Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft
File: 1gKgc6GrxkQ1el-XOO62dqSpPcY.mft (raw, json)
Hash identifier: +AatvqfgdaLP2y32bU4iaKqHYhnidjK1McJys4o0hmQ=
Subject key identifier: 33:54:E6:D9:94:F8:7A:FE:53:66:8C:67:A0:85:08:9A:E1:1F:59:B3
Authority key identifier: D6:02:A0:73:A1:AB:C6:44:35:7A:5F:97:38:EE:B6:76:A4:A9:3D:C6
Certificate issuer: /CN=d602a073a1abc644357a5f9738eeb676a4a93dc6
Certificate serial: 019923311F8FB50F173230E85C13D3076D57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gKgc6GrxkQ1el-XOO62dqSpPcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft
Manifest number: 12
Signing time: Sun 07 Sep 2025 08:00:45 +0000
Manifest this update: Sun 07 Sep 2025 08:00:45 +0000
Manifest next update: Mon 08 Sep 2025 08:00:45 +0000
Files and hashes: 1: 1gKgc6GrxkQ1el-XOO62dqSpPcY.crl (hash: PIiW873cE8CJxZ6K9ugF+VxTa0FlPJzQSMeEitAbsi4=)
2: 7dyKoqU_uGFj2QfjYZs5zvdLxIY.roa (hash: 0WWTmxFxwFqsreBzZrF6paaxfc63rbHSArefR/ThQ8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gKgc6GrxkQ1el-XOO62dqSpPcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:1f:8f:b5:0f:17:32:30:e8:5c:13:d3:07:6d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d602a073a1abc644357a5f9738eeb676a4a93dc6
Validity
Not Before: Sep 7 08:00:45 2025 GMT
Not After : Sep 8 08:00:45 2025 GMT
Subject: CN=3354e6d994f87afe53668c67a085089ae11f59b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:39:94:c8:e5:1c:7b:c4:d0:0e:dc:87:51:a1:
e7:91:86:ef:9f:93:15:ce:a4:1c:bc:c3:c5:c0:21:
75:28:9b:c0:2c:21:b4:f6:50:2b:22:74:6f:15:ce:
1d:3f:79:b2:31:7a:b9:77:43:ec:f2:7a:2f:98:68:
29:da:2f:f0:04:e0:2e:43:03:56:0d:ed:b9:43:a7:
9e:4f:77:02:a7:70:94:04:60:59:7f:82:68:91:73:
97:9a:e3:41:52:46:76:3e:5f:95:d5:12:a7:6e:77:
2c:e5:79:31:72:66:e1:c0:c4:19:58:4c:87:f0:17:
68:3c:d2:6a:a0:da:cc:d8:fa:99:c5:a8:8b:43:0a:
03:7c:a3:35:a3:72:d9:7b:0d:5c:a6:03:61:43:7d:
30:2f:99:34:bd:9c:89:27:24:54:79:82:dc:7b:06:
15:c2:c8:d8:21:7e:23:22:08:09:67:3c:69:b7:27:
71:6d:fc:97:5c:82:9a:c6:e8:c6:11:56:76:77:f7:
3c:50:50:b6:75:b6:5e:34:a6:8b:a8:0d:eb:ff:23:
7c:0a:77:5d:a3:93:08:c8:6b:68:21:70:18:4e:57:
74:03:79:1a:02:d3:3d:e9:48:d4:30:a1:4a:30:f7:
a9:9d:9b:87:08:e3:c7:a5:7b:26:41:ac:14:72:c0:
70:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:54:E6:D9:94:F8:7A:FE:53:66:8C:67:A0:85:08:9A:E1:1F:59:B3
X509v3 Authority Key Identifier:
keyid:D6:02:A0:73:A1:AB:C6:44:35:7A:5F:97:38:EE:B6:76:A4:A9:3D:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gKgc6GrxkQ1el-XOO62dqSpPcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:6c:c0:d0:3d:b7:d9:c4:c4:e9:3b:cd:6b:ec:af:93:47:1f:
4b:53:5e:1a:fe:44:af:40:11:f9:47:ac:13:1c:fa:9b:8b:15:
78:0f:ca:6e:17:9a:d7:cc:bf:e4:4f:06:82:66:12:26:e9:3b:
9c:15:f2:a1:7f:d5:6a:aa:86:fa:d2:b8:4f:e4:8b:3b:04:2a:
60:10:d2:cb:c7:99:55:c0:bc:32:75:d3:ea:18:18:a6:33:ae:
d0:fc:96:35:c5:ba:db:20:ad:8f:de:8e:6d:61:58:a8:59:17:
27:78:04:fe:d3:c6:ee:38:f1:0d:7f:d3:d1:fc:8d:ab:44:ae:
db:99:13:33:0e:df:30:34:cd:18:05:71:f2:9d:eb:61:9b:94:
11:81:04:f4:fb:ce:05:32:dd:93:a6:74:a5:65:46:3b:f9:23:
cd:f9:c5:b6:d3:2d:54:74:ae:78:15:0b:53:16:0a:e6:14:ba:
bf:4c:dc:38:79:c5:81:b3:44:a1:89:90:30:57:23:80:60:b8:
c1:06:07:07:55:58:d2:c8:45:6a:ae:ca:ad:bf:87:2a:96:88:
5c:bd:cd:72:db:7b:49:0c:e1:d6:58:2e:49:9b:46:a7:c2:61:
8f:bc:8e:6b:73:f7:1b:fa:e1:15:8f:61:ca:5f:d5:f4:21:c0:
99:3c:d2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:11:59 2025 by rpki-client