Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
File: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft (raw, json)
Hash identifier: V8N7d0L3JhoLl32mnaO3Z70uy+g88T+q/ZWYF6AqJMg=
Subject key identifier: EA:4B:2B:1F:48:5C:31:09:A6:06:BB:5A:DD:83:AD:AD:9E:46:BC:95
Authority key identifier: FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
Certificate issuer: /CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Certificate serial: 0197B7B320253264D45D85CEE3674F0030EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
Manifest number: 03AB
Signing time: Sat 28 Jun 2025 18:00:59 +0000
Manifest this update: Sat 28 Jun 2025 18:00:59 +0000
Manifest next update: Sun 29 Jun 2025 18:00:59 +0000
Files and hashes: 1: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl (hash: d261YADoncONpewwnw9curAWWZH6UscO11WOsYDPgjU=)
2: RfQdtLKXYLdrItaAhtareV1d0X8.roa (hash: 2v2M5d2SJj08W++N719Wz/Nxup00xLX8rohfuP7PYPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:20:25:32:64:d4:5d:85:ce:e3:67:4f:00:30:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Validity
Not Before: Jun 28 18:00:59 2025 GMT
Not After : Jun 29 18:00:59 2025 GMT
Subject: CN=ea4b2b1f485c3109a606bb5add83adad9e46bc95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6b:d8:3f:e0:13:43:cb:1e:56:cb:66:1b:01:
42:bf:e5:1b:bc:fc:ba:a7:dc:fe:85:ff:45:b0:51:
30:1a:33:c3:89:8c:55:3e:22:ea:b6:94:08:e5:e2:
22:bd:46:ff:42:38:ac:88:ee:28:04:05:37:ac:5f:
a8:a0:6d:c2:d6:40:02:64:e8:d7:bf:4b:d9:35:bc:
73:51:90:cf:c3:f4:45:26:f7:6f:12:91:05:7d:7d:
6c:fc:e2:4a:0b:6d:ca:6b:24:cd:28:95:98:b5:4a:
87:28:90:64:9a:e0:6f:21:07:a2:25:dd:e9:76:84:
63:f9:93:bd:57:15:fd:85:32:83:ef:e5:3a:10:82:
82:3c:a0:a1:38:c3:b2:e0:96:a7:99:fe:83:4f:f4:
85:dc:aa:a7:01:67:a4:87:f2:72:ce:b1:26:f8:ed:
90:4b:cf:5b:6e:85:47:48:cd:31:dc:55:5b:69:37:
97:79:76:2f:32:de:ca:e1:37:7d:4e:d8:58:22:7e:
76:46:77:d2:85:e7:5a:88:47:d4:39:d6:b6:be:df:
4e:ab:2b:78:57:2e:2d:26:9f:19:69:86:70:4f:dc:
a5:89:70:87:76:77:93:f5:6d:35:f7:2a:51:c2:9e:
ae:ec:09:cd:41:1c:ea:a5:13:b5:7e:fa:ee:4b:f0:
57:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4B:2B:1F:48:5C:31:09:A6:06:BB:5A:DD:83:AD:AD:9E:46:BC:95
X509v3 Authority Key Identifier:
keyid:FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:91:23:5e:b1:5a:09:09:ed:af:b1:58:89:38:22:b2:1c:10:
9b:ce:11:53:55:c2:28:c6:57:2f:19:57:d9:9f:4c:a0:cd:2b:
6c:df:36:74:ab:b2:11:fb:3c:fc:f4:a1:6a:50:90:26:32:50:
14:5a:8a:db:6a:bf:8f:50:d3:ba:d9:80:cf:a4:8b:fd:00:dc:
8d:35:d7:50:b2:d2:5b:7a:66:26:d4:f9:b4:46:06:63:6e:02:
a5:39:cb:45:e5:ac:e3:e9:4d:c6:af:f2:29:2b:cb:21:76:0d:
86:4f:38:ce:42:6b:72:b8:7e:52:d4:0e:95:11:ea:b2:82:65:
33:6c:40:c0:82:33:3b:8c:bd:b2:44:1c:a1:3c:2e:59:0d:fb:
ce:05:c3:d1:de:6d:83:72:ef:93:69:2c:12:9d:c5:4e:0a:22:
40:5f:80:f4:23:4d:1b:b2:1d:1f:18:2f:56:9a:3a:6e:f7:9e:
93:17:da:bd:9d:12:95:86:b4:85:93:83:0d:2b:e7:ff:66:d7:
8c:aa:bc:5c:00:5b:1d:d0:65:62:06:94:d1:63:8b:46:71:a8:
6b:88:c3:82:bc:11:ad:60:52:3b:04:78:b1:e0:21:90:65:cd:
bf:81:57:03:01:82:4f:64:57:bc:fe:dc:cc:e7:e7:c6:41:06:
91:40:b7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:56:34 2025 by rpki-client