Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
File: 1fJk44BaPRBFNzV6FP-SasApWZw.mft (raw, json)
Hash identifier: ZhXn/dNUu5gaLcFQAwyLFJUqTY/BHvGyZmNKXBhKW9w=
Subject key identifier: A1:C1:16:C2:F9:F0:2A:03:8C:A2:CB:E2:A2:B1:2B:8C:ED:09:CB:7F
Authority key identifier: D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
Certificate issuer: /CN=d5f264e3805a3d104537357a14ff926ac029599c
Certificate serial: 01983A28FBA359A3F5A185C15CC0A1DDE8DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
Manifest number: 05DA
Signing time: Thu 24 Jul 2025 02:00:20 +0000
Manifest this update: Thu 24 Jul 2025 02:00:20 +0000
Manifest next update: Fri 25 Jul 2025 02:00:20 +0000
Files and hashes: 1: 1fJk44BaPRBFNzV6FP-SasApWZw.crl (hash: tH81pElqZeuB7G2urlUv4cNn6HcWrXGiDgxn+oWlmws=)
2: nK4fLsZ-CNNohZUItb4se5mVTks.roa (hash: E8CbmlBbMfwFFllt9Np43WKWYkKbRui+TW9xF2TYMh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3a:28:fb:a3:59:a3:f5:a1:85:c1:5c:c0:a1:dd:e8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f264e3805a3d104537357a14ff926ac029599c
Validity
Not Before: Jul 24 02:00:20 2025 GMT
Not After : Jul 25 02:00:20 2025 GMT
Subject: CN=a1c116c2f9f02a038ca2cbe2a2b12b8ced09cb7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9b:0c:d0:c3:bd:75:74:df:a8:12:83:fa:25:
16:02:98:f1:b6:7e:53:ec:70:fb:9d:17:7e:3b:c3:
fc:da:36:46:b8:33:9c:ba:54:43:4c:8d:b9:47:2b:
a1:83:64:e6:c8:23:03:f9:74:93:ca:f6:7f:ad:17:
f1:55:7e:17:79:d4:b6:87:63:2c:7d:54:0d:27:0a:
83:1a:f3:f0:1b:5d:10:40:dc:09:d4:54:02:19:35:
1a:c2:7d:43:12:20:0d:9c:f9:73:41:be:5d:36:29:
b8:75:2c:de:47:1e:aa:d3:6c:78:59:16:eb:9c:1c:
e5:39:fc:93:ed:59:bc:bf:e2:a3:92:c0:21:2a:c3:
c7:e4:44:8e:52:a1:43:46:5e:00:87:82:2a:43:62:
f0:9a:72:53:5c:0b:9b:c7:2a:5c:e5:56:da:28:58:
6d:0d:7a:11:08:e0:02:01:56:73:0b:ff:6b:c9:ff:
68:0d:d5:10:9b:d8:fd:b9:d1:1e:d2:e0:66:59:01:
f6:60:ea:4b:da:e8:7e:b2:0b:84:2a:bc:0f:f0:e9:
80:d8:a6:05:12:9b:15:a0:89:d1:c0:c2:e3:cf:eb:
4f:15:33:2c:70:d2:58:c0:76:d9:12:86:16:36:e2:
bc:4c:df:7a:ca:af:5f:a5:3f:40:e8:85:a3:05:71:
6c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C1:16:C2:F9:F0:2A:03:8C:A2:CB:E2:A2:B1:2B:8C:ED:09:CB:7F
X509v3 Authority Key Identifier:
keyid:D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:48:d7:31:eb:16:0b:1a:23:62:fc:9d:78:93:a9:55:cb:72:
25:63:d3:ae:05:23:74:1d:b9:60:3d:f1:66:a6:26:07:cc:75:
45:b6:b9:db:e8:3e:5f:17:37:fd:6a:e8:1a:c3:23:92:f0:ee:
23:c6:59:97:ed:78:4f:56:85:27:c5:8e:1c:ab:2a:69:d0:88:
81:91:20:ea:55:49:b3:84:50:b4:dc:44:3a:60:76:37:a3:14:
ee:4e:45:eb:ee:ad:f1:e4:4c:39:7d:dd:4c:ed:bc:79:35:27:
d6:a6:56:68:2e:8a:d5:1d:97:69:a3:ff:1a:d1:0f:5e:a7:ef:
b0:16:89:ca:d9:80:16:fa:79:2e:86:96:81:d4:76:5f:3b:0f:
e2:ac:86:a3:f8:82:a2:0c:5d:b7:0b:cc:42:6d:15:cd:3e:d3:
f8:04:82:37:5e:0d:26:c6:7b:5f:03:97:01:c3:ec:32:9c:1b:
88:d5:cf:3a:7a:71:21:0c:f7:0b:84:de:44:0d:4c:43:98:29:
75:df:c0:e1:3e:13:e0:2e:da:0c:b2:75:9f:ef:8c:e9:46:e2:
82:b3:fa:49:ff:74:30:40:b7:d9:79:e9:3b:5d:54:00:e2:b4:
7e:38:55:ae:5d:12:bd:2e:47:60:ad:b2:52:b1:6e:75:30:81:
f1:f1:53:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 03:26:37 2025 by rpki-client