Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
File: 1-xqBDjqxlktE7LN3g0CyZtvaESY.mft (raw, json)
Hash identifier: u910Tod6pTE4hN3dnY5Bh8p+M397MdnR5EOVlZ5xtj0=
Subject key identifier: 91:0F:B5:2B:9C:EB:A1:02:EE:99:B9:DE:17:D6:D0:25:80:A9:04:0F
Authority key identifier: FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
Certificate issuer: /CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Certificate serial: 0198D705C3504416EF88462EBF753F352A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 13:02:15 +0000
Manifest this update: Sat 23 Aug 2025 13:02:15 +0000
Manifest next update: Sun 24 Aug 2025 13:02:15 +0000
Files and hashes: 1: 1-xqBDjqxlktE7LN3g0CyZtvaESY.crl (hash: 5u2WUHFD2N/PIMFwyCS7GZmjbVauk5wrcPttBbwW75E=)
2: VsFuiofejDNus4q-XJuiSHwgNg0.roa (hash: 5/WoOYXAxKPBmuAPhmhS3e5eFCmzTCokgMSG9illRVc=)
3: dERFn8-Y3CpN0nk9-2z0qZhw3lA.roa (hash: MMTvQ8GZkYazTAxyoZRT7syb2AL1b5sM3xApJFFdT80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:c3:50:44:16:ef:88:46:2e:bf:75:3f:35:2a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Validity
Not Before: Aug 23 13:02:15 2025 GMT
Not After : Aug 24 13:02:15 2025 GMT
Subject: CN=910fb52b9ceba102ee99b9de17d6d02580a9040f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ba:9a:c7:8f:14:a7:ee:1a:f1:18:9c:1b:39:
82:de:18:b8:10:17:15:c8:54:37:4f:c5:8f:6d:02:
1f:04:4f:a0:51:d0:6f:ff:18:f5:30:68:88:81:f4:
aa:66:ea:22:34:34:c9:5b:ee:4e:07:ce:82:cc:d4:
15:85:bd:76:0e:0b:78:2b:46:84:a7:8d:6f:f6:79:
cb:5d:0b:3b:70:d2:15:70:35:53:d5:80:14:50:ca:
52:b8:fa:b5:03:0c:db:06:c6:7c:b1:16:4f:3a:08:
23:96:53:a1:d9:89:ac:5f:18:dc:2f:03:b0:de:61:
7b:d2:56:e6:3c:dd:01:b5:9b:38:a2:5c:8d:49:0d:
b5:18:cb:4f:fc:35:98:35:d1:b3:2e:96:42:ec:28:
44:3e:0d:af:1f:9b:e8:67:39:20:ec:11:f5:39:c0:
b9:0a:39:41:24:d6:a4:ad:23:9d:f4:40:6c:db:69:
63:7b:99:ac:b6:42:50:54:db:97:55:75:74:bf:db:
55:17:94:e2:14:e0:6f:d1:51:2d:4c:de:b8:05:43:
c1:5b:d3:82:33:6d:da:50:6c:d4:74:91:1f:c1:25:
51:96:c3:ba:eb:66:0a:cf:f6:40:9d:e0:44:80:6c:
c8:40:05:af:7f:69:fc:d5:be:de:dc:10:8f:da:f2:
6d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0F:B5:2B:9C:EB:A1:02:EE:99:B9:DE:17:D6:D0:25:80:A9:04:0F
X509v3 Authority Key Identifier:
keyid:FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:29:63:53:3d:23:b9:6a:b3:71:6f:15:7f:69:c6:d7:3e:0e:
76:29:a5:cb:29:3d:5e:2b:ac:8b:58:0b:2b:8e:a9:7c:bc:0f:
6b:88:0b:53:3e:a7:b3:92:c8:b8:50:69:51:b3:53:6c:76:9f:
49:f6:e9:dc:ba:98:6f:b9:a9:1a:1f:c9:99:d3:8a:2d:fa:36:
e6:f6:4b:a7:f0:3b:a7:81:62:fc:d2:4a:32:cb:f0:5e:aa:cf:
6f:90:2a:a1:c4:26:fd:79:bf:b0:8f:c6:7d:bf:78:61:b9:2c:
37:a2:81:df:46:3c:d6:98:98:3e:7b:4b:74:ec:2c:0f:ee:b6:
d6:2f:20:dc:cd:78:cb:81:1b:cb:df:0f:61:57:95:0b:03:ba:
e5:47:fb:96:d1:74:cf:19:d4:d9:90:43:1c:fd:99:1b:79:0c:
81:84:89:85:b5:29:91:a5:77:1a:be:44:d5:00:85:52:c7:7f:
33:a9:ee:f8:34:33:99:03:71:f2:3d:ce:f5:dc:fc:68:a2:7e:
0c:74:cc:4c:23:1b:5b:46:6a:51:16:c2:6b:ca:9c:4e:66:6d:
51:b5:5f:62:b5:e6:4e:37:80:92:f5:2b:b1:4f:90:a7:09:38:
83:ca:51:d1:48:57:1e:fd:fb:47:74:65:ae:87:10:a5:a2:12:
14:c9:2a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:10:41 2025 by rpki-client