Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
File: 1n8Sg7Yw5YjLA5umUrkCmdcajng.mft (raw, json)
Hash identifier: udIVRzEggfxkWBm7k72nZNj98YYMOv6Woeqc+9J5RfU=
Subject key identifier: 5B:11:86:49:EC:B9:E8:73:B2:40:95:AE:F9:55:7C:98:FC:ED:6D:20
Authority key identifier: D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
Certificate issuer: /CN=d67f1283b630e588cb039ba652b90299d71a8e78
Certificate serial: 0198C75ADC0E560842EF8FC0B1DA6C3C8BFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
Manifest number: 0740
Signing time: Wed 20 Aug 2025 12:01:17 +0000
Manifest this update: Wed 20 Aug 2025 12:01:17 +0000
Manifest next update: Thu 21 Aug 2025 12:01:17 +0000
Files and hashes: 1: 1n8Sg7Yw5YjLA5umUrkCmdcajng.crl (hash: MYMORI1m52QsldSQE1P8lCvZCP7jZHtiy/PjTWi9R4o=)
2: Wl7dfPBMjzt7d3ARPHZzvBDvCz4.roa (hash: YXn3MdI9fbwK137bu2N/c5GjDCAVC9bePDhOy7NGC2E=)
3: ricnvXRyxBIr6uz7wJxhUxO5eB8.roa (hash: OF8ZMoVg6J5N7Pqa2nI+KUupYU9mKGD+TotlcQVJhhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:5a:dc:0e:56:08:42:ef:8f:c0:b1:da:6c:3c:8b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d67f1283b630e588cb039ba652b90299d71a8e78
Validity
Not Before: Aug 20 12:01:17 2025 GMT
Not After : Aug 21 12:01:17 2025 GMT
Subject: CN=5b118649ecb9e873b24095aef9557c98fced6d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:69:e4:8e:c0:f0:6f:46:26:e6:bc:de:b9:15:
21:a6:6f:b9:6f:d7:4a:0a:93:9e:0e:0b:ea:a8:ef:
f3:b6:8e:88:f2:b8:b8:7c:77:9f:7b:7f:39:74:35:
8d:ec:d0:14:39:3c:5c:be:3a:0a:f4:c2:01:34:f5:
a4:77:b1:38:dc:80:c5:ea:6b:74:53:2b:38:ed:5f:
48:b3:d9:8c:56:e3:f0:33:ca:d8:ae:43:de:14:81:
91:cb:b1:47:96:a4:15:c1:2b:91:cb:de:5f:5a:fe:
f3:8c:81:23:cc:ff:55:e9:77:62:97:0b:bd:44:3f:
bb:30:e0:f1:38:37:b7:7f:75:72:69:cd:2f:8d:88:
c5:26:5b:e2:31:84:cd:de:a9:1e:31:c1:5f:9f:00:
77:3d:17:8d:cd:ce:b8:31:3d:7e:20:03:16:67:89:
61:47:a7:b2:77:1b:ce:8b:a4:fb:08:78:f1:31:39:
89:f0:28:e5:1f:fc:c7:07:07:1d:3d:19:99:64:1c:
ba:65:64:3a:5f:8b:95:d1:f6:c1:9f:bc:19:6e:84:
35:43:19:35:9b:46:a9:93:aa:03:07:a5:cf:19:b4:
ba:9c:2b:26:2c:f3:89:9b:a4:80:50:14:81:fc:7e:
40:13:74:0c:c1:9a:10:c4:01:37:0d:a6:8a:73:d3:
a9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:11:86:49:EC:B9:E8:73:B2:40:95:AE:F9:55:7C:98:FC:ED:6D:20
X509v3 Authority Key Identifier:
keyid:D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:32:cb:04:7b:99:80:e4:00:37:19:41:63:5a:92:fa:e3:65:
ca:e6:ed:74:14:aa:fd:e0:5e:93:e7:db:ba:94:95:b9:99:b2:
48:44:16:40:51:8f:6b:7b:0d:f9:8c:fa:9c:35:63:70:8a:05:
76:7f:20:fb:19:bf:32:5c:d8:7b:f3:68:0e:e5:29:2a:a9:62:
44:97:e7:f9:26:54:02:c7:12:9c:e0:c1:89:de:91:8d:65:9b:
b3:52:d7:de:65:c6:18:b8:cf:48:3d:7f:2f:3d:ee:eb:81:0d:
d0:69:11:04:97:d7:b6:fb:e1:38:cc:d5:7f:28:3d:bd:ef:66:
4d:97:93:20:4c:ad:a0:01:9f:a3:af:92:1a:1f:e9:e9:57:cc:
9d:64:99:bd:e9:75:d1:30:f5:e3:3f:14:25:91:29:4a:97:e5:
91:94:97:82:ea:c5:f6:bd:7c:9d:5d:6b:38:82:1a:1c:c7:58:
d6:e2:5a:b9:97:6e:d4:07:3e:00:ce:6f:13:e3:78:9e:34:be:
95:ce:9d:99:eb:d9:9a:a5:84:e7:80:90:3c:5e:6c:2e:ba:e6:
1e:38:ce:bb:84:cc:bd:29:23:da:92:78:69:a8:01:05:e3:29:
27:22:3d:c2:18:ca:d1:c9:97:48:96:3e:c9:74:5c:2f:14:df:
38:38:6a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:34:49 2025 by rpki-client