Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
File: 1lRDbtMkK925b98TmhJT3rmG39A.mft (raw, json)
Hash identifier: txFM7GQgJHXc7m+wV/8HSdY9M1c+C0SGzxS4Qkaeh/U=
Subject key identifier: 4A:D6:98:3D:92:37:EC:1C:1D:4A:BE:9D:BB:AC:D6:F6:8B:A1:72:24
Authority key identifier: D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
Certificate issuer: /CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Certificate serial: 0198CCA5A554DE3DC7645BEB9F4397CC096E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
Manifest number: 164A
Signing time: Thu 21 Aug 2025 12:41:04 +0000
Manifest this update: Thu 21 Aug 2025 12:41:04 +0000
Manifest next update: Fri 22 Aug 2025 12:41:04 +0000
Files and hashes: 1: 1lRDbtMkK925b98TmhJT3rmG39A.crl (hash: i4PpDhisKMzE+FlXcVviuNQE6FIhTNYwu1pJN+ztkvE=)
2: crDjLxmHdcT6e7WUgga10c_NWik.roa (hash: 1lxS7SYauMom80FADoSQnixC1wX1TWhmXujQ5ZWWnRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cc:a5:a5:54:de:3d:c7:64:5b:eb:9f:43:97:cc:09:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Validity
Not Before: Aug 21 12:41:04 2025 GMT
Not After : Aug 22 12:41:04 2025 GMT
Subject: CN=4ad6983d9237ec1c1d4abe9dbbacd6f68ba17224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:82:88:63:3d:c9:a6:54:6c:52:44:12:8e:34:
c6:56:2a:11:c2:1f:cb:3e:ba:b7:3d:aa:ca:66:37:
9c:ab:72:37:06:18:40:60:ce:3a:c3:04:3e:db:64:
2d:46:99:bc:69:57:39:27:4b:37:4f:a8:5a:56:89:
a8:e6:06:6c:88:b2:b7:bc:7e:b3:85:a6:4c:7f:8e:
f1:d4:2c:46:c7:9d:a9:55:a3:3d:e7:88:41:82:70:
eb:27:a7:6a:48:00:a3:2d:15:54:ed:f9:ff:db:e2:
8a:f1:da:1a:46:f6:04:38:15:e4:43:bd:a2:74:5d:
7e:ab:61:36:03:06:a8:ab:42:93:4c:ae:46:26:e5:
2c:3f:b2:17:cb:6d:0c:00:ab:07:67:29:14:5e:bc:
f0:8b:4e:2e:39:9d:88:40:cf:a8:fa:61:6f:e4:df:
4c:be:65:7d:43:55:1f:05:0e:d4:d7:64:62:05:83:
d0:d5:60:c1:69:c0:f4:2e:39:c6:4c:ba:00:f8:5d:
36:03:cf:69:52:08:0e:a7:3b:48:0f:8a:8f:35:b8:
d3:2d:e9:47:78:1c:40:b4:48:43:44:3d:50:4e:9a:
19:e1:90:87:7b:68:03:79:84:4f:dd:54:4a:6b:72:
7d:8c:1b:43:c9:d8:62:a0:53:14:6f:6f:2c:d6:e4:
08:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D6:98:3D:92:37:EC:1C:1D:4A:BE:9D:BB:AC:D6:F6:8B:A1:72:24
X509v3 Authority Key Identifier:
keyid:D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:0b:a5:f2:e8:e7:29:0a:4b:bc:cd:e2:ca:b0:41:0e:4b:31:
6f:15:a3:cc:4c:ce:c4:57:f5:c2:d8:48:f4:9c:26:a3:83:63:
3e:7e:53:1d:f4:81:7b:6d:ed:43:bc:d7:ab:e5:1f:05:4a:42:
a0:52:da:53:85:74:22:24:19:aa:7b:55:3d:83:c3:2a:63:30:
8d:38:f4:dc:78:89:23:b2:e7:fe:10:37:e1:a2:11:b2:ac:09:
c9:e6:28:76:68:88:90:22:94:1d:33:ea:24:80:08:e3:e5:b2:
96:24:2c:af:bd:2f:8f:c1:7c:d1:92:46:7c:e2:08:7d:89:60:
0d:06:e3:87:53:db:36:49:0c:68:a3:74:10:a9:9d:24:bf:ad:
51:9f:44:9b:3e:82:03:1b:c9:2b:4a:1c:0d:ea:05:1a:56:09:
4f:d4:15:91:03:8b:61:af:0a:53:eb:97:18:b7:a3:66:97:05:
e9:a7:56:a5:4d:1e:4e:75:28:81:e8:0a:c0:5a:ed:e0:21:9d:
8f:5a:bd:f9:9e:e7:2b:73:b6:b4:83:80:e3:9e:20:e1:bd:1e:
df:28:1b:f9:b0:ad:6d:4d:c5:72:2c:dd:c4:be:d8:33:b5:70:
0f:a9:8d:3d:56:77:ae:1b:41:8a:9a:c9:7b:40:1e:38:27:15:
72:61:a0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 14:51:47 2025 by rpki-client