Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
File: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft (raw, json)
Hash identifier: 3Crypi0VyJ39Uz4Y2hHz72mvAUPU+/SzIHISgDCxbew=
Subject key identifier: 25:EF:E1:4A:7E:06:6F:77:FD:78:BA:4A:4D:62:FE:B9:05:84:8B:94
Authority key identifier: F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79
Certificate issuer: /CN=f973209625e2a03ddeecf91bb480548e5729d479
Certificate serial: 0197B70EA823BDB1C8B2EE9013B20CA3ABDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 15:01:20 +0000
Manifest this update: Sat 28 Jun 2025 15:01:20 +0000
Manifest next update: Sun 29 Jun 2025 15:01:20 +0000
Files and hashes: 1: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl (hash: kSnkzqBRClUQpOUppcN7p0b8pBuM/IgGa05ZD+e/VWU=)
2: l3JzatKnSb-qTPQjQ9VOzx8MD7g.roa (hash: 40hMQclA6AyvTYjGgbc8RhGg1fGmdxgMO6uT9Avjx2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:a8:23:bd:b1:c8:b2:ee:90:13:b2:0c:a3:ab:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f973209625e2a03ddeecf91bb480548e5729d479
Validity
Not Before: Jun 28 15:01:20 2025 GMT
Not After : Jun 29 15:01:20 2025 GMT
Subject: CN=25efe14a7e066f77fd78ba4a4d62feb905848b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8a:4d:1a:4f:e6:de:08:04:5f:6c:c9:b4:cf:
65:bd:0f:76:0c:da:6c:a8:7a:03:0b:f2:fd:51:8d:
fc:69:6f:4e:c0:f9:1c:ba:f1:6a:2e:8b:f9:7c:17:
e6:f2:85:64:bc:76:86:de:59:bc:4c:6e:a2:37:af:
b4:21:f6:30:cc:e9:ed:19:54:53:ed:33:80:83:c5:
94:d2:62:ca:99:aa:74:55:b0:ed:f0:b3:49:14:36:
65:7e:05:29:3d:3b:8a:70:a0:05:5e:5c:2d:be:14:
ce:c9:dc:c2:00:6b:2c:fd:04:64:b4:ac:91:76:56:
da:1d:a3:42:4b:9d:34:4b:9e:8d:77:9e:94:ed:59:
ff:d7:bc:0b:8a:ac:98:b2:53:2f:b3:6a:ec:26:02:
6e:85:77:59:a7:be:95:b6:a8:a9:1f:9a:ea:61:57:
bc:4d:03:5d:9e:77:86:09:bc:04:53:32:1b:3c:10:
2c:da:0a:63:00:45:3e:0b:b4:f7:f1:1d:0b:b0:c8:
72:56:4d:a6:5f:ee:84:8b:7b:81:5c:ab:69:f3:da:
66:a6:d4:88:ef:d1:a0:2f:e7:04:96:db:5f:a3:24:
4c:d4:81:05:3d:de:d7:6c:f0:b5:63:12:6f:89:b0:
6c:94:e3:5a:fb:57:7b:4f:b3:ad:a4:04:fb:41:8c:
b2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:EF:E1:4A:7E:06:6F:77:FD:78:BA:4A:4D:62:FE:B9:05:84:8B:94
X509v3 Authority Key Identifier:
keyid:F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:30:05:0d:0b:ea:2c:6f:97:5a:de:80:7a:1a:bc:79:05:75:
41:09:88:ee:24:d7:84:e4:54:4b:a1:58:17:b8:60:a3:0d:86:
17:5a:dd:4d:3f:95:ee:46:5c:62:fb:56:26:95:70:35:ee:b0:
12:87:bf:ff:6c:72:77:81:ea:bf:de:5e:ef:df:40:cf:76:17:
ff:6d:ae:39:b2:86:22:77:65:f4:7b:26:66:5b:7a:dc:23:95:
90:6e:5b:db:5a:06:29:35:74:ce:a3:fd:ff:89:92:a7:a6:8d:
b8:b4:e7:12:c1:dd:82:9d:f0:b9:3a:4b:a0:ca:00:af:fd:31:
cd:f0:f6:41:fa:16:dd:b4:de:22:de:f3:2f:3f:69:9e:2f:7b:
da:ca:14:ba:1b:3c:cf:96:3f:51:cd:e6:7e:e8:9e:db:1d:cd:
3a:a5:f6:8e:bd:02:70:55:23:53:21:6a:32:bc:05:8d:6e:18:
80:a5:ce:12:a6:fe:0f:55:fa:2d:43:14:7f:83:d0:05:55:7c:
36:d7:cc:3e:26:d0:03:e7:d7:10:66:ec:83:d3:51:f2:52:f3:
13:63:91:5e:8d:4f:68:5e:02:92:e4:df:c0:6c:d9:f1:ef:c3:
57:d7:89:92:61:b0:66:92:f0:5a:36:1c:e1:ac:5c:a3:2f:8c:
cc:3e:d0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:31 2025 by rpki-client