Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
File: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft (raw, json)
Hash identifier: PpN/d8fM8pUI41+Ec7D2Qbj/4ny5PC9b6pU+r1dAHNg=
Subject key identifier: C9:9A:7E:22:7E:57:49:33:D9:91:6A:F6:CC:54:E7:67:32:72:A0:42
Authority key identifier: D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
Certificate issuer: /CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Certificate serial: 0198D84F9516B33ECC6C337DED7CB1596F2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
Manifest number: 0B7B
Signing time: Sat 23 Aug 2025 19:02:30 +0000
Manifest this update: Sat 23 Aug 2025 19:02:30 +0000
Manifest next update: Sun 24 Aug 2025 19:02:30 +0000
Files and hashes: 1: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl (hash: MpfTc+5QEDjKM5B0YNZ0sMjAUhgJ0LnZSP/DSyRTugA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:95:16:b3:3e:cc:6c:33:7d:ed:7c:b1:59:6f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Validity
Not Before: Aug 23 19:02:30 2025 GMT
Not After : Aug 24 19:02:30 2025 GMT
Subject: CN=c99a7e227e574933d9916af6cc54e7673272a042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f0:40:ba:57:65:ad:26:b5:0d:11:18:fb:24:
2c:ea:3c:4b:23:ce:39:d5:fe:ec:93:48:d6:f3:95:
6a:d4:de:6f:c0:9a:47:36:ca:3f:c8:40:4a:ba:7b:
48:b4:88:88:8f:19:1b:bb:b0:69:7e:59:dc:6e:53:
ce:48:ea:72:c3:d9:4b:51:c1:ed:89:da:66:1b:bb:
96:0f:87:8f:fa:64:d8:fc:b6:c1:34:e4:ae:a7:8b:
71:c8:75:77:5b:bc:74:ac:67:16:05:50:2b:cf:8a:
39:98:bf:6a:01:0d:dd:c7:9b:ab:98:8b:48:72:89:
cd:28:b3:eb:5a:e3:a2:e5:20:6d:24:37:0f:97:b0:
30:ea:a4:2e:93:ed:40:ca:99:d6:de:dd:04:6d:33:
5c:70:03:4a:89:e7:e9:9a:7c:d8:2b:c4:2b:87:0c:
29:f2:29:af:61:ad:92:0c:b8:cb:bd:ac:d5:a5:8c:
eb:3d:05:df:ee:1c:f0:54:a3:78:ac:be:20:d8:a0:
b6:64:33:9c:87:92:f0:0c:42:72:06:c4:74:5c:d5:
8d:48:9d:17:27:72:20:de:03:35:45:e0:93:8a:62:
e2:54:74:a1:42:ee:15:c4:5c:be:9d:5f:51:bc:0c:
2d:4a:6c:51:68:03:e8:03:86:03:7a:ff:cc:66:bb:
2c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9A:7E:22:7E:57:49:33:D9:91:6A:F6:CC:54:E7:67:32:72:A0:42
X509v3 Authority Key Identifier:
keyid:D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:1d:95:19:8f:1a:26:40:51:72:c9:59:fb:f1:a2:da:6b:0f:
ed:bf:70:cd:14:6a:8c:e2:9f:71:14:11:85:e1:bc:48:36:26:
3c:6e:f9:bd:ea:94:f5:25:db:01:86:bb:6d:c2:20:45:d0:3e:
a8:fd:d4:c2:51:c3:e0:5c:31:51:11:10:14:65:8f:c6:98:cf:
24:d0:c3:57:94:75:d0:7e:db:68:ce:f4:8e:e7:44:b9:ba:bb:
27:25:2f:cf:69:5a:bb:5c:5c:e9:dc:ce:28:05:ae:31:78:84:
6c:6f:2a:cc:2d:56:1f:c5:d5:e0:55:ba:02:f0:79:ec:bd:df:
ce:f8:87:3f:a3:54:3d:07:ce:d4:4f:3d:20:64:35:02:1d:59:
fd:db:2a:b7:bd:87:6d:31:e9:65:37:73:d6:a3:41:dc:40:a7:
05:77:78:56:61:75:82:9c:3b:ae:5f:e0:f9:0d:75:ea:c5:f4:
62:27:4c:31:de:75:2a:3f:44:0c:a3:87:ab:9b:88:92:6f:40:
e3:36:92:74:b4:ef:c7:5c:50:1b:a2:7f:e5:07:81:09:3c:cb:
3d:1a:fe:bc:9c:c9:b1:8d:86:1d:87:6e:36:94:6c:18:eb:1b:
a7:30:b6:43:e5:7a:d1:19:76:5b:6a:67:d8:83:32:76:d8:c2:
49:66:13:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:10:54 2025 by rpki-client