Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
File: 1dHNR6U-9X67VnvIgq0phvqsXw0.mft (raw, json)
Hash identifier: cCVNSK4qJ+LwntJ6vgmnhjaCCuh11bnY4GcDNfFFLkk=
Subject key identifier: FF:98:63:32:47:15:CF:2B:EC:FF:0F:6F:B6:D9:8F:2A:AC:1D:5A:6B
Authority key identifier: D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
Certificate issuer: /CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
Certificate serial: 01986024BF9136AFBABCE54837F6655BCCA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
Manifest number: 135A
Signing time: Thu 31 Jul 2025 11:01:17 +0000
Manifest this update: Thu 31 Jul 2025 11:01:17 +0000
Manifest next update: Fri 01 Aug 2025 11:01:17 +0000
Files and hashes: 1: 1dHNR6U-9X67VnvIgq0phvqsXw0.crl (hash: smSJNHbhHGn5wDGlYq8Jl3XGRw/yn098f114BbTtcCU=)
2: HtyuFwumqnKPMziahbUKFS0HWi4.roa (hash: +Ry2R7+vd5notaRsVNHJudJevoZS3UrzytB191N2Lxg=)
3: J_BkHOkhHT0AEp-6tEsjYFw6hs0.roa (hash: JAS00/5XA38hVRagh+vY9Urvk5gt+2KkIUuPK6DqVFc=)
4: nPGwQCzaguMv6zj3Fc1otRQL65Y.roa (hash: 8JiUrMWy4jhS7VoztMhcDmEoQ8qVt8FQ/VbezbbM4z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Aug 2025 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:60:24:bf:91:36:af:ba:bc:e5:48:37:f6:65:5b:cc:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
Validity
Not Before: Jul 31 11:01:17 2025 GMT
Not After : Aug 1 11:01:17 2025 GMT
Subject: CN=ff9863324715cf2becff0f6fb6d98f2aac1d5a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:72:ea:a8:54:35:8b:0d:bf:b4:dd:d6:e4:4e:
72:38:15:af:c7:31:a6:75:2e:ac:e2:7d:51:0f:94:
3e:e0:e2:fc:e2:c2:4a:ab:a7:b2:f8:af:6a:54:f4:
d0:47:81:c7:2c:0d:3f:d1:04:4a:ad:92:21:2f:4b:
a5:bd:eb:f2:e1:23:4f:03:5a:91:bd:f0:e8:d5:ea:
9a:6f:05:2d:f9:77:3f:4d:1e:be:46:02:4a:5b:94:
7c:29:c1:93:a2:0b:4a:60:d5:cc:c4:53:41:de:14:
df:c6:6f:8f:97:1a:0f:11:10:d3:cd:49:41:78:db:
5a:12:28:c3:45:b8:f7:fd:df:9c:9c:58:ba:14:bd:
d5:3b:94:31:f3:8b:97:fb:a5:fb:30:ab:9e:b1:17:
1a:77:4a:cc:55:1a:99:2b:b6:7e:bc:23:63:71:82:
4c:3c:89:ae:bf:81:ef:32:23:f2:76:50:9e:2e:18:
00:af:cd:38:99:0c:00:45:27:b5:d0:8c:fa:69:e2:
68:68:b0:8d:f4:12:bd:ae:37:7e:3f:23:72:55:8c:
2d:5a:49:d1:b5:1e:e4:fc:5c:8c:00:20:9c:09:72:
7a:88:4c:92:e4:d5:0e:c3:be:9a:ae:9b:d9:0c:5f:
34:89:3a:e4:5a:39:c9:c6:2e:3d:ea:43:8d:59:e8:
65:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:98:63:32:47:15:CF:2B:EC:FF:0F:6F:B6:D9:8F:2A:AC:1D:5A:6B
X509v3 Authority Key Identifier:
keyid:D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:3a:8e:ed:ca:ee:0f:8a:6f:9e:c0:5e:dd:8c:8f:90:89:61:
a3:bd:1c:17:65:f7:21:43:fe:4d:38:7e:da:f3:e0:a8:5d:f6:
13:ef:64:78:6f:a9:44:65:db:31:91:05:82:27:3d:21:d4:8b:
9b:5b:41:2f:f1:7f:c2:e2:bf:9e:cc:ad:5d:25:14:41:40:77:
45:d3:21:30:dc:83:b4:de:7e:3f:4c:a5:5f:bb:99:26:7a:70:
0a:3d:1f:66:5d:d9:af:de:17:7c:34:70:42:24:d0:12:fc:7b:
58:9e:7d:c9:42:cf:55:cd:e2:15:c4:b1:92:96:a8:14:78:df:
09:ff:4e:c7:be:be:3c:32:9d:02:9f:82:37:e1:9f:c3:0d:3b:
dd:9b:d1:b2:73:09:23:d9:a9:c4:7c:93:80:c9:2d:90:49:1f:
fb:88:55:df:87:a6:25:7b:06:02:c7:b8:09:26:15:56:1f:b3:
01:d7:92:6b:2f:93:25:63:79:2b:ac:fc:66:9d:cc:05:33:50:
88:7c:06:33:68:3e:ce:4b:52:b7:28:84:79:ad:6e:3e:0f:98:
03:5a:05:14:f2:e6:33:00:1c:f3:a1:d2:08:34:68:df:08:70:
83:93:48:4a:fb:1d:ad:7a:b3:cc:9a:a6:b1:6f:8d:f9:95:1c:
33:f4:d1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 20:06:46 2025 by rpki-client