Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
File: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft (raw, json)
Hash identifier: J4SN14zscp23/yxaZxQ2KVrzAcJA8SF03V7kIVaEKAc=
Subject key identifier: 1A:29:52:AA:76:D5:F0:72:CC:67:C7:75:EC:EE:75:24:B8:0C:E6:C8
Authority key identifier: F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79
Certificate issuer: /CN=f973209625e2a03ddeecf91bb480548e5729d479
Certificate serial: 0198D4E0EC80083BEC1BF0984FB856F8F8B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 03:02:46 +0000
Manifest this update: Sat 23 Aug 2025 03:02:46 +0000
Manifest next update: Sun 24 Aug 2025 03:02:46 +0000
Files and hashes: 1: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl (hash: DJjaKa44gc/v07R8uOZweSsPQcwKBBAsPS3FPFhr7MU=)
2: l3JzatKnSb-qTPQjQ9VOzx8MD7g.roa (hash: 40hMQclA6AyvTYjGgbc8RhGg1fGmdxgMO6uT9Avjx2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:ec:80:08:3b:ec:1b:f0:98:4f:b8:56:f8:f8:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f973209625e2a03ddeecf91bb480548e5729d479
Validity
Not Before: Aug 23 03:02:46 2025 GMT
Not After : Aug 24 03:02:46 2025 GMT
Subject: CN=1a2952aa76d5f072cc67c775ecee7524b80ce6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:db:69:30:2d:24:c0:44:8a:f6:d7:9b:4a:9c:
b5:eb:cc:48:66:0c:44:08:8d:e2:2c:02:51:df:de:
22:d9:57:23:3b:78:b9:1f:d6:4a:fe:7b:e4:d8:09:
a3:2a:30:20:1a:48:2f:04:5b:75:72:b6:5b:ff:6f:
d8:45:35:a8:00:d2:23:3c:01:91:95:95:9f:2c:f8:
39:8c:7b:80:82:52:c7:02:8f:95:9c:80:34:2e:d5:
2e:12:51:45:f8:0c:a9:c3:fa:19:76:63:7f:8d:cc:
13:11:83:0e:46:d7:1f:da:03:73:a3:9c:8c:45:59:
55:e6:68:e6:77:6d:02:7c:4f:78:09:72:2f:3b:f0:
3c:76:b4:91:c2:96:8a:fc:93:06:6b:43:fb:41:fe:
28:2f:c7:09:99:df:08:2e:24:0e:c0:9f:fb:e1:57:
7b:19:c5:13:d0:61:38:c7:19:c3:3e:25:e1:ef:39:
6a:81:72:3c:cd:84:0a:9b:e3:e4:a8:3d:0e:3a:23:
d1:b1:2c:ca:cb:4d:5c:43:64:d6:95:18:44:c8:28:
67:3d:93:4d:09:a1:a1:09:8f:7f:35:96:81:62:28:
d0:0c:58:5d:6e:be:05:10:66:ee:a1:27:cd:64:ae:
82:78:3f:10:56:60:f6:ba:96:2e:56:5b:16:27:10:
4a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:29:52:AA:76:D5:F0:72:CC:67:C7:75:EC:EE:75:24:B8:0C:E6:C8
X509v3 Authority Key Identifier:
keyid:F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e1:6c:14:3d:bf:28:ea:5e:fb:7f:0f:33:b1:79:b3:e2:2c:
2c:c0:55:41:38:cd:50:b9:b0:11:c8:d8:0e:fe:c0:3e:b6:bd:
bb:1b:f8:f8:39:da:8a:b3:41:1d:a1:46:1c:21:c5:b8:10:63:
d2:ef:1e:90:da:86:71:f7:d2:1f:4b:d7:51:dc:9a:6c:87:33:
e5:fe:b2:23:92:48:ea:d4:b3:ce:f2:5d:d7:78:1b:dd:90:fe:
98:00:f8:8c:bd:f3:f1:10:e4:de:8f:7f:d1:8a:a5:e9:d0:a3:
07:e7:db:dc:81:88:cc:c5:64:01:7a:29:2a:88:bb:a3:dc:60:
21:48:33:b8:a4:e2:93:24:9b:57:31:9e:df:de:97:24:13:1d:
dd:c1:0b:0c:17:55:6d:90:6d:ec:93:75:88:54:3e:4d:c3:7e:
2a:e6:28:b9:9f:bd:52:dd:ea:f0:68:4f:ad:ec:03:18:2c:9b:
c0:4a:b2:e4:29:ff:d4:11:97:eb:db:89:91:30:e3:2d:dc:7a:
4f:c9:fa:e9:52:03:44:40:f2:53:3b:65:02:49:46:3c:40:ea:
11:f9:0e:36:15:4e:59:a8:40:a7:7c:a5:81:6c:d1:3e:bc:38:
07:23:e6:6f:6a:96:0b:1d:7e:4c:16:d1:e2:bc:2e:5c:04:33:
8a:5e:d8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:13:24 2025 by rpki-client