Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
File: 1Xx9sE54wiHz3yoq8IK1GNliqPA.mft (raw, json)
Hash identifier: xEAivTM7NaOgVsWiMqia2ZysrufSEpbyEJu6Et3czT0=
Subject key identifier: 88:F4:70:82:CA:34:50:CA:A4:B6:76:FC:E2:1E:A7:FD:07:DB:CC:C8
Authority key identifier: D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
Certificate issuer: /CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Certificate serial: 0197B7EA9137BB98745076D88A5AE349C5EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
Manifest number: 1384
Signing time: Sat 28 Jun 2025 19:01:32 +0000
Manifest this update: Sat 28 Jun 2025 19:01:32 +0000
Manifest next update: Sun 29 Jun 2025 19:01:32 +0000
Files and hashes: 1: 1Xx9sE54wiHz3yoq8IK1GNliqPA.crl (hash: WlmIKzMTdn8aH9atFK9SvlBEJ7RQ+2N53i7jBrkThhU=)
2: AF4umlxpodxfUYcflJsK8xOOPvc.roa (hash: h6ZT1Xj2HoW6T1BM9+3KLrI7XGShfMvSe65xEZ1pN+8=)
3: eKdaY9u7yd9VS291GQM22qgfzCo.roa (hash: LpBEMBev2akTDLzB/P1Zql8JVSF96+zbvpBVIyg+mMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:91:37:bb:98:74:50:76:d8:8a:5a:e3:49:c5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Validity
Not Before: Jun 28 19:01:32 2025 GMT
Not After : Jun 29 19:01:32 2025 GMT
Subject: CN=88f47082ca3450caa4b676fce21ea7fd07dbccc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c7:2a:10:49:cb:6c:18:ac:29:d5:b5:38:d8:
18:cc:77:60:90:c7:b7:59:90:9b:5b:78:7e:69:f6:
a6:c9:0f:2d:52:b7:5c:e3:79:a0:ee:dd:51:43:57:
65:ff:f9:60:50:ef:cc:a3:5a:60:18:66:8d:4a:6a:
75:3a:62:35:29:67:2b:b5:19:2f:0c:48:e2:58:c0:
a1:93:b9:92:54:93:ef:bd:1f:1f:b8:d0:39:eb:c6:
22:4f:c5:d0:ff:cf:ba:1e:65:4f:83:a5:bf:76:2c:
54:3b:cb:31:69:0a:96:38:cc:e2:fb:ff:bd:66:68:
1b:14:58:d7:5d:18:43:eb:af:45:e0:68:d6:0b:ea:
4b:fe:e5:f9:5e:8a:1a:de:e3:af:1a:10:44:ce:70:
52:6f:e4:58:26:b8:1d:88:78:98:3c:64:fd:a5:97:
f9:9e:da:82:8b:47:32:70:c9:48:9d:b8:18:04:92:
de:87:a0:e6:2f:db:bf:46:2d:b3:96:6c:f5:d8:ae:
32:ce:06:96:2a:9d:d3:bf:c2:f9:6d:f4:9a:42:62:
08:c2:07:81:3c:e8:73:72:29:f7:2b:aa:8a:64:c1:
af:66:7e:00:4e:a6:fd:50:30:c7:38:eb:92:d3:c1:
a7:1c:ef:f1:13:e6:5a:c5:33:b3:5b:ac:d8:fb:b9:
7b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F4:70:82:CA:34:50:CA:A4:B6:76:FC:E2:1E:A7:FD:07:DB:CC:C8
X509v3 Authority Key Identifier:
keyid:D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:16:85:dd:f9:d6:c6:cd:06:d7:9b:2d:57:be:e6:96:b5:e6:
f2:9f:9c:81:4c:25:f8:03:08:dd:56:fd:b6:03:c3:aa:55:26:
10:59:7d:9e:e3:15:d2:fe:2f:af:5f:23:3d:69:30:c6:c5:02:
a0:0c:24:24:bb:02:a6:fb:bb:c7:cf:aa:d2:ad:71:11:e2:84:
7a:ce:da:83:90:1f:ac:8c:df:fb:7b:24:68:aa:ff:2c:a4:a3:
ec:77:f1:fb:1a:0c:f8:b1:00:69:11:a0:fa:80:16:15:9b:f1:
cf:bf:25:cf:76:d5:85:38:5b:4e:66:b8:92:54:fe:08:e1:fe:
6e:a7:42:0d:a0:e5:5e:26:ac:0c:bd:ba:dd:b1:52:7a:a0:26:
d5:1a:c0:3e:6d:cc:43:e9:31:30:2b:77:e4:d7:55:60:2e:99:
bd:39:45:97:89:64:3f:fa:f2:03:a9:76:47:32:93:97:56:03:
ee:6a:bc:d2:79:41:fd:77:d8:2c:82:98:4b:f1:54:9f:25:87:
96:aa:23:7a:73:5a:9d:10:aa:de:4f:49:6c:17:80:43:11:cc:
d9:1a:0d:f9:fc:3a:ec:1f:a2:ee:f3:24:8e:1a:be:9d:6e:82:
da:2e:a6:38:f4:68:c0:fc:61:3b:75:fa:c6:de:82:94:77:95:
90:d2:e5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:28 2025 by rpki-client