Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
File: 1-xqBDjqxlktE7LN3g0CyZtvaESY.mft (raw, json)
Hash identifier: BVroMCsCP8773pwdXSq1QkEDJKD9mhkUro3imhdbMt4=
Subject key identifier: 05:9F:17:3E:67:88:91:3D:E4:A0:68:69:B7:3E:6B:DE:AC:E0:FB:BB
Authority key identifier: FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
Certificate issuer: /CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Certificate serial: 019918AD692D8B722708C6030ABE1BA1AA37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
Manifest number: 1670
Signing time: Fri 05 Sep 2025 07:00:41 +0000
Manifest this update: Fri 05 Sep 2025 07:00:41 +0000
Manifest next update: Sat 06 Sep 2025 07:00:41 +0000
Files and hashes: 1: 1-xqBDjqxlktE7LN3g0CyZtvaESY.crl (hash: dG7k6WVlt4q1GA+YS7SCh4eb+kR0wgE+7b1+zl2vTKI=)
2: VsFuiofejDNus4q-XJuiSHwgNg0.roa (hash: 5/WoOYXAxKPBmuAPhmhS3e5eFCmzTCokgMSG9illRVc=)
3: dERFn8-Y3CpN0nk9-2z0qZhw3lA.roa (hash: MMTvQ8GZkYazTAxyoZRT7syb2AL1b5sM3xApJFFdT80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:ad:69:2d:8b:72:27:08:c6:03:0a:be:1b:a1:aa:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Validity
Not Before: Sep 5 07:00:41 2025 GMT
Not After : Sep 6 07:00:41 2025 GMT
Subject: CN=059f173e6788913de4a06869b73e6bdeace0fbbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2a:ba:a5:73:18:a6:d5:d4:9b:81:5a:0c:b9:
d6:6f:4b:c0:20:e0:85:87:37:d7:bb:50:1a:80:0b:
be:4e:a4:2d:d4:8f:19:1d:5c:7e:1f:0d:1c:13:15:
24:6a:9a:70:b5:fb:ad:7f:f9:bc:a4:3d:3d:de:6f:
42:45:f8:74:f0:55:b0:8c:33:f6:b5:7c:9c:12:c6:
d9:1a:60:bc:46:16:f4:d0:df:80:f0:10:a6:67:d6:
77:b8:61:02:c8:63:fa:bf:60:24:25:31:26:2c:2c:
68:0f:ee:af:2c:ff:79:80:69:56:fe:2a:50:06:1b:
cd:b5:97:a8:19:c0:b7:1a:dc:8c:c7:be:94:26:80:
df:f3:58:05:87:1d:20:32:c0:21:a1:52:e8:46:ae:
90:bd:31:6f:c0:02:21:ca:95:83:12:f2:d3:70:de:
dd:aa:60:9d:8e:31:e3:1d:cc:6b:f2:5a:91:dd:2f:
16:6b:b7:a0:d3:7a:ad:fc:39:d1:86:91:8e:b7:20:
ab:96:b9:e2:e9:ea:fc:35:e6:41:ca:66:17:3c:34:
fd:e3:ed:9f:3e:77:61:1e:22:7e:39:55:12:bd:4a:
cf:85:b4:bb:74:b2:d1:88:d5:ea:c4:dd:c9:15:46:
52:1e:d5:04:80:6a:d3:38:15:3e:71:63:45:e8:04:
d2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9F:17:3E:67:88:91:3D:E4:A0:68:69:B7:3E:6B:DE:AC:E0:FB:BB
X509v3 Authority Key Identifier:
keyid:FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a1:3e:15:c5:03:44:7d:78:82:45:3c:4b:25:d0:3c:69:39:
6b:0c:a8:7f:17:2f:75:4f:01:4d:26:99:4d:e4:40:a4:f7:32:
eb:00:da:09:9d:4a:a9:48:b0:67:95:85:fa:e0:04:de:e2:4f:
0c:71:fc:66:13:85:cd:d4:92:ef:63:a3:ae:25:6c:d4:0c:70:
19:73:ff:05:43:cd:58:a3:ed:6c:6d:00:59:c4:71:db:74:49:
5e:3c:59:61:9a:a9:36:6b:71:93:dc:62:64:8a:4b:4b:3c:44:
df:ba:80:4d:1f:6d:2f:fb:7d:ad:fc:2e:c1:ca:02:94:4a:24:
a9:bf:63:98:c9:8e:a6:ec:19:ae:13:c5:ac:31:54:7a:c1:07:
67:08:37:9e:39:c6:9b:00:5f:42:9a:84:c9:e4:8f:1b:9c:a3:
e5:be:af:f2:3f:48:04:98:3a:f0:50:ca:14:4b:c5:9e:aa:80:
9b:2c:ba:2a:d0:42:4c:3d:23:01:8c:09:e0:c8:c6:db:87:48:
ed:49:ba:6b:52:89:8d:9a:c9:42:68:65:cc:bc:eb:f4:d9:8b:
24:d4:13:16:b1:e5:7d:93:7d:e6:d0:87:dc:ce:c3:23:e3:60:
db:73:e3:41:a8:60:a3:dc:cc:18:3b:18:c2:15:4a:7c:f8:fd:
a2:fb:08:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 11:33:08 2025 by rpki-client