Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
File: 1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft (raw, json)
Hash identifier: BmjA6z3T5+Ya6sFk1YllmwY7yI0ksN/f1aVB2a4sKmk=
Subject key identifier: F1:35:5A:13:D5:C3:50:F6:C8:27:43:87:A1:0B:4D:11:70:76:F1:83
Authority key identifier: D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
Certificate issuer: /CN=d716209d7def98a2bb34977f65009b3520da256e
Certificate serial: 0199315A7B0A354ECA3690A6FF84A425B67E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
Manifest number: 0468
Signing time: Wed 10 Sep 2025 02:00:37 +0000
Manifest this update: Wed 10 Sep 2025 02:00:37 +0000
Manifest next update: Thu 11 Sep 2025 02:00:37 +0000
Files and hashes: 1: 1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl (hash: 8siQ9LA5Ft1wzbOq7mcItevezSEdatFiM1aFI0ONPPk=)
2: OWBphSnGzM3NfjUoWcPjDVRSYgc.roa (hash: Z7ei4v1I8GPTdYYpZ1qHi9JiBDA34PMAtoRsAnkH2B0=)
3: UjWNhRVDS1dQtyrLqu8XE8cVl2c.roa (hash: VP+asIeQeiE6n/s3d0KCeiS8nBmXkURRsgcwQHE149Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:5a:7b:0a:35:4e:ca:36:90:a6:ff:84:a4:25:b6:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d716209d7def98a2bb34977f65009b3520da256e
Validity
Not Before: Sep 10 02:00:37 2025 GMT
Not After : Sep 11 02:00:37 2025 GMT
Subject: CN=f1355a13d5c350f6c8274387a10b4d117076f183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:70:e3:ef:ee:e7:47:b2:a9:69:36:e0:d3:d0:
ee:b7:4a:ce:d0:97:8f:23:ed:f6:cb:a7:80:36:06:
45:c3:3d:58:0b:cd:49:c5:73:01:5a:11:65:91:b6:
30:d5:0b:96:9e:2d:85:fd:d5:31:9b:5c:f4:f3:a6:
b5:61:d0:a9:b9:49:89:62:49:32:87:dd:86:f3:a0:
fa:b8:f7:d3:1f:46:e0:35:3c:04:47:dc:e4:55:7e:
ad:82:c9:22:25:58:22:d3:fb:c3:50:98:19:92:f4:
de:3b:1b:19:ca:cf:ed:e7:21:d0:80:9a:47:aa:3c:
64:3a:d8:5a:97:eb:7d:37:9b:52:ac:05:b5:87:79:
90:af:dd:53:34:97:51:d7:e5:1c:d1:3e:5b:20:0b:
7f:09:c5:7a:3c:88:ef:5d:15:6b:b4:bb:ab:94:67:
9a:ad:df:1c:be:44:66:06:46:8f:cf:71:df:7d:b7:
20:c1:f8:51:d0:00:ac:54:41:72:52:e4:10:14:53:
44:db:96:21:b7:d2:b3:24:bf:48:9a:26:15:00:58:
01:cc:85:b4:58:99:45:26:80:b4:f9:71:88:84:45:
23:5e:87:76:60:43:ea:aa:6a:b4:0c:b8:c6:67:be:
f7:a9:db:f1:b1:93:8e:25:c7:cd:f4:17:e4:e6:25:
82:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:35:5A:13:D5:C3:50:F6:C8:27:43:87:A1:0B:4D:11:70:76:F1:83
X509v3 Authority Key Identifier:
keyid:D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:df:f4:a3:75:56:ff:f6:b7:28:16:2c:75:08:08:d5:35:f9:
a7:bd:03:62:df:b7:13:9f:a7:fa:b1:13:df:3c:cb:7e:5f:54:
59:bb:39:9d:89:26:c0:1e:9d:fc:76:51:fd:24:20:a8:e6:46:
85:86:e2:39:9d:fa:8c:c8:df:80:ea:d5:0f:21:e9:e5:f3:e7:
6f:13:87:e8:8b:87:fd:fc:4c:f5:1c:dd:21:93:c3:47:eb:a0:
9c:8a:2b:54:24:ab:47:10:b0:ee:80:26:f6:ca:4d:c9:5e:08:
e0:9c:19:f8:4a:fb:30:ed:7b:bc:01:84:94:1b:2e:e0:6f:4e:
1e:ae:69:50:13:f8:22:ef:52:d4:42:e7:58:ee:97:6e:44:f8:
36:18:9c:d2:a1:b1:8c:9f:c4:e3:62:c6:0e:eb:a0:d0:7d:68:
78:c0:bf:69:e9:60:29:12:74:e1:d4:33:77:95:8a:fd:11:ea:
13:1d:a5:58:aa:1e:4a:b2:a1:cf:8e:0c:0a:9b:eb:a9:23:89:
03:f3:a4:50:83:0e:92:d1:76:77:f0:b8:51:99:3e:1e:2b:ed:
7d:37:56:07:a4:ea:c5:09:fa:84:a0:85:d7:b1:88:3e:db:1a:
a0:48:1a:0b:dc:51:95:37:2a:11:bf:e7:aa:6e:6c:7f:45:cb:
16:ac:92:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 12:46:00 2025 by rpki-client