Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
File: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft (raw, json)
Hash identifier: fDU7awgHy6Towax7Qt81wHxajTS+Sd18+vPo0rkFrHM=
Subject key identifier: 2B:41:5E:31:B1:85:6C:C7:AE:CB:11:C1:92:4B:AE:2C:A2:89:2B:51
Authority key identifier: F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
Certificate issuer: /CN=f970877985b0c5cf69167c91e837424c47d9a425
Certificate serial: 01984966818A5207B85C287741DCF826454C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
Manifest number: 0B0A
Signing time: Sun 27 Jul 2025 01:01:51 +0000
Manifest this update: Sun 27 Jul 2025 01:01:51 +0000
Manifest next update: Mon 28 Jul 2025 01:01:51 +0000
Files and hashes: 1: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl (hash: MGmLdZfLhvru3CRuj1rJyzwFUP8jv9Yrna0QQcFv7gU=)
2: dtRhkrrPSJQXLxdge4ROTUVkWDI.roa (hash: LG59mLDEL6OnHYs5spoH7ylFHPQpE2H4qHB7zS4ODlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:81:8a:52:07:b8:5c:28:77:41:dc:f8:26:45:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f970877985b0c5cf69167c91e837424c47d9a425
Validity
Not Before: Jul 27 01:01:51 2025 GMT
Not After : Jul 28 01:01:51 2025 GMT
Subject: CN=2b415e31b1856cc7aecb11c1924bae2ca2892b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7d:5e:7a:77:d5:26:60:d1:07:79:c1:9e:47:
67:b1:72:3a:e5:f0:fe:cf:8f:f6:39:1b:66:e3:a9:
6b:a9:bc:07:8d:b9:48:69:1b:94:7c:ce:9e:41:1a:
6f:5e:ea:c2:c0:7f:ee:1d:f0:05:26:b3:4d:52:bf:
62:4c:e2:05:4e:83:d0:e1:01:9b:65:04:00:7e:e3:
10:ad:ee:99:65:48:02:b9:2a:57:e8:fc:2a:a5:27:
e1:01:d9:85:bd:f1:b6:6f:54:20:12:b0:b7:47:4c:
3e:35:48:33:e2:e7:29:db:18:10:08:3a:1e:c0:5d:
5a:07:85:9d:14:2d:15:fd:28:5e:29:b7:0e:7f:a3:
8b:4e:b7:19:01:d1:ea:34:b0:4b:92:3a:a2:f2:eb:
5f:e1:9b:2d:b5:15:6e:08:7f:20:6b:cb:f5:bc:7e:
22:b1:2c:29:a1:f1:14:83:da:45:50:6e:57:a6:f4:
56:80:d7:b8:67:b2:f9:b7:87:a1:8b:0f:68:9e:4b:
49:c9:4d:f8:a7:c0:a4:58:ed:90:fc:af:e2:c1:f4:
6c:cf:bd:75:50:2a:1f:1a:ce:e2:db:a7:de:bb:7a:
1b:26:86:7d:0d:9f:8e:95:14:51:6c:9d:e3:96:f6:
7f:5e:b4:20:8f:1a:a2:98:f8:e8:9c:36:a9:22:09:
e4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:41:5E:31:B1:85:6C:C7:AE:CB:11:C1:92:4B:AE:2C:A2:89:2B:51
X509v3 Authority Key Identifier:
keyid:F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:a1:07:5a:cb:56:71:15:0a:3b:f2:03:c4:bb:bb:85:7a:37:
57:c9:e4:8f:23:3c:82:27:b6:6c:8a:db:00:48:a6:18:ea:1e:
09:83:11:8d:f0:c7:fd:da:f9:a5:b1:f0:31:34:54:23:2f:78:
5b:65:96:43:26:9a:39:f9:94:7d:03:b5:41:aa:4a:75:d6:6b:
dc:99:10:ab:37:43:8e:33:19:b1:93:d8:06:58:6a:1d:59:74:
40:2f:13:33:1d:3a:bb:0a:3a:51:57:e1:1a:11:07:a9:5e:ec:
a3:30:31:c2:77:3d:71:25:de:af:67:7d:65:12:6d:21:4f:b8:
19:66:df:8c:74:46:38:34:24:cb:0a:51:a5:3f:59:45:b8:55:
98:b5:c3:93:ec:17:28:b3:7f:06:1f:fc:37:52:92:1c:f2:8a:
d5:e7:29:11:8a:84:3f:28:8a:ac:b5:f6:62:d4:3a:76:fa:2d:
d9:a5:17:0c:bd:de:43:35:2a:7d:f6:9d:4a:64:1a:0c:e0:37:
e3:90:00:05:b5:e6:32:f1:72:de:01:85:3a:a0:bc:d0:d3:0e:
33:0c:93:23:db:10:3d:4f:f9:1c:bd:0b:c7:74:c6:60:ea:78:
fc:f1:6c:b3:9a:a5:7f:9f:4b:73:e5:39:8c:8c:5d:2a:79:85:
82:58:12:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:48:58 2025 by rpki-client