Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
File: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft (raw, json)
Hash identifier: QYUBQOUB1WBgDsMrV6GehtZEFRzf4p9SKfqbSfaK4gI=
Subject key identifier: 89:30:AA:9C:C0:B3:6D:2A:57:E4:CD:9A:3C:EC:04:A3:AE:71:1C:5C
Authority key identifier: FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
Certificate issuer: /CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Certificate serial: 0199FCFD383B4630B3657055BE924DABD641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
Manifest number: 04D8
Signing time: Sun 19 Oct 2025 15:01:17 +0000
Manifest this update: Sun 19 Oct 2025 15:01:17 +0000
Manifest next update: Mon 20 Oct 2025 15:01:17 +0000
Files and hashes: 1: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl (hash: oRZYjRvZas3MIZpWy2otXBZHM4RlEa6Uqqr5AZb2/9U=)
2: RfQdtLKXYLdrItaAhtareV1d0X8.roa (hash: 2v2M5d2SJj08W++N719Wz/Nxup00xLX8rohfuP7PYPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:38:3b:46:30:b3:65:70:55:be:92:4d:ab:d6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Validity
Not Before: Oct 19 15:01:17 2025 GMT
Not After : Oct 20 15:01:17 2025 GMT
Subject: CN=8930aa9cc0b36d2a57e4cd9a3cec04a3ae711c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8e:1a:20:75:e3:f6:26:ba:a0:35:c8:24:96:
d6:27:91:9e:fa:1c:99:02:2d:e0:f0:54:0e:eb:98:
37:1e:ba:fc:5b:d6:f7:e5:96:e2:92:b7:e0:35:00:
8d:ed:93:9a:b4:73:fc:7e:fc:76:04:d3:97:77:1e:
59:41:1a:11:90:cc:bd:29:fc:97:e7:ed:15:e7:d8:
19:2f:0c:fc:16:20:36:7d:d2:9e:d3:7a:6a:e6:21:
9c:4c:59:ed:56:32:a9:52:a9:cc:87:dd:86:1c:6e:
f4:01:8c:eb:68:8f:83:34:65:e9:1a:02:98:50:d7:
a6:69:8f:33:3e:b8:16:5a:f5:d6:22:24:24:85:ec:
c2:d4:f9:4e:d2:b3:3a:8b:73:c9:2c:b7:40:40:b0:
8f:12:8f:b3:01:8d:38:41:27:93:a6:0e:7c:59:b8:
f9:3a:67:1a:fb:f7:7b:f4:50:fe:c1:8a:df:d7:91:
59:1f:01:a6:62:cb:cf:dd:dd:e8:b1:a2:81:37:c1:
f0:0a:e5:c2:8b:14:44:7a:bf:76:06:c5:9d:8d:78:
e9:79:83:9c:0d:20:94:24:59:d8:4c:bd:21:d0:f6:
84:f4:d0:c9:2a:63:b0:82:22:33:f6:98:71:43:c5:
81:fd:8a:44:86:62:dc:fb:70:89:41:1c:f9:4a:14:
7c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:30:AA:9C:C0:B3:6D:2A:57:E4:CD:9A:3C:EC:04:A3:AE:71:1C:5C
X509v3 Authority Key Identifier:
keyid:FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:01:23:9d:7f:fd:da:6a:bb:ff:b9:4f:90:55:a3:ce:c2:80:
8a:5f:a2:81:5b:e3:8a:c1:df:2e:3b:4e:7c:7a:c2:5e:5c:3c:
6f:c3:c4:e6:df:11:ee:d1:30:1d:37:a2:8b:7b:70:dc:0e:d5:
3f:92:fe:e6:a8:90:a4:fc:17:7d:83:2c:a0:47:65:1a:12:4e:
bb:da:3f:74:4a:f3:6d:cb:b8:f5:5c:bb:72:4b:19:b6:60:77:
9f:55:3b:5f:91:6c:5c:f3:a1:0c:4e:7c:d8:01:49:b2:47:b1:
03:c1:bd:38:01:15:71:4a:df:1d:e1:70:f0:19:ae:ec:1f:da:
de:09:43:df:11:05:d9:73:7c:87:80:22:eb:27:54:e7:ff:da:
1b:99:4f:ff:cc:eb:a4:27:22:03:ae:09:d6:6e:8e:7e:61:f8:
14:b4:00:be:f5:5b:35:73:6d:ac:42:e5:1f:31:44:09:cb:9e:
33:ac:a0:a0:43:fd:f7:8b:78:d0:d0:38:5f:10:78:a9:e3:68:
cc:c9:77:e0:9e:2b:cf:9f:3d:64:fd:b7:d9:c9:b1:61:4b:89:
d2:c2:56:d4:80:e5:42:d7:2b:f5:b0:97:83:5f:0b:46:0f:85:
fe:80:54:13:c7:fe:22:ee:ea:6e:91:d4:55:e0:42:46:2d:48:
1f:03:89:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:37 2025 by rpki-client