Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
File: 1-xqBDjqxlktE7LN3g0CyZtvaESY.mft (raw, json)
Hash identifier: Ale1Sw2ylua+AiSVfiHwa9yQUYgCaqttK0lO2R5lYHA=
Subject key identifier: CF:8E:45:C9:D0:FE:65:F8:3C:0D:DE:5F:1C:98:B3:B4:6D:39:6A:83
Authority key identifier: FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
Certificate issuer: /CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Certificate serial: 01974365E29EFCC2668595940E0FC8453E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
Manifest number: 157D
Signing time: Fri 06 Jun 2025 04:00:39 +0000
Manifest this update: Fri 06 Jun 2025 04:00:39 +0000
Manifest next update: Sat 07 Jun 2025 04:00:39 +0000
Files and hashes: 1: 1-xqBDjqxlktE7LN3g0CyZtvaESY.crl (hash: G1taXtXFPQO7VcHKoOVY2a468Ou5vKKUNx7W4udxEFg=)
2: VsFuiofejDNus4q-XJuiSHwgNg0.roa (hash: 5/WoOYXAxKPBmuAPhmhS3e5eFCmzTCokgMSG9illRVc=)
3: dERFn8-Y3CpN0nk9-2z0qZhw3lA.roa (hash: MMTvQ8GZkYazTAxyoZRT7syb2AL1b5sM3xApJFFdT80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:43:65:e2:9e:fc:c2:66:85:95:94:0e:0f:c8:45:3e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Validity
Not Before: Jun 6 04:00:39 2025 GMT
Not After : Jun 7 04:00:39 2025 GMT
Subject: CN=cf8e45c9d0fe65f83c0dde5f1c98b3b46d396a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:87:c6:f6:83:14:87:a8:f6:36:07:c0:75:33:
bb:05:6a:15:ad:4a:1b:6d:0a:9d:fa:00:44:39:bc:
94:27:3e:61:51:59:19:41:25:d2:df:e8:2f:09:ff:
c1:87:d0:f5:f6:cc:a5:2a:49:3a:13:e2:61:a8:b1:
8d:84:22:e9:84:f6:07:be:7c:15:f3:fd:32:d0:76:
c6:e7:55:ce:e4:22:2b:2f:0d:b4:ef:ce:34:e5:fc:
6b:16:8e:80:e9:c1:6b:1d:74:bf:ff:d9:90:92:e4:
b6:e5:43:ce:b5:3c:da:ae:1e:e8:41:1f:c9:73:bc:
7f:5f:6c:20:87:c1:8d:ff:8a:f2:6b:e0:73:a5:54:
fd:b9:e7:dc:b0:a8:47:ca:de:5b:64:98:91:a3:d8:
51:bc:ff:21:fa:e9:b8:f2:d7:a7:c0:b0:bd:b5:6f:
fb:1e:7c:d5:d0:78:37:f1:10:bc:9f:38:97:78:40:
47:3b:17:91:d1:b4:75:71:4f:f2:59:2b:22:77:b7:
10:1d:e6:3a:64:09:77:dc:15:f4:e5:3e:55:6e:e8:
45:95:ff:3b:c6:1e:4f:79:e5:f6:05:ea:34:75:71:
59:08:25:36:20:0b:22:fd:1a:a3:68:d9:1c:a2:d6:
8c:33:e6:9b:f9:ff:21:1a:8a:b3:86:27:3c:1a:25:
51:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8E:45:C9:D0:FE:65:F8:3C:0D:DE:5F:1C:98:B3:B4:6D:39:6A:83
X509v3 Authority Key Identifier:
keyid:FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:42:b3:78:fc:42:06:01:92:dc:04:ff:c7:c4:76:93:ac:00:
21:09:69:54:73:14:14:7a:66:04:11:f4:1d:3a:06:b9:ff:b0:
16:a9:2f:2f:74:46:49:a5:91:8f:45:8d:a8:08:a4:91:84:1c:
d5:23:ef:0c:8c:99:d9:98:04:d5:82:6b:72:f6:c3:36:a3:e7:
c0:30:b7:b6:cd:de:bb:63:9f:7e:e7:95:be:6c:75:f0:db:84:
85:a7:ba:35:80:ab:a3:cd:39:32:65:6c:ab:84:d5:3d:f4:a5:
03:39:9d:8b:aa:88:28:aa:65:41:36:56:cf:04:df:4e:8e:73:
30:94:31:06:77:ff:e9:07:bf:cf:e6:96:5e:f8:a4:7e:13:f0:
bd:4e:9d:f5:0a:a5:dc:bc:f5:59:9e:ce:93:09:e6:85:02:b6:
ad:70:f4:30:5c:17:b7:cc:09:ca:70:11:47:d8:41:1b:3e:87:
b6:d5:d7:6f:15:1f:39:9a:85:86:d2:33:53:0c:06:f5:f1:09:
50:b4:f1:05:e5:7d:07:27:e0:3c:ce:04:4d:f3:b8:6b:f3:fe:
c7:8b:20:12:3e:f8:63:4a:bd:35:45:3e:07:77:74:03:e1:f3:
9d:bf:9d:f7:68:39:4a:25:2b:e1:59:9f:4d:93:3d:ea:f4:e4:
a9:c6:9a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:40:39 2025 by rpki-client