Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
File: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft (raw, json)
Hash identifier: O5s9vJxoH2r8sgZyJCguKdsj9EJt+l0qGuBasrq/gGs=
Subject key identifier: 5A:83:1B:B2:C3:B9:9B:38:99:38:63:83:63:30:24:1F:0E:95:0B:BA
Authority key identifier: D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
Certificate issuer: /CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Certificate serial: 0198C9B877F8C6805BE2F9117EBCE0203D6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
Manifest number: 0E25
Signing time: Wed 20 Aug 2025 23:02:46 +0000
Manifest this update: Wed 20 Aug 2025 23:02:46 +0000
Manifest next update: Thu 21 Aug 2025 23:02:46 +0000
Files and hashes: 1: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl (hash: jm1iuqfpOlhJkgXfEf6OHtYZcu5vvszV88N2hm97hf4=)
2: ZrVj2s197OVZslr8l0eL6BOnr3w.roa (hash: MfbdU/hx9JIBrv7/G68X/y0zTkmoV59GNKmYnsQV+5o=)
3: mwni58KyYHbpUQER4Pt8qtMcan4.roa (hash: 1zAR9iZ3h0/evzy5xE5e6DnfwvHvR1HUWm8sNJWcti0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c9:b8:77:f8:c6:80:5b:e2:f9:11:7e:bc:e0:20:3d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Validity
Not Before: Aug 20 23:02:46 2025 GMT
Not After : Aug 21 23:02:46 2025 GMT
Subject: CN=5a831bb2c3b99b38993863836330241f0e950bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:59:26:24:fe:71:3c:39:93:9f:52:53:18:24:
13:36:36:bd:22:9c:09:65:2d:df:1d:4e:b9:05:54:
fe:2a:16:ca:e9:6b:73:01:66:3c:26:4e:82:c0:2b:
63:64:28:82:0c:db:b0:b9:79:35:10:4c:99:f3:5d:
c0:ef:43:47:5a:34:09:ab:45:38:85:07:4a:65:a3:
d2:05:6d:25:e7:ba:30:07:68:d8:34:fa:af:fd:d3:
0b:96:4c:97:ec:2d:a3:d7:8d:b8:12:ef:e0:07:fe:
c8:35:29:f5:30:40:38:48:6f:9c:b7:40:e2:51:26:
6f:d3:57:bc:ec:6f:ae:28:6d:80:b5:9e:32:a8:33:
b6:43:91:c6:6f:33:41:4e:c5:d7:36:b5:7d:61:b5:
eb:4f:39:63:18:5f:79:05:d2:81:a8:ec:f9:16:28:
1a:39:33:f3:e0:4c:2e:a3:d5:3a:d0:38:48:5c:a7:
37:30:4b:51:e8:06:96:6c:f5:f2:18:84:83:af:ca:
a5:00:b4:63:60:1c:d5:6b:f2:f9:d6:23:2d:2d:ee:
69:c8:b4:7c:69:9f:f0:a1:7f:65:ca:b1:ec:df:c2:
bc:33:89:ca:14:aa:c2:39:9d:47:33:a2:60:2a:a1:
db:d3:cc:2a:f1:43:0b:da:34:31:7e:67:ee:f4:9c:
82:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:83:1B:B2:C3:B9:9B:38:99:38:63:83:63:30:24:1F:0E:95:0B:BA
X509v3 Authority Key Identifier:
keyid:D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:16:55:e6:63:8c:ae:e5:53:8f:bc:86:56:41:b0:04:e0:e7:
6d:4b:ed:56:72:a5:06:5d:70:c1:f0:13:ad:9c:fd:ae:3d:92:
19:64:04:6b:7c:0a:3b:6b:24:3f:2a:82:fb:a4:09:67:82:7a:
2a:76:0e:50:bb:13:2c:f1:55:e1:6e:ca:ed:89:67:a6:dc:45:
b6:c9:a3:3a:3e:d9:84:e6:ec:43:05:40:35:f0:67:23:b1:b0:
1c:2d:3e:13:5d:3e:87:28:bf:74:48:73:b6:3a:cb:99:d1:f3:
fa:7e:7d:a6:99:e1:12:80:04:77:1e:d6:e3:c0:e0:a3:76:79:
00:f1:0c:2e:8c:e5:4a:11:d5:e0:9d:1d:53:5f:e3:2b:3f:9b:
17:f1:ca:4a:fb:4b:93:88:e3:ca:78:42:d3:88:66:7a:39:ba:
0b:2f:d3:64:ce:b5:63:1a:9d:a5:ad:15:08:6d:e9:0c:cd:bb:
93:7d:2c:c8:f9:4d:28:ab:a0:d1:37:6e:7f:4d:5c:4a:49:29:
85:a9:2c:9f:62:4a:d1:0c:47:fe:15:f0:e0:72:1b:41:83:93:
67:b4:ad:a4:ba:b8:5b:c2:5b:fd:37:64:00:5b:32:8c:b5:87:
b3:01:b4:60:31:dd:e7:3e:23:52:71:1d:0f:4f:3c:fa:b7:7e:
43:b4:56:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 05:01:04 2025 by rpki-client