Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
File: 1XfOFDQjLYCBldDKcKs5HfsHry0.mft (raw, json)
Hash identifier: 2uYTeUzjk5tAXaYk/gnwIaKG22N8bv+WVawJ0M9FV4E=
Subject key identifier: 95:7F:0C:63:BD:F6:78:41:3F:C9:58:40:56:FE:93:F3:8F:42:85:92
Authority key identifier: D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D
Certificate issuer: /CN=d577ce1434232d808195d0ca70ab391dfb07af2d
Certificate serial: 01984A0A596E769557840DC78BAA6D65B7E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 04:00:48 +0000
Manifest this update: Sun 27 Jul 2025 04:00:48 +0000
Manifest next update: Mon 28 Jul 2025 04:00:48 +0000
Files and hashes: 1: 1XfOFDQjLYCBldDKcKs5HfsHry0.crl (hash: ci5a65vZ/RWHVgFHB8WwRCDczQ5pagImZScxSSzg/DU=)
2: HcDxgF3nqk8cgEWN2FjSYTqgWIU.roa (hash: zRQPtKl4Mi8+zyT9yY1R1Qmmn1wM9W5eQbvQLliU+lY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:59:6e:76:95:57:84:0d:c7:8b:aa:6d:65:b7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d577ce1434232d808195d0ca70ab391dfb07af2d
Validity
Not Before: Jul 27 04:00:48 2025 GMT
Not After : Jul 28 04:00:48 2025 GMT
Subject: CN=957f0c63bdf678413fc9584056fe93f38f428592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d2:b5:df:a5:99:a9:ee:5d:b2:2f:c5:9c:74:
fe:2f:b3:c3:9d:13:87:89:22:37:fa:b3:05:b5:5c:
4b:d2:66:db:05:14:67:b0:f7:99:2f:2c:6b:ff:31:
0a:b5:a5:49:3e:f0:a0:b8:ed:85:90:17:5e:48:2d:
22:f2:8e:a5:68:02:f6:37:4f:e8:b5:6d:ea:71:30:
4c:3c:f2:65:f6:14:74:26:de:31:34:2e:a2:e0:73:
a1:94:e2:dc:e7:5b:6f:b1:1d:42:08:c9:18:32:b1:
6f:d9:92:4d:d8:b5:07:84:c4:ce:d2:1b:9a:36:a7:
25:16:7b:63:19:b9:ad:16:5c:86:13:2e:2c:16:6a:
fc:88:96:3f:7d:e5:4a:05:66:0f:84:e0:28:25:9a:
80:55:9a:9e:58:3e:e0:a6:9a:84:01:76:14:32:c1:
8e:34:57:7c:8a:97:df:1e:2b:30:a1:f7:f0:b3:b7:
8c:90:70:33:58:8c:28:a0:25:35:fa:0b:9b:d1:98:
96:c2:54:f6:83:8b:f5:ce:b0:48:89:17:62:cc:c7:
c6:fd:51:09:73:3d:04:fb:d8:00:b7:0a:59:4d:16:
f8:e5:f9:41:68:ae:ec:7a:ec:e0:f5:af:7a:06:de:
85:8e:e9:ac:a6:5c:3a:ba:61:ac:3a:3f:b6:0f:d7:
3a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7F:0C:63:BD:F6:78:41:3F:C9:58:40:56:FE:93:F3:8F:42:85:92
X509v3 Authority Key Identifier:
keyid:D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:0c:9d:7e:2b:da:5f:df:cc:72:43:85:13:3e:7a:00:73:0b:
55:a6:17:b3:22:7b:8d:f4:02:04:9b:77:6b:01:42:19:4a:72:
0c:b9:73:94:f0:0f:6b:b5:83:73:ce:50:02:76:a4:ca:81:68:
48:22:74:65:46:58:6e:91:0e:b5:ec:e0:73:a1:a0:8d:b7:03:
95:06:72:e2:4e:44:82:df:a4:43:3b:f1:16:04:1e:1d:e6:33:
6d:33:04:1a:97:85:a1:89:f7:48:9d:78:23:aa:00:01:03:9e:
fe:9a:35:a4:1c:d1:52:d4:2f:1c:d3:2b:07:84:3e:48:b7:e6:
3d:61:dc:80:b5:54:35:4c:e9:22:c4:76:f5:e2:17:65:e7:31:
0a:25:35:5f:07:e4:87:5e:37:06:f6:a7:2b:bf:77:f1:03:72:
6b:f9:b8:55:22:e7:e3:a0:93:b4:8d:9b:ad:7d:e4:84:b1:9f:
32:e5:85:3c:14:41:d3:b0:3c:a2:91:32:3f:2b:10:91:c8:f3:
f9:fb:56:39:16:6a:8b:2f:44:f9:34:d9:8e:ca:e5:65:a4:19:
63:11:b4:b6:b4:9f:f1:5e:57:18:55:48:fa:8e:e3:e0:b7:0d:
f0:81:24:0f:e9:66:e2:57:4a:73:25:97:4e:6c:76:13:0c:f4:
6b:7d:25:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:22:13 2025 by rpki-client