
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
File: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft (raw, json)
Hash identifier: gkV9y/xvtKfeLv3S5NlVXGv2E5G3SuKm3j33hYS/XJs=
Subject key identifier: 44:15:1B:72:69:C8:E7:25:AA:0C:B0:5D:4C:D9:32:69:A0:2D:F5:C9
Authority key identifier: D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
Certificate issuer: /CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Certificate serial: 019921B195AD9C38E48D763C012C042A4AE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
Manifest number: 0BA1
Signing time: Sun 07 Sep 2025 01:01:50 +0000
Manifest this update: Sun 07 Sep 2025 01:01:50 +0000
Manifest next update: Mon 08 Sep 2025 01:01:50 +0000
Files and hashes: 1: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl (hash: CZbqvcQZUU6NmAV5MvRUtTocz0LeN4R9DQ4B7CM1cAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:95:ad:9c:38:e4:8d:76:3c:01:2c:04:2a:4a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Validity
Not Before: Sep 7 01:01:50 2025 GMT
Not After : Sep 8 01:01:50 2025 GMT
Subject: CN=44151b7269c8e725aa0cb05d4cd93269a02df5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:74:f1:3c:88:77:ec:01:ff:08:a0:66:77:27:
2b:0a:02:68:ff:95:04:88:56:b1:d2:f3:f3:81:fe:
5c:8a:0f:dd:bb:69:5f:5e:18:62:27:51:16:ac:ab:
cc:3c:be:82:08:ff:b8:f8:3f:14:cc:7e:c8:a7:a3:
07:56:cc:53:22:2f:ce:34:60:f9:36:9b:95:4f:35:
1c:06:11:86:32:32:e3:1f:26:2e:4c:3c:84:38:79:
d4:d7:11:ac:d5:ed:88:ec:31:76:c0:45:1e:f3:d0:
2b:4e:d6:19:ef:4f:58:ac:ca:b0:29:39:dd:77:1c:
ed:b5:97:53:84:4b:20:ab:f9:05:b3:cc:9e:ba:46:
5e:43:e8:41:98:5f:72:5f:39:22:ec:6c:0f:4e:8a:
e8:03:ec:87:dc:36:dd:a8:70:4f:bc:98:ad:48:d5:
a2:a8:5b:d7:a0:37:74:a0:20:55:41:c0:61:7b:bd:
c9:bf:24:97:14:49:31:bb:ff:2c:70:89:28:14:ff:
c6:5f:9e:4c:e3:87:99:fd:9f:cb:10:3b:23:ae:b0:
0a:72:39:22:66:a5:dd:64:3a:28:fc:c5:ef:4c:52:
f0:cd:46:82:b9:1d:a3:59:49:ca:69:4d:33:f0:9a:
4b:27:5b:4a:68:cc:ea:98:34:37:0b:5c:bf:03:e6:
97:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:15:1B:72:69:C8:E7:25:AA:0C:B0:5D:4C:D9:32:69:A0:2D:F5:C9
X509v3 Authority Key Identifier:
keyid:D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:40:59:3a:a4:05:6e:52:68:17:38:20:43:8b:6d:13:85:26:
65:1d:de:83:1e:b0:ad:c5:21:07:19:ee:d7:6d:c1:99:3b:11:
91:5b:12:39:78:6e:85:3e:c3:51:f3:60:19:cd:9c:61:59:b8:
09:3a:07:49:cd:45:93:3e:19:47:f3:58:4f:ed:80:cc:72:c9:
04:b0:ff:39:95:d4:19:84:14:e2:55:d5:18:18:3a:e6:d7:07:
75:20:89:aa:7e:b9:17:28:27:7a:9f:55:a5:8f:4f:98:b0:c5:
80:a8:0d:5e:28:42:41:94:73:d2:3c:12:b3:31:71:63:2b:58:
5e:31:5a:84:ee:4d:5d:37:dd:a8:57:96:a7:7e:d7:db:13:e4:
bd:60:e5:29:66:5f:cb:1f:4d:6d:e1:c2:f4:51:48:07:7f:78:
0b:b3:d5:15:61:ab:e5:e2:f5:34:8a:24:2e:58:b3:cf:3d:3a:
61:3d:b2:74:db:43:ed:1f:96:6e:e5:1d:10:9e:63:25:8b:28:
d7:f8:fa:9d:58:76:01:1a:a2:15:3c:df:6d:03:3d:ce:de:28:
0f:a8:34:43:32:8e:f5:a9:f6:68:33:18:5f:48:17:8e:34:bb:
0f:2f:77:ea:f9:55:1d:e6:d8:58:24:bb:38:60:2b:b9:8d:b4:
e8:d0:b4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:35 2025 by rpki-client