Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
File: 1-XQtd30IJBai2EfUADozG1DiQj4.mft (raw, json)
Hash identifier: 8tXY6al1wVGbTkNPheG4Trx4m1jbltITC3kWkNjsQJs=
Subject key identifier: C0:6F:DE:E4:E4:1C:D8:DA:BE:3E:B1:B5:CC:21:E4:EA:96:B5:41:3C
Authority key identifier: F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
Certificate issuer: /CN=f9742d777d082416a2d847d4003a331b50e2423e
Certificate serial: 0197B77C7D7BE5EC2F6C3C1CCE7A491811D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
Manifest number: 1574
Signing time: Sat 28 Jun 2025 17:01:18 +0000
Manifest this update: Sat 28 Jun 2025 17:01:18 +0000
Manifest next update: Sun 29 Jun 2025 17:01:18 +0000
Files and hashes: 1: 1-XQtd30IJBai2EfUADozG1DiQj4.crl (hash: pzOSwakzf4aQy5nN+Z2Sf5eZX3NrnDX7ZXZ6lLYC88Q=)
2: 1-kqFnbhB2LCPJU3KtgP3OhHNEbM.roa (hash: sYai5O0I+e4s9fEjeNx81CRmECPgFmQDJeWhDrbRAeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:7d:7b:e5:ec:2f:6c:3c:1c:ce:7a:49:18:11:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9742d777d082416a2d847d4003a331b50e2423e
Validity
Not Before: Jun 28 17:01:18 2025 GMT
Not After : Jun 29 17:01:18 2025 GMT
Subject: CN=c06fdee4e41cd8dabe3eb1b5cc21e4ea96b5413c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:61:bc:03:b0:fe:31:32:60:89:fe:be:61:8a:
2a:66:fa:dd:e3:c3:fd:94:ea:eb:36:80:b0:53:a6:
ce:90:95:dc:a1:27:ce:2f:51:e7:79:34:46:7a:b0:
61:05:af:09:fc:d0:81:97:13:b9:05:1c:52:92:ca:
78:cc:42:79:8f:43:74:54:30:3e:4f:27:2a:05:b3:
bc:ca:23:5c:93:2d:d2:f8:70:1c:59:7a:56:40:29:
47:7b:14:8d:15:6c:69:bf:7f:f5:ce:48:76:55:4e:
c9:52:f4:ee:79:9c:55:ca:f7:38:18:dd:84:0e:fc:
bb:c0:5d:39:cc:da:fd:b9:9a:3a:11:92:34:59:c3:
c1:33:82:80:17:83:57:ce:e1:56:43:b1:e5:0f:79:
e3:6e:a6:57:ba:32:09:66:0e:e9:9b:34:cc:bc:c0:
41:37:d3:9f:fa:8d:fc:02:21:4a:4e:2f:d2:7c:eb:
66:91:05:ce:14:09:2b:6d:b8:19:d3:c5:d1:83:f7:
ce:1e:f1:01:ad:b0:e8:af:1f:1e:ae:4d:d5:7c:3a:
4a:e2:06:50:84:54:13:e8:d2:e3:72:24:08:84:9a:
fa:48:10:c2:58:6c:40:9a:2c:11:e7:ff:a6:75:de:
32:51:b2:c2:a0:1d:40:19:13:5c:af:4c:a6:69:71:
1e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6F:DE:E4:E4:1C:D8:DA:BE:3E:B1:B5:CC:21:E4:EA:96:B5:41:3C
X509v3 Authority Key Identifier:
keyid:F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b1:f8:9d:96:9f:ac:9a:e2:fe:b7:16:d6:5c:06:9e:3c:f8:
17:e4:49:07:57:76:bc:8f:00:e4:78:ef:e1:09:3d:82:52:22:
48:78:37:dd:1d:d7:68:34:a8:c8:7e:75:b3:db:3e:23:d7:23:
83:56:94:43:96:be:b2:e1:75:86:ae:08:66:e1:e7:87:03:cc:
2c:f4:17:e7:93:0a:28:41:0a:18:89:f2:52:9a:b6:55:58:1b:
15:9c:bd:94:7e:62:52:ae:98:28:4e:ea:18:4d:be:ee:34:8a:
5d:ed:08:5b:94:c2:fa:71:b6:fc:39:b7:e3:fd:38:42:0d:ca:
64:8e:cf:4c:46:55:3a:31:ad:5e:9b:88:87:e6:89:a8:8c:45:
01:f2:4f:f2:1e:58:c8:6d:96:02:75:34:68:aa:68:7e:d8:db:
e9:3f:01:bf:bb:35:2f:b4:bf:c0:d5:5f:4a:8d:57:4d:1d:3f:
bf:79:b4:53:32:1f:9e:ef:59:76:84:c0:85:dd:a1:9f:44:b0:
46:8d:89:bd:3f:a8:38:c9:74:6d:f0:da:5f:54:36:2b:bf:8b:
e2:2a:82:b6:ed:cd:6c:e8:72:7b:e2:05:15:41:5d:e7:88:c5:
2f:c6:b9:ba:52:16:a3:1a:72:dc:2f:5b:5e:90:0f:79:c1:72:
d4:65:14:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:33:13 2025 by rpki-client