Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
File: 1-xqBDjqxlktE7LN3g0CyZtvaESY.mft (raw, json)
Hash identifier: HWcYPwijqyuTJl8n2FhRjik9vjjlguTszQaXQ9Kn7V4=
Subject key identifier: F8:C8:31:AA:E4:B2:07:FC:F7:E7:93:FB:02:F9:60:13:D6:76:47:5F
Authority key identifier: FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
Certificate issuer: /CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Certificate serial: 0197B7453C60AB700C339CEAEC69753D7F66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 16:00:57 +0000
Manifest this update: Sat 28 Jun 2025 16:00:57 +0000
Manifest next update: Sun 29 Jun 2025 16:00:57 +0000
Files and hashes: 1: 1-xqBDjqxlktE7LN3g0CyZtvaESY.crl (hash: mpQ62Amm7+GqqPtYXbgFiNj3nzmFMg0+vizQjA/KNpY=)
2: VsFuiofejDNus4q-XJuiSHwgNg0.roa (hash: 5/WoOYXAxKPBmuAPhmhS3e5eFCmzTCokgMSG9illRVc=)
3: dERFn8-Y3CpN0nk9-2z0qZhw3lA.roa (hash: MMTvQ8GZkYazTAxyoZRT7syb2AL1b5sM3xApJFFdT80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:3c:60:ab:70:0c:33:9c:ea:ec:69:75:3d:7f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Validity
Not Before: Jun 28 16:00:57 2025 GMT
Not After : Jun 29 16:00:57 2025 GMT
Subject: CN=f8c831aae4b207fcf7e793fb02f96013d676475f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9a:6c:b8:08:b4:c3:2e:c8:2e:60:8e:1a:a0:
b4:4f:89:ac:b1:c1:cc:c4:cc:c7:53:57:5f:d2:21:
d7:6c:33:c3:f3:55:83:e6:93:24:c1:d5:5d:69:4f:
3b:bf:32:b5:91:67:b6:2c:20:67:51:02:90:10:cc:
b0:5a:df:b8:96:12:1a:20:97:55:80:55:37:13:77:
fa:4b:55:63:0c:7a:df:9d:50:86:61:1f:8f:3a:7c:
ab:4e:fa:b1:6b:c6:2a:b8:1e:ef:8b:a7:42:a9:b1:
8d:fd:2b:e5:d1:ef:f1:e3:09:0d:71:77:1c:6e:22:
0e:ca:08:28:ba:28:1e:c0:ee:fe:b5:42:82:aa:3e:
3c:1a:05:5a:8d:99:f1:01:4e:3a:95:8b:27:ff:f5:
45:81:00:1b:eb:d5:20:be:7a:d4:66:5a:dd:33:91:
99:a4:56:f3:4f:85:b8:a7:7e:3e:1e:86:33:11:86:
af:23:45:2c:3e:16:95:43:8f:71:7c:36:0f:ba:b2:
b5:b7:8e:f5:11:03:cf:8e:3b:b8:26:8a:cf:34:84:
c4:4a:64:d8:98:d6:5c:76:8e:f1:f3:47:27:e6:89:
04:53:42:ec:96:79:ac:79:42:66:9b:87:10:82:aa:
24:85:78:6b:c3:1c:4e:67:68:46:76:f7:f1:a1:5f:
a0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C8:31:AA:E4:B2:07:FC:F7:E7:93:FB:02:F9:60:13:D6:76:47:5F
X509v3 Authority Key Identifier:
keyid:FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:3e:2a:29:83:16:bf:ce:51:6d:6a:3b:0d:27:b2:04:e2:12:
ae:2d:b6:52:34:3b:4f:fc:c9:c3:c9:72:21:5d:2b:94:50:2a:
ad:30:da:93:fa:7c:d2:53:79:84:62:d6:05:90:da:91:05:93:
02:9b:6f:7c:71:a6:0a:2f:01:c4:49:0c:37:45:e9:bc:fa:2b:
7f:f4:a7:11:d1:3a:77:d8:24:9c:fa:5a:df:08:97:59:c5:ae:
b8:5c:88:67:50:eb:5e:8b:23:63:10:7a:be:ac:2b:49:66:a8:
68:b5:b2:0c:b3:93:33:8c:08:01:4d:64:cc:4d:b4:f3:6f:9a:
35:fb:d3:fb:37:b7:99:c9:7c:0b:09:de:83:2e:dc:55:5d:19:
6e:f2:40:cb:a4:a2:10:4a:3d:c6:c3:96:c9:a9:e8:4e:9a:1b:
03:c0:25:7a:04:26:a4:92:45:de:64:6a:6f:d3:42:6e:da:f2:
45:3f:d9:41:ca:c8:47:95:eb:34:e4:7c:79:80:22:04:b7:e8:
f5:c0:80:eb:0c:f0:b9:99:a2:b9:da:26:5c:4d:d6:a4:4a:6e:
c5:cb:5c:b1:1d:20:6a:6e:1c:c2:43:13:07:09:49:56:e8:70:
52:89:0c:8c:89:45:86:8f:f9:30:ec:67:31:93:b8:a0:33:ca:
15:b9:c5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:30:09 2025 by rpki-client