Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
File: _x9hW5GDn1HtOltTdTsnsCx22pU.mft (raw, json)
Hash identifier: u24wOhlSJVvfhEk742FeMtrSeJCZ7pdqluMeQ4CyjU8=
Subject key identifier: 67:65:E9:E1:35:EC:E8:89:49:E1:81:6E:C9:64:7E:38:AA:77:48:83
Authority key identifier: FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
Certificate issuer: /CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Certificate serial: 0198481BF6504EDA93B6455D2ADAE8EAE969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
Manifest number: 1603
Signing time: Sat 26 Jul 2025 19:00:48 +0000
Manifest this update: Sat 26 Jul 2025 19:00:48 +0000
Manifest next update: Sun 27 Jul 2025 19:00:48 +0000
Files and hashes: 1: 7a7WUL8xvDPo2P-5omM4jYtGU5Y.roa (hash: UostfHkB3oR0Iku8D5pESC2eAmHKknmIvGYXu5RiVk8=)
2: E72VdoRs1WH4lPVFyfKcgtxOU8Q.roa (hash: LmX4spgkKMlRcTCE+F8dcGQpsB1FUNFcfYjRwXtYks0=)
3: _x9hW5GDn1HtOltTdTsnsCx22pU.crl (hash: auXpqowQSkD1/G44bHmuIPPPDiZgnm6ebJrUoxTaxAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:f6:50:4e:da:93:b6:45:5d:2a:da:e8:ea:e9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Validity
Not Before: Jul 26 19:00:48 2025 GMT
Not After : Jul 27 19:00:48 2025 GMT
Subject: CN=6765e9e135ece88949e1816ec9647e38aa774883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:30:b5:26:49:a1:57:08:78:23:b7:4f:df:38:
c3:ea:18:6e:4b:d0:4e:3b:a0:af:73:c9:03:dd:3f:
14:a4:41:bc:0d:65:48:6d:3d:44:c4:48:3c:fd:98:
9f:d0:9e:df:95:41:fb:ca:41:bd:bc:c7:d5:2c:2a:
1f:f7:83:48:28:d5:77:77:36:f5:82:77:ec:f6:3d:
fd:68:66:83:89:03:73:4c:65:5a:af:cd:1e:d8:05:
94:d8:73:cf:7a:34:e8:3b:39:11:9a:a2:fa:8d:af:
36:9d:53:0e:53:b4:4e:84:75:e5:eb:44:cb:df:fa:
4a:75:c3:e7:d4:d5:4a:c7:b7:31:b8:00:e9:a2:ef:
aa:a5:fe:1e:6f:e7:4a:d1:ea:a1:0e:01:b9:fb:b1:
b7:56:d4:7e:12:a2:1f:d8:d7:1d:4c:d5:2e:fa:f2:
a8:05:b5:62:8b:3a:82:ce:a3:dc:8b:bb:9a:68:b4:
57:50:cd:fc:85:4a:08:e0:91:85:a3:34:13:3f:0a:
dd:84:2e:38:7a:0c:74:3d:30:1d:f3:93:55:33:04:
14:ed:b8:c7:a6:86:21:26:67:04:4f:b9:64:c6:09:
81:aa:0a:d9:5e:b5:86:d0:70:ef:e1:00:79:a2:4e:
9a:fa:2f:e7:ef:72:df:e6:8b:19:f0:4c:5c:76:8f:
74:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:65:E9:E1:35:EC:E8:89:49:E1:81:6E:C9:64:7E:38:AA:77:48:83
X509v3 Authority Key Identifier:
keyid:FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ec:fd:44:ed:13:bf:fd:fc:43:30:b1:11:bb:10:c8:4c:8d:
b6:20:74:e7:83:2d:42:24:9c:d5:34:91:78:30:fc:5c:e4:19:
89:ae:6c:f4:fb:90:b4:9b:48:9b:4f:d7:51:3e:b7:06:3c:ce:
87:9e:cf:a8:e6:9f:64:9f:29:b3:af:a0:1d:43:2c:2f:65:97:
67:f0:85:2f:c9:66:3e:a1:1c:6c:1e:8c:a9:f6:af:50:01:cb:
55:c8:56:e5:a5:63:a8:11:51:dc:8d:bc:48:e1:25:7f:10:c2:
b3:a4:4e:29:1c:b9:42:48:a1:03:03:0a:31:33:19:c9:2e:8c:
27:27:ef:f9:15:99:a1:5f:48:18:ce:39:10:d0:86:86:73:a8:
44:20:d3:ea:83:7b:3d:cd:d1:84:57:68:fc:a0:7f:b2:6e:32:
ae:3d:15:20:5e:de:51:f2:35:c2:2a:82:33:0f:7b:fc:a7:ed:
fa:df:9b:90:bd:3c:95:cb:4b:31:7c:cb:2a:d8:58:d7:8a:a9:
33:f7:2a:97:3a:c5:a4:b9:91:c7:60:6f:21:86:76:b2:d2:05:
28:dc:99:e3:fb:e9:f5:8b:7b:e5:a1:55:a5:52:42:05:a2:d7:
67:3d:b8:70:61:fe:83:32:78:d6:49:37:98:78:02:22:51:89:
69:26:cd:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:01:42 2025 by rpki-client