Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
File: 1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft (raw, json)
Hash identifier: sIptivE4WNpq0zmoXtIf8BesmuT+0TsSpkt00rMo8go=
Subject key identifier: 5C:83:E4:CC:BD:D5:DC:3A:A1:FD:B0:A4:47:F3:E2:4E:95:CE:7E:D6
Authority key identifier: D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
Certificate issuer: /CN=d716209d7def98a2bb34977f65009b3520da256e
Certificate serial: 0198492E230B2DC1F87B3DF15307CA67A448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
Manifest number: 03EF
Signing time: Sun 27 Jul 2025 00:00:17 +0000
Manifest this update: Sun 27 Jul 2025 00:00:17 +0000
Manifest next update: Mon 28 Jul 2025 00:00:17 +0000
Files and hashes: 1: 1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl (hash: nTiYj19wPAyuog3BEiU5nNHT7tDepuLHkkbVFpitbkk=)
2: 4tp9tfzajL3wSaoTUAgkJxXEA3w.roa (hash: OSBHhC2pu6UzU9j8q1U5vUQ/dZVJ0VYgveQ3T0xJp1E=)
3: OWBphSnGzM3NfjUoWcPjDVRSYgc.roa (hash: Z7ei4v1I8GPTdYYpZ1qHi9JiBDA34PMAtoRsAnkH2B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:2e:23:0b:2d:c1:f8:7b:3d:f1:53:07:ca:67:a4:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d716209d7def98a2bb34977f65009b3520da256e
Validity
Not Before: Jul 27 00:00:17 2025 GMT
Not After : Jul 28 00:00:17 2025 GMT
Subject: CN=5c83e4ccbdd5dc3aa1fdb0a447f3e24e95ce7ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ce:4a:34:c3:dd:76:42:ee:5c:40:d3:68:eb:
d9:de:e8:8d:68:99:be:d7:54:df:5b:0c:0c:f2:3c:
c3:6b:c3:7b:53:09:cc:d7:29:a0:11:aa:38:51:38:
b4:2e:b9:17:6b:a1:14:b6:7c:85:48:b9:98:a5:ee:
af:eb:c5:1b:59:25:df:89:5c:97:d4:6b:ed:af:6c:
b1:28:0d:72:74:0b:58:ad:79:db:e4:4a:03:e4:c7:
e5:d6:f9:20:e1:a1:f2:ee:0f:93:54:f4:f7:a1:0c:
0e:44:95:76:33:42:48:25:06:13:e6:6d:bd:cd:0f:
bb:83:7e:f0:1d:77:eb:78:0c:9c:09:10:6c:92:23:
13:9a:6b:2b:bb:8e:e0:ac:90:70:a8:37:f6:c7:b4:
f4:e4:cc:2e:66:5f:2c:15:79:9e:82:83:82:69:9d:
af:af:45:1a:af:f2:f7:96:97:30:9a:16:31:2c:32:
cb:0a:3b:a2:57:47:eb:65:64:82:a2:86:f7:df:dc:
b2:65:0f:cd:f3:54:1d:ae:9a:30:fd:0d:0c:09:dd:
78:6c:e0:1c:61:12:1d:fd:81:2a:fa:ec:db:c2:f6:
e5:36:9d:19:61:55:38:81:5e:30:8f:ca:9f:5c:34:
ca:4b:71:cb:37:ab:57:73:7c:d8:0e:c1:13:7c:c8:
e4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:83:E4:CC:BD:D5:DC:3A:A1:FD:B0:A4:47:F3:E2:4E:95:CE:7E:D6
X509v3 Authority Key Identifier:
keyid:D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:04:83:5f:54:cd:5e:70:2a:98:52:aa:a5:8a:e2:63:13:48:
b5:5b:39:74:11:c3:c8:46:af:58:9c:b3:a5:c7:99:7b:0d:50:
33:a7:aa:ee:23:01:44:a7:b7:7c:e1:c3:c2:0a:59:00:d2:05:
03:c2:f6:6d:fe:12:ad:93:e1:05:0b:1a:dd:00:1f:92:a0:c1:
d6:4b:00:7c:62:c3:92:37:3d:75:48:2e:11:cc:93:92:19:4b:
1d:f2:69:eb:c7:e6:54:3b:fb:ee:59:24:09:a0:12:55:89:31:
69:e2:fb:98:58:7d:d3:f3:1a:8a:30:2d:ff:e6:11:1b:c3:28:
a2:2f:df:6d:10:42:9b:7e:f9:9b:2c:f3:da:f5:ef:24:83:be:
b1:c2:93:6a:ec:0d:19:6b:6a:1e:57:be:ce:3f:56:fd:9a:75:
23:6c:5a:f8:1a:d6:37:ab:eb:74:5c:fe:94:e5:81:3f:50:24:
50:e3:59:ed:c0:2d:d1:1f:c0:ee:3a:19:6a:90:a1:c1:25:5b:
54:55:ae:ef:e1:c0:8c:4f:03:5f:1d:61:4f:de:c3:27:08:fa:
cf:b2:ab:df:f8:d3:16:05:37:2c:73:0a:84:d3:52:93:96:01:
d8:a1:91:bd:25:c9:83:22:3e:01:b7:8a:6b:7b:8b:5e:43:ff:
32:23:8e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:53:42 2025 by rpki-client