Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
File: 1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft (raw, json)
Hash identifier: skBU+fo+1jn97wTK0TkFyztwf0/hobUbVJb8gCR9JqA=
Subject key identifier: 97:74:EA:A9:E9:67:01:E5:C1:1F:D0:DA:86:F9:DF:D1:99:1E:30:6A
Authority key identifier: D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
Certificate issuer: /CN=d716209d7def98a2bb34977f65009b3520da256e
Certificate serial: 0198D6982CAC3A11AEC72E6C896D998ABD4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
Manifest number: 0439
Signing time: Sat 23 Aug 2025 11:02:33 +0000
Manifest this update: Sat 23 Aug 2025 11:02:33 +0000
Manifest next update: Sun 24 Aug 2025 11:02:33 +0000
Files and hashes: 1: 1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl (hash: GcoJjK8s0EAoBma6v4EvuEAUz+GF2KNHvqRhRip5EFY=)
2: OWBphSnGzM3NfjUoWcPjDVRSYgc.roa (hash: Z7ei4v1I8GPTdYYpZ1qHi9JiBDA34PMAtoRsAnkH2B0=)
3: UjWNhRVDS1dQtyrLqu8XE8cVl2c.roa (hash: VP+asIeQeiE6n/s3d0KCeiS8nBmXkURRsgcwQHE149Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:2c:ac:3a:11:ae:c7:2e:6c:89:6d:99:8a:bd:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d716209d7def98a2bb34977f65009b3520da256e
Validity
Not Before: Aug 23 11:02:33 2025 GMT
Not After : Aug 24 11:02:33 2025 GMT
Subject: CN=9774eaa9e96701e5c11fd0da86f9dfd1991e306a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:77:c8:96:f5:9b:fd:29:5d:3c:95:f2:b5:5a:
b3:54:ae:0a:29:3a:cf:80:7c:67:e2:bd:51:b1:47:
39:76:9e:c1:08:a4:27:6a:63:87:be:2b:4b:13:86:
b4:ce:3f:53:d8:28:0e:de:6d:a3:69:aa:a2:30:2f:
c2:c8:3d:f3:8b:6a:41:17:e6:86:8a:eb:3b:6a:83:
57:39:9f:eb:3d:62:70:75:ab:c1:97:ff:a7:87:9d:
8e:4a:fe:5b:1a:d8:fe:74:47:e5:a2:2b:45:79:99:
2c:0c:4d:10:55:d2:aa:46:fb:09:6f:b5:eb:5a:d0:
1f:95:8c:99:81:4b:6b:4b:f9:f3:c2:a0:14:6f:c5:
d0:2e:61:9a:8d:79:ca:f5:5d:30:19:95:c2:fb:48:
ab:7c:4c:5a:77:ce:a8:66:e2:69:59:8b:c3:90:85:
f8:be:fc:43:da:1e:91:9f:73:ea:0e:2b:a3:49:7e:
10:62:19:b6:66:50:91:64:8a:49:03:0e:6f:4f:e1:
3b:ea:9f:56:d3:22:20:a9:33:41:a3:ca:d8:97:4a:
09:f5:df:bc:6f:d7:f1:7b:71:64:2c:8e:8e:ad:b4:
14:78:9f:08:d7:4f:64:8d:b8:6d:5d:b2:ab:10:94:
fe:b5:ac:d5:1c:0b:01:ed:3d:d1:61:3f:26:84:52:
ce:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:74:EA:A9:E9:67:01:E5:C1:1F:D0:DA:86:F9:DF:D1:99:1E:30:6A
X509v3 Authority Key Identifier:
keyid:D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ab:b2:ef:bf:31:f1:02:82:0f:94:6a:0d:e9:d1:9c:d3:5e:
4f:61:1c:a5:43:87:b9:78:e9:74:12:bf:60:74:4e:db:f1:9a:
a1:dc:5a:ad:dc:22:95:7e:5c:9a:79:5b:7c:c9:22:78:48:bf:
1d:c2:64:6d:4b:52:f4:d8:7a:ea:52:86:60:fc:a6:08:92:ba:
d9:df:d2:80:cd:c3:81:02:bb:2c:42:c6:79:07:f3:55:92:e8:
ab:cd:cb:63:6c:e5:51:41:65:de:ed:19:c0:d9:2f:87:41:6b:
73:5d:56:88:f1:01:25:cd:e8:1c:77:e5:aa:e9:33:0f:af:e8:
24:0d:fe:2e:b4:35:1f:e2:b7:e1:d4:3e:a0:ff:22:f2:c0:f7:
80:c6:ff:db:b4:0d:84:5e:c4:06:cf:d5:69:8e:de:d0:3f:d2:
17:db:91:b7:a9:9d:75:87:4c:9a:27:e1:90:cc:e7:f8:7b:b0:
ab:f7:c3:64:cc:ad:55:92:ba:7b:08:bc:21:9b:b2:92:b9:42:
e2:74:d4:be:e5:05:f9:10:27:db:b0:c4:b6:7f:eb:63:3b:b5:
7e:77:70:4d:ec:a7:47:6d:af:38:b6:2d:58:14:b0:9a:01:ba:
b1:93:b0:db:bd:cc:9a:26:ca:bf:90:7d:a9:25:ad:1d:d2:8d:
11:92:26:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:29:01 2025 by rpki-client