Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
File: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft (raw, json)
Hash identifier: /PJZmGDJw8LWSJbtO+/3gaGEFclN7WALpxZXZWlbsto=
Subject key identifier: 45:CE:41:BD:5F:A9:15:9E:89:68:54:47:CE:A6:DE:6D:65:76:8A:1A
Authority key identifier: F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
Certificate issuer: /CN=f970877985b0c5cf69167c91e837424c47d9a425
Certificate serial: 0198D65F4FBC7043F95117A01DCD9B598809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
Manifest number: 0B53
Signing time: Sat 23 Aug 2025 10:00:27 +0000
Manifest this update: Sat 23 Aug 2025 10:00:27 +0000
Manifest next update: Sun 24 Aug 2025 10:00:27 +0000
Files and hashes: 1: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl (hash: yVdxBf8xXSy+uZV4GRYDw8IXHF/XOCLypUERTvr6tXA=)
2: dtRhkrrPSJQXLxdge4ROTUVkWDI.roa (hash: LG59mLDEL6OnHYs5spoH7ylFHPQpE2H4qHB7zS4ODlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:4f:bc:70:43:f9:51:17:a0:1d:cd:9b:59:88:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f970877985b0c5cf69167c91e837424c47d9a425
Validity
Not Before: Aug 23 10:00:27 2025 GMT
Not After : Aug 24 10:00:27 2025 GMT
Subject: CN=45ce41bd5fa9159e89685447cea6de6d65768a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:ec:03:ee:2e:07:ee:c0:07:ee:e6:f5:9e:
47:8a:c0:a6:7f:28:12:fc:ee:eb:bc:ad:9f:b0:33:
80:87:b1:fc:46:53:65:02:97:94:26:0b:29:b5:25:
0c:a4:b9:b6:ae:49:b8:34:27:b1:a6:41:19:13:e3:
85:cd:5e:9d:1e:ea:16:41:2e:a8:3e:2a:48:80:83:
15:3a:1d:90:a1:bc:08:1d:ad:4e:98:32:7d:dd:7f:
a4:d0:a3:c6:e3:ec:a3:ea:b0:35:26:f2:f5:86:9f:
22:ca:43:c1:12:17:d5:02:9a:57:e2:cb:e8:31:e9:
d6:b3:d1:dd:af:73:13:d3:02:24:7f:82:84:10:b3:
5b:d1:92:41:a5:47:95:35:5e:99:24:e6:7d:0a:5b:
b9:8c:10:55:05:e8:0b:01:ce:db:ce:25:4b:16:b4:
44:06:7c:fb:ca:e1:00:15:42:65:4c:d7:67:dc:ce:
4e:1d:f6:ee:95:8d:4c:25:02:48:1b:da:6a:ca:04:
80:eb:03:6b:d3:8b:f8:23:cb:1c:2b:6c:67:d8:fd:
a6:9b:b5:d0:7e:29:4b:b2:92:98:cd:b0:64:f9:5b:
2f:96:63:fb:24:23:82:87:9b:cf:ff:1b:2f:7a:c8:
ff:6b:f1:f8:10:1c:ce:b5:26:66:62:ea:d8:d3:60:
2b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CE:41:BD:5F:A9:15:9E:89:68:54:47:CE:A6:DE:6D:65:76:8A:1A
X509v3 Authority Key Identifier:
keyid:F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:73:a2:65:37:f5:33:49:08:28:06:4c:af:d1:4a:e5:fa:6f:
a0:bf:11:c4:14:c4:12:24:d8:47:f5:8d:e4:52:a5:7f:8f:55:
f7:e9:b2:0e:71:bd:ca:a2:36:05:42:12:a7:95:d5:fc:02:54:
af:d5:82:18:2d:71:d4:37:36:36:f4:40:63:a5:00:ca:49:87:
2b:08:fa:53:8d:f9:07:8d:e2:c5:6f:28:1c:6c:ce:04:2a:24:
e1:5c:23:ed:5c:77:cd:33:05:ab:7c:77:19:9d:1c:2c:73:0a:
bb:a7:61:a9:fd:27:f1:9c:fe:40:21:a1:73:9c:3e:4b:dd:ae:
df:3b:d1:8f:5f:c2:90:9f:36:71:dd:f3:f4:e5:e6:28:36:1f:
6b:b7:7d:34:26:64:d0:5d:e0:36:ea:5e:78:bd:cc:77:8a:85:
f7:b8:f1:ec:08:34:cf:a0:26:93:ad:e2:ab:68:30:a1:df:a6:
f2:0f:73:8f:65:6d:5d:60:b4:7a:3d:03:02:75:4b:ec:3b:6b:
1d:e3:89:9d:0b:08:a6:0d:20:e2:08:e0:6d:3c:1d:ff:02:9a:
2f:0d:2b:11:22:99:3c:25:53:fc:8a:c2:d9:0a:de:39:1e:40:
a3:37:db:ea:5d:fa:80:df:47:ad:e2:9d:04:05:80:03:98:bd:
38:8b:4d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:29:51 2025 by rpki-client