Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
File: 1lAD4kzs-_jowV_2N90V201_rpI.mft (raw, json)
Hash identifier: QKCuVKID/xubIACirys7chsASpJvQ6zWt1PYUiTrPpo=
Subject key identifier: D4:BC:63:80:E9:7D:AF:09:F8:0D:43:BC:CF:38:C0:25:A6:56:EB:ED
Authority key identifier: D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
Certificate issuer: /CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Certificate serial: 01991CF7E5D1E54CF091E576FD4C7EAC4231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
Manifest number: 1301
Signing time: Sat 06 Sep 2025 03:00:32 +0000
Manifest this update: Sat 06 Sep 2025 03:00:32 +0000
Manifest next update: Sun 07 Sep 2025 03:00:32 +0000
Files and hashes: 1: 1lAD4kzs-_jowV_2N90V201_rpI.crl (hash: /ZLpJ/CRla7pqmKlWTHHp1nzNvFcsKSYj9AK/shJ/MQ=)
2: kLDW8S2AqSM38SEqcZhk6y6H9Zs.roa (hash: 1uyD9ShIaMoUE8tZ7cjyGLh54i2J2KfHSIYSBkC6vac=)
3: wIodltuZamN_XbrkxPEbxEvk-zQ.roa (hash: rVn8wcQMjL6Fr2tjBFZGRxqvuP5jpiydhf+juvmtDHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1c:f7:e5:d1:e5:4c:f0:91:e5:76:fd:4c:7e:ac:42:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Validity
Not Before: Sep 6 03:00:32 2025 GMT
Not After : Sep 7 03:00:32 2025 GMT
Subject: CN=d4bc6380e97daf09f80d43bccf38c025a656ebed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c9:42:aa:69:95:b0:e6:e5:3e:fc:75:ba:9b:
64:cd:59:43:14:3e:75:e7:83:48:ba:93:01:1a:04:
ee:74:8d:8a:4e:75:f4:7b:cc:7f:35:c0:cf:1d:12:
e9:30:d9:1b:c5:e5:fc:3b:cb:4d:b8:57:bf:57:e1:
2b:e4:03:fe:87:d4:05:45:52:1a:3f:67:d9:d0:a1:
cc:16:ba:54:73:e8:5a:14:bd:49:1b:68:0c:f5:10:
f8:fb:4a:a3:c6:2b:34:f1:2e:b5:76:6e:2c:59:1a:
6b:b5:ed:09:ec:28:a1:62:27:e3:9a:db:50:b9:73:
01:c6:0c:65:88:89:37:16:4b:84:7a:8a:07:22:a4:
d1:0f:55:6b:92:84:ae:1a:a8:21:15:48:b5:f1:24:
11:70:ed:74:88:f4:cd:7c:26:55:5a:3c:77:77:04:
2a:2d:13:ba:a8:8a:5d:00:bf:79:2e:5c:32:b6:bf:
fb:4c:f6:e0:27:2e:be:4e:6f:71:b4:04:14:29:52:
d9:ec:a6:92:41:31:1a:92:54:52:c3:89:f9:42:07:
75:4b:20:38:3c:91:df:72:a9:99:3e:e5:d8:72:1a:
a0:99:0f:e7:f3:47:16:df:07:49:4d:c7:ee:b1:61:
ab:ed:22:0a:a4:5e:e4:1e:26:ed:39:6c:f0:38:e4:
8a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BC:63:80:E9:7D:AF:09:F8:0D:43:BC:CF:38:C0:25:A6:56:EB:ED
X509v3 Authority Key Identifier:
keyid:D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:0b:6b:c8:57:02:3c:3b:c2:d1:7f:8f:d2:ec:59:ac:1b:8f:
09:70:ae:37:5c:99:5f:d8:f4:9c:b3:a4:2e:65:78:8a:77:f6:
7a:0e:8e:4d:e7:f0:9d:d8:9f:51:ca:c3:bf:7c:2d:77:93:9b:
24:ce:1e:54:09:4f:c8:cc:66:b8:7f:bb:c7:25:21:14:5e:ec:
8f:a6:9b:ee:23:b5:9a:99:a8:ab:6b:4b:dd:85:34:6e:91:f5:
2a:a3:29:f1:e9:99:22:8e:10:1c:0f:45:8f:dd:72:c1:e3:ed:
66:83:2f:3e:14:a6:c7:b3:5e:8f:7b:60:17:c1:01:4b:df:f3:
38:ff:f5:64:c6:b9:05:60:53:4f:bc:73:47:a3:66:4f:dc:18:
09:12:80:50:53:56:35:7f:30:0f:7a:48:86:97:eb:f5:94:a9:
4e:fe:3e:e3:2b:53:34:97:62:2b:fb:51:23:e8:00:9e:4f:3c:
dc:23:6f:ae:78:77:5f:c4:f9:8d:8d:f3:2e:b3:bd:91:9a:8c:
a3:a1:31:ba:f1:c9:b0:ab:d3:73:29:b7:db:08:4c:b9:1f:cd:
24:b0:ae:03:de:55:3e:cd:8f:47:3c:79:d4:cf:bb:29:bb:58:
e8:52:0a:3a:9f:53:e2:fe:ad:50:98:ca:82:d9:d6:02:f9:16:
19:8f:44:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 08:11:01 2025 by rpki-client