Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
File: 1-3grePIKbktwZDBSvRpArxWlYzg.mft (raw, json)
Hash identifier: q5tOpYISPLGe/PLS5rbfhkgzwt0I1lB1joAL9DaNX0E=
Subject key identifier: 75:56:96:54:AF:FB:B4:E4:66:64:5B:20:C6:C1:FB:9F:47:77:05:02
Authority key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
Certificate issuer: /CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Certificate serial: 019838A844DDA9A81275BA73689983E188BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
Manifest number: 149F
Signing time: Wed 23 Jul 2025 19:00:08 +0000
Manifest this update: Wed 23 Jul 2025 19:00:08 +0000
Manifest next update: Thu 24 Jul 2025 19:00:08 +0000
Files and hashes: 1: 1-3grePIKbktwZDBSvRpArxWlYzg.crl (hash: DkFiMfWv6WKxZB2sjb+28O5RKY/0bJuZfmyOJw+Lh1M=)
2: B1dTi0f_of0kmb1xPgeCM0wY_So.roa (hash: AUmVPkVAQPCmSbSqHlAfz6SLH5DutLJ3OBZdx5Ql8g8=)
3: g4GI57zRcwc78atAcKzvcX8O_Jg.roa (hash: I42VDUXmjO3wztnHcn35mdQWvB1AtZN/AkJrcxSWDOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 19:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:a8:44:dd:a9:a8:12:75:ba:73:68:99:83:e1:88:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Validity
Not Before: Jul 23 19:00:08 2025 GMT
Not After : Jul 24 19:00:08 2025 GMT
Subject: CN=75569654affbb4e466645b20c6c1fb9f47770502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:10:26:c6:6d:d4:ad:13:cb:d9:de:bb:62:fa:
6c:70:96:9d:b2:61:26:4c:45:ac:c9:6f:bf:75:23:
9c:62:fb:1a:62:ed:5f:1b:14:9d:1e:06:85:02:ab:
02:14:cd:7e:a3:5b:f4:0b:a7:23:40:27:4d:92:cc:
6b:ed:ec:96:82:79:70:fa:4e:19:70:fb:6f:fa:77:
da:f7:b1:82:b5:1f:fc:26:e1:b9:08:b1:78:01:82:
c7:11:21:fa:dc:81:75:a6:69:b9:28:74:9f:b6:51:
a7:34:af:54:ae:1f:08:b6:b7:a7:ac:1c:6c:01:d7:
30:6a:4a:41:fc:8f:97:fa:bf:09:11:e6:d0:d6:70:
93:94:22:09:27:4f:b3:d4:54:0b:2d:76:08:f6:34:
2f:d6:bf:93:fb:37:54:5b:68:85:a0:e2:32:9a:9f:
5e:f7:b6:3d:08:45:62:50:3f:8f:a1:75:a6:ed:ea:
7a:9d:69:71:8b:a0:b0:8d:a8:6d:97:5e:4c:af:46:
ad:cb:27:94:57:00:2e:b7:8b:df:31:14:38:e0:13:
ba:15:47:37:11:21:d5:9c:e1:7a:44:06:ee:40:78:
4c:23:d1:79:8f:c7:87:e5:f9:bd:ae:0e:28:c5:dd:
59:01:bd:5f:e6:35:53:bd:f6:85:d6:df:b3:b0:1d:
46:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:56:96:54:AF:FB:B4:E4:66:64:5B:20:C6:C1:FB:9F:47:77:05:02
X509v3 Authority Key Identifier:
keyid:FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:3d:2e:d4:79:2b:d2:73:0d:c3:e1:46:9d:60:de:ea:ca:f0:
a1:b3:14:6e:7b:8e:d5:e4:e1:17:ba:6d:ae:96:20:50:d3:78:
fa:24:85:49:8c:68:a0:e1:09:8d:e5:cf:a6:78:52:e4:78:1d:
e8:ad:90:73:0f:73:ba:5a:75:c3:52:c2:3f:bd:cd:65:75:37:
53:a7:09:e5:ac:c3:36:5b:56:3a:20:d0:ea:cf:64:c8:4f:f0:
6c:6a:09:5b:af:fd:b7:10:23:9b:65:57:68:fb:6c:7e:19:55:
30:93:da:a9:c6:a1:56:60:b0:cb:1d:12:ee:3e:74:53:28:7e:
ff:36:b5:dd:bf:1f:0e:64:7f:94:59:75:a4:cc:cc:f1:1d:99:
ab:33:7b:39:42:b9:20:99:77:8e:bb:e6:33:e9:d6:51:71:a5:
53:26:4e:ec:26:b6:f8:10:79:e6:f7:81:5d:9c:c3:e3:fa:5a:
a8:c6:57:1e:d4:a5:7b:0e:f4:e5:74:28:d1:42:59:af:5a:fd:
8f:4d:0b:8c:d9:d4:ff:1e:93:c5:96:b5:ef:71:f0:79:4d:fe:
ae:9e:19:b9:88:58:18:ea:ce:30:1d:fc:c9:b0:87:d5:4d:04:
d3:70:d9:1e:c9:92:ce:dd:6c:59:6a:43:da:c4:62:4c:d7:ce:
32:51:8d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 03:50:21 2025 by rpki-client