
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
File: 1-lbH5mCxx047AxixQzjD8A3XvHI.mft (raw, json)
Hash identifier: jiZzdSy7UQKF70vEhQqPpBDVXGi/h26j8o4ANIIkw2M=
Subject key identifier: 13:A7:ED:6C:28:F0:45:17:C8:91:D7:0F:CB:87:F7:6A:0A:E3:26:B1
Authority key identifier: FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72
Certificate issuer: /CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72
Certificate serial: 0198537B2FCB569E99075011AFCB1634E66A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
Manifest number: 160A
Signing time: Tue 29 Jul 2025 00:00:38 +0000
Manifest this update: Tue 29 Jul 2025 00:00:38 +0000
Manifest next update: Wed 30 Jul 2025 00:00:38 +0000
Files and hashes: 1: 1-lbH5mCxx047AxixQzjD8A3XvHI.crl (hash: WWEQkYvlyE8DrK1+sYApWQyiL4ja4/7/Zr2yMzzowUg=)
2: ATt1aqdGeZ5ixfMp8_Jy6L59z-k.roa (hash: 1oMcUF44dyNpkmaMAlxiex9uPcgAT7lFT4Xu+m6Gsb4=)
3: Bff4rC9WehOBomJppT-ehbDxZW4.roa (hash: q/9WBUlXsXmwHmLM8/yFjUu0wOhpnsihoEn5zg6jhjM=)
4: x2L_c-RSS740XaVwlO7VHobnubM.roa (hash: Qfrg68gfwO9o79kr2HCZELwrxwBVoekGLKNYHsG1PJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:2f:cb:56:9e:99:07:50:11:af:cb:16:34:e6:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72
Validity
Not Before: Jul 29 00:00:38 2025 GMT
Not After : Jul 30 00:00:38 2025 GMT
Subject: CN=13a7ed6c28f04517c891d70fcb87f76a0ae326b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:98:22:55:4a:a5:cb:8a:31:55:04:3e:26:11:
38:90:77:d8:40:3e:d3:e4:fd:28:22:e2:71:cd:7f:
49:1f:03:78:4c:91:6c:61:dc:ef:19:9c:b8:bb:e8:
6f:fa:88:52:80:32:31:94:5e:55:e5:ac:73:cd:57:
63:b2:b7:85:10:a6:51:e2:5f:bc:08:b5:16:a5:4a:
6d:46:df:e3:f8:f0:94:79:1b:95:9d:04:7b:0e:60:
ef:04:53:fa:de:7d:82:3c:f5:8e:5a:32:e1:81:d0:
b9:27:13:34:68:77:a1:19:81:59:cd:0b:49:7d:a0:
a5:04:2c:68:3f:98:65:1b:10:60:88:68:d5:6d:9e:
38:a5:53:b1:7b:a5:b1:96:2b:fb:1b:5c:a2:35:f3:
ec:27:6e:1b:ce:20:f1:d5:06:81:64:f3:61:1a:85:
47:65:e2:6b:a9:df:d6:36:13:86:7c:7a:96:3e:cb:
bc:e1:c8:2b:46:db:a7:fb:e4:ba:c0:9f:5b:1f:0a:
36:1d:7f:16:06:63:e3:c0:fc:50:3c:99:f3:84:b4:
1e:ff:63:f1:67:a1:b8:27:13:6a:93:2f:8e:17:49:
ac:a8:37:a1:fa:53:2c:f5:b2:c1:e1:c1:0f:5b:0e:
b6:cf:f3:6c:f4:54:a0:a8:bb:7d:6a:a6:62:8d:5c:
e2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A7:ED:6C:28:F0:45:17:C8:91:D7:0F:CB:87:F7:6A:0A:E3:26:B1
X509v3 Authority Key Identifier:
keyid:FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:07:d7:df:b8:b0:54:e6:8e:58:ff:f6:72:d0:17:33:b8:15:
88:f4:80:e1:6d:86:14:3a:f3:2c:25:95:68:a5:cd:cf:e3:83:
98:e4:4c:4a:8b:29:98:62:97:85:00:e7:f2:16:e7:96:26:c5:
c9:8c:64:fe:68:0c:d3:66:d2:9c:be:9e:34:17:bd:e5:1c:20:
5c:26:87:0d:2d:f2:02:81:75:0d:60:17:18:2e:3f:68:9d:1c:
2c:cb:68:bb:3c:21:8c:0f:2e:4d:c1:30:7e:f8:88:cc:91:b7:
a5:70:20:0f:51:ec:5f:c3:24:fd:5b:2f:15:28:b2:02:78:17:
95:69:98:a1:28:7d:c7:10:a7:7a:71:a7:37:5d:47:c4:af:db:
47:88:57:3b:17:27:e3:ca:11:da:16:fc:d9:04:de:2f:e0:16:
1a:6c:92:a1:f5:c4:48:f3:d0:b1:ee:ce:d6:02:49:6e:17:19:
42:5f:71:40:c9:08:bc:71:f4:a8:29:ce:8d:18:94:ea:21:5c:
d3:c9:c3:47:c1:90:f3:74:47:b9:b6:d7:a2:5a:23:77:8c:55:
c8:32:7e:8a:da:ae:b4:fc:9a:42:66:7e:99:66:1e:3f:55:2c:
26:43:c4:9f:59:c8:32:8f:a3:b0:bd:3d:a8:95:eb:2c:bd:6a:
7a:02:67:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:44:46 2025 by rpki-client