Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
File: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft (raw, json)
Hash identifier: DasyGIswR9FkG3taSpEfVaSKIoejdq1lV1TlC18LskQ=
Subject key identifier: E7:74:1F:31:70:03:2A:61:70:5E:66:7E:1D:08:BC:A1:C2:7D:F4:9D
Authority key identifier: FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
Certificate issuer: /CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Certificate serial: 019745C283A0C6D21646C57D85CE62095C35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
Manifest number: 0370
Signing time: Fri 06 Jun 2025 15:01:04 +0000
Manifest this update: Fri 06 Jun 2025 15:01:04 +0000
Manifest next update: Sat 07 Jun 2025 15:01:04 +0000
Files and hashes: 1: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl (hash: CDVJC/cGYPC3HijIL1FvjZq7drbCKfJIUbZbHI5nsNU=)
2: RfQdtLKXYLdrItaAhtareV1d0X8.roa (hash: 2v2M5d2SJj08W++N719Wz/Nxup00xLX8rohfuP7PYPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:83:a0:c6:d2:16:46:c5:7d:85:ce:62:09:5c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Validity
Not Before: Jun 6 15:01:04 2025 GMT
Not After : Jun 7 15:01:04 2025 GMT
Subject: CN=e7741f3170032a61705e667e1d08bca1c27df49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:41:b9:8e:39:7d:98:92:26:37:7c:c5:33:5b:
01:f1:f1:9e:c8:f1:bb:13:76:74:64:1f:be:c7:68:
87:38:82:e3:9b:a1:e2:08:4f:44:5c:30:f7:63:bf:
de:49:f0:68:b4:96:a0:59:43:a6:f8:c4:5a:c3:fe:
f2:20:0e:1d:62:2f:98:e0:bb:71:39:a9:5d:47:99:
0c:23:7d:18:a3:78:b5:05:4c:c2:ad:3d:bf:93:b9:
c3:fd:19:f8:51:dd:89:66:83:ae:3e:92:96:9c:7e:
ac:d6:54:79:a9:76:a8:21:09:ef:2b:92:1b:69:7a:
4d:80:89:d7:0e:fa:9e:21:90:b6:43:fb:2e:97:00:
d9:66:bb:3c:f9:4a:0f:1b:fc:67:76:b3:23:fb:a4:
31:af:fb:1d:b3:8b:82:80:92:92:cf:60:f3:9b:bb:
4d:b1:1e:57:0b:64:9d:c4:d2:8d:20:71:09:c0:d5:
96:3a:c1:89:07:f1:e0:ae:1a:29:99:2c:fd:81:95:
f5:92:c8:e2:5f:c1:06:d6:3c:ef:5d:f3:37:91:5e:
88:04:a5:f1:7c:cc:09:38:5e:d1:0e:fa:29:77:a8:
22:45:24:1a:dc:b0:31:66:aa:eb:76:03:cc:d0:51:
c9:74:60:80:6e:06:93:ec:ba:fc:f2:30:84:ba:5f:
e3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:74:1F:31:70:03:2A:61:70:5E:66:7E:1D:08:BC:A1:C2:7D:F4:9D
X509v3 Authority Key Identifier:
keyid:FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:cf:2f:df:12:9a:0c:0a:2c:98:93:ba:d1:64:20:8f:42:08:
9d:a4:5a:35:06:42:11:1a:5f:1d:78:d2:99:ae:6f:3d:5f:99:
43:aa:e5:29:1f:fd:16:9a:9b:a5:28:32:1a:5f:e3:0b:62:34:
df:90:21:ad:13:ed:f1:1f:73:33:ad:54:f8:aa:85:7e:39:ee:
71:dc:d6:90:02:98:e7:10:31:cf:10:bf:a7:95:b3:59:f7:2c:
f9:62:c1:3f:b3:79:a8:9e:c8:4d:e3:36:ec:84:ab:9f:e7:b2:
03:19:ba:1b:f4:b6:a3:85:54:04:2b:d6:9c:5b:38:82:77:45:
b5:67:7a:5a:15:20:c3:ec:f3:e5:ae:48:5c:9b:52:31:a1:2e:
9c:a8:9a:2f:41:f9:23:22:4e:2d:2d:60:3e:07:1c:3c:c2:b4:
82:5c:29:cd:ca:40:57:13:e6:14:91:ed:73:b4:73:0e:18:b1:
86:c6:35:d5:d8:28:ef:2e:99:8e:5a:d1:ef:11:f7:fb:9f:60:
6e:38:14:42:45:f5:de:43:9b:bb:88:8d:09:68:91:b7:26:f7:
84:81:c9:dc:fe:50:85:81:c7:9e:dd:17:69:54:fb:8e:dd:f8:
bb:b2:c5:22:5b:80:46:1f:71:1f:b0:cd:52:2f:dd:a2:e1:6d:
f1:0d:57:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:13:17 2025 by rpki-client