Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
File: 1XfOFDQjLYCBldDKcKs5HfsHry0.mft (raw, json)
Hash identifier: 3XwQojFwOwIbkEt7H/N8Kq/TIcknDB2M+Il71BUFzL4=
Subject key identifier: 59:86:4F:07:3E:BA:F6:4F:8D:AA:2F:24:1D:2C:7F:DF:E8:F8:6D:4B
Authority key identifier: D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D
Certificate issuer: /CN=d577ce1434232d808195d0ca70ab391dfb07af2d
Certificate serial: 0197B745A589A4EFCD59CAA72A7CB48A36EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 16:01:24 +0000
Manifest this update: Sat 28 Jun 2025 16:01:24 +0000
Manifest next update: Sun 29 Jun 2025 16:01:24 +0000
Files and hashes: 1: 1XfOFDQjLYCBldDKcKs5HfsHry0.crl (hash: y4G1ftGj7PZOpHqyBavkkPOmbk+6t/nb1TGPiCA2dzk=)
2: HcDxgF3nqk8cgEWN2FjSYTqgWIU.roa (hash: zRQPtKl4Mi8+zyT9yY1R1Qmmn1wM9W5eQbvQLliU+lY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:a5:89:a4:ef:cd:59:ca:a7:2a:7c:b4:8a:36:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d577ce1434232d808195d0ca70ab391dfb07af2d
Validity
Not Before: Jun 28 16:01:24 2025 GMT
Not After : Jun 29 16:01:24 2025 GMT
Subject: CN=59864f073ebaf64f8daa2f241d2c7fdfe8f86d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:22:ba:06:95:9d:50:ac:c8:f3:18:5a:fe:ac:
67:6d:15:70:46:8d:eb:6b:eb:4b:40:49:fa:04:f0:
da:19:e3:e7:16:0b:69:e3:b6:a8:20:3c:88:15:24:
a5:ca:4c:0f:70:9a:45:40:a1:8f:03:73:e3:dd:d9:
b7:5b:58:c2:90:0d:f8:7b:67:5c:56:01:87:99:c0:
3b:11:d1:39:ef:5b:07:a9:1d:0b:ec:af:b7:34:ea:
97:bb:09:30:d2:80:07:74:16:9c:b5:09:68:54:e5:
20:0e:32:59:0c:ca:4b:16:91:53:c3:22:e1:82:0f:
60:f0:ae:67:fb:68:a5:87:85:7a:21:9b:c4:d0:40:
5a:d0:10:82:3a:17:55:af:79:44:c9:5f:37:60:71:
d8:cf:96:78:a9:6f:fe:f6:56:8d:37:b1:22:0c:e8:
af:c1:e5:f4:14:bd:ff:6a:d7:66:41:14:9d:41:dc:
32:47:25:25:4a:11:6e:7d:c4:fa:c6:44:ae:ba:79:
40:4b:7c:ac:9b:a6:33:26:dc:81:1d:1a:f6:3d:63:
46:a4:82:4e:71:77:41:19:09:f7:72:8e:22:06:9a:
29:06:27:31:2a:62:a9:6d:73:3e:94:08:66:40:13:
55:93:40:ae:f5:fb:6c:ab:d6:a8:6b:bf:c8:e5:b0:
51:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:86:4F:07:3E:BA:F6:4F:8D:AA:2F:24:1D:2C:7F:DF:E8:F8:6D:4B
X509v3 Authority Key Identifier:
keyid:D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a5:e5:7f:c0:b0:d6:cb:6f:4a:22:93:1a:01:fe:50:95:b3:
a4:b0:80:a9:f9:0b:cd:30:98:4c:c2:33:6b:37:4b:fb:6e:66:
3a:bd:c7:3f:9c:d1:c5:02:e1:41:01:c6:19:7b:9e:49:a2:9c:
0e:94:dd:1c:28:d4:7f:06:5d:18:8f:59:a1:4a:14:24:f2:14:
0a:e0:f2:e8:72:32:20:ac:ce:bd:10:2a:fd:aa:f2:ad:84:65:
55:7e:ae:62:44:84:da:21:c8:76:82:34:d1:48:a9:f8:21:5f:
33:88:8e:f0:e6:64:18:c2:ad:c8:13:1f:63:bc:d7:c9:e4:35:
76:6c:08:46:b6:d7:25:26:a0:e2:e8:76:90:c9:61:fb:dd:79:
e3:bb:f0:47:b5:e0:a0:fe:13:69:26:a2:6e:d8:37:99:d4:90:
92:5e:e0:b9:22:25:b7:99:f0:55:ae:07:59:6d:91:00:76:5e:
58:d4:96:e6:60:10:26:8f:d6:ad:90:db:5d:42:54:7e:5a:92:
59:c1:2d:ab:0e:a7:e1:b3:6f:db:6a:8a:2d:6a:51:b1:0c:94:
7b:f0:32:ac:7f:62:03:b6:27:28:7b:07:67:16:37:b4:3d:45:
ba:43:28:b0:9a:70:f5:67:c8:68:e0:93:93:f9:02:90:47:81:
4b:f5:5a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:57:17 2025 by rpki-client