Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
File: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft (raw, json)
Hash identifier: eN/0729WPiigbQu1dLFG1uGNY6xRqilV8UZd2WxDl24=
Subject key identifier: 1F:1A:14:73:33:7C:4F:CF:8C:A7:4E:6F:5B:0D:36:B8:47:2F:0D:6A
Authority key identifier: FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
Certificate issuer: /CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Certificate serial: 019848896632473E34E560692F0EF78741BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
Manifest number: 03F6
Signing time: Sat 26 Jul 2025 21:00:20 +0000
Manifest this update: Sat 26 Jul 2025 21:00:20 +0000
Manifest next update: Sun 27 Jul 2025 21:00:20 +0000
Files and hashes: 1: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl (hash: VNAsCx6/sXP7kk9ACJs18XxExI+T/sdCLyB/hckaI1w=)
2: RfQdtLKXYLdrItaAhtareV1d0X8.roa (hash: 2v2M5d2SJj08W++N719Wz/Nxup00xLX8rohfuP7PYPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:66:32:47:3e:34:e5:60:69:2f:0e:f7:87:41:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Validity
Not Before: Jul 26 21:00:20 2025 GMT
Not After : Jul 27 21:00:20 2025 GMT
Subject: CN=1f1a1473337c4fcf8ca74e6f5b0d36b8472f0d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:14:81:d9:8e:e8:c2:b2:bf:b6:f1:f8:f1:26:
9a:bb:88:f5:02:41:c9:64:55:7d:5a:64:ad:12:e9:
ea:1e:2c:b1:fb:2d:bb:ad:db:ea:62:52:23:1a:e5:
c0:c0:a9:2c:03:ce:6b:69:96:82:db:5d:d4:27:f7:
8d:12:39:72:2f:cc:29:d2:2e:9f:c0:58:ff:95:2c:
b2:81:4b:4e:91:0e:87:61:d8:be:f7:18:2d:7c:da:
54:be:a6:84:d6:ee:8b:d5:9d:47:52:10:72:14:8a:
f8:e2:e9:33:90:26:90:17:1d:e0:93:59:35:c7:f1:
72:cf:8c:b4:d3:32:38:84:9b:80:7a:dc:0b:5d:6f:
2d:f5:e6:c3:b2:d2:45:7f:79:50:38:cf:d0:07:a5:
5d:04:d3:35:8a:f0:16:43:41:eb:8c:76:28:1b:d4:
6d:15:64:ed:31:77:02:3a:29:9d:69:8e:a0:84:0f:
6a:e8:2a:f6:34:f9:e9:8e:4d:db:2b:f6:d3:37:d9:
53:ce:6f:1f:0f:99:0d:03:9f:ba:62:07:fb:03:f4:
f4:f0:06:8a:d9:fd:e2:8a:1d:eb:0e:a8:ef:99:3b:
97:c1:07:b9:2d:80:6d:39:a5:61:a5:b1:20:fa:6e:
05:3e:59:18:1d:32:19:f4:b6:17:45:ee:44:7c:1d:
e0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:1A:14:73:33:7C:4F:CF:8C:A7:4E:6F:5B:0D:36:B8:47:2F:0D:6A
X509v3 Authority Key Identifier:
keyid:FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:43:4b:b0:15:bc:c6:8b:51:1d:42:f4:07:fe:66:40:7b:95:
16:8c:d5:df:fc:1c:b2:ad:8b:20:c4:95:e4:13:bb:0d:91:8c:
94:0d:c5:93:2e:4f:47:65:64:fe:43:f2:fd:9c:63:63:3c:50:
68:4a:da:d2:2d:78:ef:d4:44:4c:8d:29:f9:a9:5b:c7:13:99:
0c:b2:24:f3:bd:e7:06:53:a2:f2:04:01:5e:61:59:75:d7:90:
44:70:82:c5:b0:ab:17:c1:bb:81:d7:fb:6f:fe:55:ed:20:70:
4a:55:4a:e2:54:ab:89:1b:22:e9:95:36:7a:83:1d:09:13:69:
7f:c2:b0:15:aa:bf:c6:13:e4:15:57:38:3a:1a:24:e7:5a:4c:
46:a5:d0:31:92:a5:8a:4d:60:e5:ed:73:7d:82:84:16:84:13:
af:d6:fb:97:68:08:81:2e:b8:09:ae:a8:88:e5:0f:ac:59:ee:
24:c9:92:c2:46:0c:23:d2:f8:11:db:a9:8a:62:f7:38:03:03:
50:13:16:0d:44:5c:66:0f:f8:ec:5f:fb:9d:f2:b7:78:42:2c:
1c:01:77:45:a8:bd:74:f5:12:71:4e:30:c6:2f:23:d3:7d:a6:
f3:82:5e:63:1d:fa:e0:30:83:9d:f0:b0:20:8f:01:84:53:d3:
7f:ff:0d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:19:59 2025 by rpki-client