:12:06:87:D7:12:B1
Authority key identifier: D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
Certificate issuer: /CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
Certificate serial: 019A2930364FAA485E08D97635449B4A2AF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
Manifest number: 1704
Signing time: Tue 28 Oct 2025 05:00:16 +0000
Manifest this update: Tue 28 Oct 2025 05:00:16 +0000
Manifest next update: Wed 29 Oct 2025 05:00:16 +0000
Files and hashes: 1: 1-a8zXqKmuNRgVPV4192OV1bknwE.roa (hash: gqHxvIckMu2Lte9MvNCn2JfrjMNz47mdlspHr2lNqy0=)
2: 1MOxLI1jUZDskoQ3u9bLDow4-ak.crl (hash: IX2D3EwQj6H7R6pw5rO7u/x1zJPpEaNKb/gxfkVxt0A=)
3: GnY_25RaB7VB-Uit3iO_cOg1Kw4.roa (hash: ZVEoTNxwNym6ttfGviMGg7HgfXQQGhqaSdVzNN7qtAU=)
4: UCV_wWObO7yn0rdsq3WdkI9c0ao.roa (hash: /hdTNc7Vsm2zFa0tev+TWkzp0ilL4Wfo3WC4MWXESGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 05:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:30:36:4f:aa:48:5e:08:d9:76:35:44:9b:4a:2a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
Validity
Not Before: Oct 28 05:00:16 2025 GMT
Not After : Oct 29 05:00:16 2025 GMT
Subject: CN=c77e8e915b6292242e839dd1eee6120687d712b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:54:77:33:a9:6b:bb:d6:6f:36:4f:84:3f:99:
fa:7f:39:7a:71:2a:8b:f5:2a:af:44:4d:b7:b1:b3:
87:06:ac:64:7f:1d:ce:c5:0b:52:8a:85:35:81:ee:
f4:08:d4:bd:60:61:4a:b1:48:3f:19:e4:65:ac:5a:
94:37:4d:e6:a4:76:8a:c8:ee:8a:72:42:b6:04:a4:
e9:89:f7:e0:34:20:52:93:80:cd:10:e5:39:2b:b6:
98:11:38:b1:67:f4:8f:e8:33:2c:0f:5a:15:7c:66:
e6:9a:63:b2:19:ec:8d:86:1c:00:bb:81:58:a7:0f:
01:8a:7d:cc:26:a8:6e:09:bb:15:07:4e:22:3e:64:
13:40:63:9a:33:fe:30:5a:fa:3d:88:5f:44:ea:ae:
97:52:1c:36:cc:77:f8:b4:33:f7:5e:38:ae:3a:6b:
a6:d4:24:73:1f:31:57:26:de:d5:18:10:5b:b3:33:
4d:b8:ec:be:35:a1:e2:cb:68:09:0e:c4:c7:95:55:
49:3f:b8:d3:a6:5a:a5:6d:d7:50:35:64:1d:9b:0b:
64:ef:84:3f:16:3b:6f:ef:76:90:d7:93:7a:f7:9d:
d6:4a:c6:d6:c5:87:88:67:2a:4d:3e:65:f6:66:88:
6b:0e:ff:b3:74:b5:bb:d3:38:61:d3:23:be:f8:d3:
00:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7E:8E:91:5B:62:92:24:2E:83:9D:D1:EE:E6:12:06:87:D7:12:B1
X509v3 Authority Key Identifier:
keyid:D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:ed:27:69:93:47:72:21:7d:90:d6:66:96:3e:42:1e:ea:17:
15:7d:7a:90:9f:8e:d3:a6:c0:7d:ac:7e:b5:78:3f:c9:ba:cd:
34:78:bc:68:48:75:69:b3:cd:4d:78:85:79:bd:66:9f:a0:7d:
6e:56:ee:d4:c4:e3:39:83:5b:a6:02:ea:4e:2c:fb:65:85:f9:
16:0a:75:eb:43:82:9e:dc:09:55:7b:8f:12:f2:43:d2:ce:46:
d1:0f:da:82:42:d4:25:7f:81:27:bc:5c:cb:32:e6:54:ac:2c:
98:1c:aa:0e:59:f0:2d:84:c1:4c:31:65:1f:31:4e:90:66:a3:
67:96:05:c1:6f:76:53:18:aa:85:62:9f:5b:13:37:4f:3f:dd:
7c:5c:a7:6e:fe:e1:02:64:ad:01:21:df:e8:93:f7:ad:43:db:
cd:91:f6:32:f7:ba:00:5d:19:b5:e5:4f:70:29:34:6d:0b:b6:
71:83:99:56:51:b5:40:fa:ac:c5:ff:0f:56:d5:73:11:0b:50:
cc:b6:60:b9:02:fc:72:9c:d2:1c:55:b0:92:1e:98:e3:f9:ba:
00:7b:8a:55:b5:6e:52:42:14:a5:50:51:db:f4:a0:68:8c:95:
56:3f:1b:c4:23:2a:0e:8d:0c:21:75:2a:cb:95:cb:eb:73:00:
15:ef:0d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 13:39:57 2025 by rpki-client