Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
File: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft (raw, json)
Hash identifier: YqJEdG6O71g5LNLj+d3sEjSN26iDRjkaf0aaBFgtMSM=
Subject key identifier: 8B:03:0D:79:A7:28:08:39:ED:53:93:59:FF:98:23:EC:1F:A5:D8:B5
Authority key identifier: F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
Certificate issuer: /CN=f970877985b0c5cf69167c91e837424c47d9a425
Certificate serial: 0197B88F160A4DF1EE61EDAAE682E2A39FC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
Manifest number: 0ABF
Signing time: Sat 28 Jun 2025 22:01:14 +0000
Manifest this update: Sat 28 Jun 2025 22:01:14 +0000
Manifest next update: Sun 29 Jun 2025 22:01:14 +0000
Files and hashes: 1: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl (hash: tL+mNid+WmynnUc3N+uxKiuQNOOg6V9MF87brFqfTRY=)
2: dtRhkrrPSJQXLxdge4ROTUVkWDI.roa (hash: LG59mLDEL6OnHYs5spoH7ylFHPQpE2H4qHB7zS4ODlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:16:0a:4d:f1:ee:61:ed:aa:e6:82:e2:a3:9f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f970877985b0c5cf69167c91e837424c47d9a425
Validity
Not Before: Jun 28 22:01:14 2025 GMT
Not After : Jun 29 22:01:14 2025 GMT
Subject: CN=8b030d79a7280839ed539359ff9823ec1fa5d8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:25:5e:f6:9a:34:45:67:02:cb:64:a1:e0:f1:
0b:d8:b6:6b:b6:33:c4:30:fc:1a:45:f8:97:40:ee:
6a:3e:d4:d1:0a:2f:f7:b8:24:5a:21:90:3e:b5:b5:
90:62:a2:b5:18:ef:ca:ad:8c:df:8d:f7:9e:17:48:
70:24:86:c1:8e:90:fa:0c:5b:ba:24:3f:ee:2e:23:
63:a9:3a:1b:54:81:df:ac:54:ee:36:1a:d0:de:14:
23:4e:a2:d5:c5:be:da:f7:ca:71:b5:bb:d5:93:76:
f0:a0:e8:bb:af:72:66:98:17:90:41:c2:0e:01:d2:
e2:b2:39:d8:0d:5e:70:90:a6:cc:f0:de:be:5f:64:
3b:9b:14:76:f9:41:79:aa:da:f6:28:b3:7b:b5:74:
95:6a:d1:56:cc:21:f8:57:b9:1f:8d:7f:cb:f0:d0:
86:53:9d:6d:33:e2:f3:4e:25:32:0a:ea:15:3d:42:
55:42:f6:cc:a1:fe:ee:f9:f7:1d:bc:e9:87:22:39:
37:91:cd:7a:ca:0e:ca:e4:2a:00:31:20:7c:14:53:
8d:36:12:ac:a5:c3:a1:58:1f:de:d2:2c:02:6c:27:
92:3e:a1:d0:26:11:92:7f:f7:ca:7a:fe:f5:1d:ff:
73:c6:ec:45:72:63:a7:aa:df:34:88:8f:c1:d9:f9:
a4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:03:0D:79:A7:28:08:39:ED:53:93:59:FF:98:23:EC:1F:A5:D8:B5
X509v3 Authority Key Identifier:
keyid:F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c3:f1:58:8a:70:bb:3d:05:9b:3c:3d:d4:df:e6:16:97:fd:
93:d1:67:25:79:b2:21:0f:68:45:a8:35:0a:a6:61:bd:84:55:
20:86:6e:b2:f1:54:d1:a2:62:9b:59:0a:8e:f9:21:f2:ac:f1:
27:3e:ee:21:83:19:38:ea:99:2d:df:b3:f5:02:53:99:cf:5a:
c2:05:af:31:c9:55:bb:4d:73:b6:54:cf:f7:97:af:7a:cb:1b:
f3:85:a8:a7:db:72:64:48:65:30:95:fa:b5:5e:ce:35:6b:e1:
cb:c5:b9:64:49:ea:d0:df:a2:c8:18:40:f2:6d:a1:e6:ad:c5:
7b:e4:a6:d8:17:3d:62:43:1d:ff:2b:b8:38:9a:96:ef:8c:06:
07:7e:14:af:d7:cf:21:af:e3:7c:f6:9b:18:33:da:13:69:13:
c9:71:76:d9:14:ce:f0:78:f7:5c:78:ce:b1:0f:6a:a2:92:0a:
0d:67:62:57:66:eb:8d:61:7c:7b:aa:c9:95:b3:a9:56:e7:92:
de:76:72:9c:1c:db:8a:ac:bd:4a:66:0d:8a:ce:3e:72:20:5c:
3d:27:74:c0:d0:61:6d:70:1e:d2:4b:a9:b8:43:cd:3d:07:08:
ef:63:93:dc:0f:85:1f:14:2f:80:5e:2d:50:82:6d:16:b8:d9:
34:ed:a2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:47:58 2025 by rpki-client