Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
File: 1-IesflsonOaBskdMOPeVLMqcD7g.mft (raw, json)
Hash identifier: bl7mY4UMOrj2VVCuf9SAjf97/dl6AaDbngu4mluJwEA=
Subject key identifier: 7D:3C:46:AA:1F:C9:9E:EC:5E:CF:C1:DC:9E:BA:F8:80:80:25:E9:7C
Authority key identifier: F8:87:AC:7E:5B:28:9C:E6:81:B2:47:4C:38:F7:95:2C:CA:9C:0F:B8
Certificate issuer: /CN=f887ac7e5b289ce681b2474c38f7952cca9c0fb8
Certificate serial: 01992367CCB4C207A7646E6D9EA338320F6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
Manifest number: 014D
Signing time: Sun 07 Sep 2025 09:00:29 +0000
Manifest this update: Sun 07 Sep 2025 09:00:29 +0000
Manifest next update: Mon 08 Sep 2025 09:00:29 +0000
Files and hashes: 1: 1-IesflsonOaBskdMOPeVLMqcD7g.crl (hash: kmHf7eokJ2asp2nuMVTewfKUqJyg7VRPzliO9MNUakA=)
2: _3Y85B8z2fS2vGq-Hizl4wDXl38.roa (hash: F8o4Ii7BXNvUdtKshefQ1D79z84X0mOy6rEj4bR0/gc=)
3: l_JUSDpWiKHWQgc8BJE4UAGBJ5o.roa (hash: paHUYov4Lui7Eal9Hd8uFDeyAS9pLYAQQDUb/8+rLFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:67:cc:b4:c2:07:a7:64:6e:6d:9e:a3:38:32:0f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f887ac7e5b289ce681b2474c38f7952cca9c0fb8
Validity
Not Before: Sep 7 09:00:29 2025 GMT
Not After : Sep 8 09:00:29 2025 GMT
Subject: CN=7d3c46aa1fc99eec5ecfc1dc9ebaf8808025e97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f7:6a:de:6b:49:69:bb:0b:32:6f:b8:97:be:
ae:07:ff:b9:cf:51:69:c9:fc:ea:1b:8f:4a:2b:76:
b0:4e:47:4a:0d:a4:94:e9:1b:ec:4d:9c:a9:43:19:
09:c3:81:36:29:fb:97:f7:45:15:39:01:4e:a4:71:
54:7a:dd:a3:76:b6:29:56:16:95:56:71:bd:5e:a0:
a8:6b:d1:e3:db:dc:af:0c:8d:8c:69:20:ad:d4:dc:
ba:e4:3c:b7:53:50:fe:8f:49:c7:3d:5e:f0:05:21:
b5:19:6e:d1:ab:d1:6f:1e:cd:fd:bc:3d:c6:c1:34:
93:a1:93:88:a2:67:08:f7:89:fd:b6:5f:d9:74:de:
8e:46:35:51:c9:1f:dd:a5:73:15:fb:39:2d:b5:1b:
1e:85:f6:99:67:33:74:08:03:1b:55:6b:8b:e4:dc:
9f:97:7a:50:a6:61:c3:bf:ab:b1:92:1e:af:c3:7d:
03:4c:f8:24:8e:94:ae:50:d3:2a:a3:3a:89:aa:a5:
f1:72:1c:c1:30:68:0d:60:e1:29:9e:73:dd:b2:94:
d3:22:d9:fa:25:56:02:f8:47:e2:e6:78:70:fc:c9:
17:f1:c3:5f:a4:97:bc:5e:09:19:08:af:ea:d4:ea:
45:a3:70:81:c0:97:d2:a8:50:c6:22:27:8a:b3:48:
78:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3C:46:AA:1F:C9:9E:EC:5E:CF:C1:DC:9E:BA:F8:80:80:25:E9:7C
X509v3 Authority Key Identifier:
keyid:F8:87:AC:7E:5B:28:9C:E6:81:B2:47:4C:38:F7:95:2C:CA:9C:0F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:06:bb:58:6c:a5:1c:5b:2e:05:cc:ce:52:76:ce:e1:79:c1:
fa:fa:16:56:22:01:72:2f:5a:f8:d6:56:bb:7c:17:50:34:2a:
a1:fe:2f:5a:70:d2:ff:a5:62:2c:00:ff:90:f5:bc:9d:f3:f3:
eb:3c:18:bc:9a:67:14:b7:08:90:d5:69:b3:32:1a:57:ac:3c:
3a:11:87:56:a1:47:0d:40:4d:91:6d:51:32:68:d4:b5:18:11:
4f:4e:88:16:bf:eb:dc:e1:38:15:80:dc:88:6d:b8:ec:5b:9f:
6a:2d:2f:7d:8b:86:2a:2f:1d:8d:f7:44:5a:42:17:7d:b1:a7:
ad:a5:23:8f:d9:df:58:d0:62:c2:cd:fd:db:d4:9f:d6:86:aa:
91:bd:8e:4a:f2:f7:34:3e:4c:53:2e:70:2c:1c:ea:87:b2:49:
01:37:66:f6:db:33:69:99:3b:94:bd:84:ac:51:9d:15:c0:64:
e1:7d:9f:07:dc:40:33:d3:72:b9:9a:57:8e:d5:e5:0b:07:b8:
79:19:72:ef:0b:8a:66:bd:da:a6:b7:60:4d:78:6a:59:97:cf:
27:08:7f:47:52:f1:c0:e5:39:eb:21:de:31:a6:f0:e4:49:6d:
ea:38:09:4f:78:1d:39:8c:31:c4:74:0c:15:60:e6:21:92:2b:
07:b5:ac:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:42:05 2025 by rpki-client