Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
File: 1-XQtd30IJBai2EfUADozG1DiQj4.mft (raw, json)
Hash identifier: oyxL647gtGtwBsIZ8Udh5+QkudIPN+iKd3YqM1AsFko=
Subject key identifier: 6C:74:E1:64:CE:12:E0:52:BB:1E:98:7F:22:71:52:D3:A0:69:28:C6
Authority key identifier: F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
Certificate issuer: /CN=f9742d777d082416a2d847d4003a331b50e2423e
Certificate serial: 01984852CDBB00F78439980A41A674910E6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
Manifest number: 15BF
Signing time: Sat 26 Jul 2025 20:00:42 +0000
Manifest this update: Sat 26 Jul 2025 20:00:42 +0000
Manifest next update: Sun 27 Jul 2025 20:00:42 +0000
Files and hashes: 1: 1-XQtd30IJBai2EfUADozG1DiQj4.crl (hash: W8CT9qGrST5bJAzTCEc7EtBUfNKr0LAxJbOsoL21XKw=)
2: 1-kqFnbhB2LCPJU3KtgP3OhHNEbM.roa (hash: sYai5O0I+e4s9fEjeNx81CRmECPgFmQDJeWhDrbRAeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:cd:bb:00:f7:84:39:98:0a:41:a6:74:91:0e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9742d777d082416a2d847d4003a331b50e2423e
Validity
Not Before: Jul 26 20:00:42 2025 GMT
Not After : Jul 27 20:00:42 2025 GMT
Subject: CN=6c74e164ce12e052bb1e987f227152d3a06928c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a6:e1:d9:93:87:69:57:93:f9:47:4e:8b:9e:
79:ec:3b:19:50:51:f5:99:bf:48:f5:6d:51:c7:e6:
2c:88:bc:e0:b5:89:a1:ff:c1:1f:d9:98:1c:65:73:
f0:f7:ce:ff:47:89:75:08:c0:f8:69:e3:cb:c8:5a:
f1:42:c5:2b:1d:6e:22:be:84:d7:99:65:8f:4b:da:
5f:cb:47:96:92:0a:1c:62:85:72:78:bf:9b:69:65:
a2:71:6b:87:d9:e7:8c:88:02:d3:22:5c:ca:e3:85:
ed:69:11:75:0a:48:37:a7:02:39:72:0d:c1:05:2e:
3f:00:b1:b9:df:f0:cb:0c:6e:6a:e6:70:aa:8a:1f:
93:7a:c3:5f:05:7d:37:3b:73:c6:62:c7:2e:97:f2:
9f:f7:e4:14:da:b1:ce:1f:bb:3b:71:80:8c:61:02:
39:9b:a0:f1:4d:15:3d:14:32:c3:c9:4f:be:fd:d5:
11:5a:3b:33:3a:55:5e:ac:99:b6:51:76:96:a3:c6:
1f:b3:a7:a9:b1:4b:94:f0:62:b4:e0:e1:6b:43:ca:
08:cf:91:31:da:a4:c8:e9:46:fa:03:6b:2e:45:cc:
e0:1f:42:bf:a5:33:c2:bd:60:aa:fe:5f:fe:f1:3c:
43:35:ed:81:5f:78:72:f3:bc:c2:ab:68:ca:2e:20:
88:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:74:E1:64:CE:12:E0:52:BB:1E:98:7F:22:71:52:D3:A0:69:28:C6
X509v3 Authority Key Identifier:
keyid:F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f2:42:e3:14:20:ec:27:26:6f:ac:4e:2f:2a:e3:6c:c5:ac:
74:96:34:4a:66:00:f8:39:1a:94:23:a9:10:68:59:48:3d:95:
29:82:98:63:28:e1:ff:9c:f4:b9:41:f5:7a:31:33:73:08:29:
fd:a5:78:d8:b0:dc:b9:1d:0a:a1:d3:a1:cf:36:7f:62:89:88:
01:0c:89:bd:94:65:4e:0e:56:f0:dc:74:a4:ae:72:c9:d9:c2:
0f:63:45:79:3e:61:c8:6b:9b:49:d4:68:f4:b7:45:91:64:df:
75:cb:49:6f:cd:17:17:91:f4:4d:12:7c:f6:b1:bf:39:be:fd:
fc:6a:04:6d:78:7c:8c:22:ce:0b:11:93:0d:07:10:f7:84:f4:
5d:02:db:34:27:89:5b:96:b2:5a:16:ff:61:ba:cd:ab:2b:85:
be:0f:a1:c3:94:ae:04:1b:63:a9:29:39:95:28:21:cf:78:74:
77:ba:02:75:19:db:6c:4d:d1:34:74:f7:a3:2c:94:d8:9a:22:
14:4e:e6:52:fe:3e:dc:34:23:fa:e0:f8:d1:b9:fb:d4:14:91:
fd:d0:2e:42:7b:0b:58:c1:a3:fb:6b:13:e7:aa:b0:53:f6:39:
ca:51:64:0e:55:53:0a:89:75:85:ab:2b:da:20:0c:ef:6e:f1:
48:08:10:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:28:26 2025 by rpki-client