Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
File: 1-XQtd30IJBai2EfUADozG1DiQj4.mft (raw, json)
Hash identifier: kLKU0a3mD/MpcLRtfwGEuiLoZuLd1NoN57UXtNsK/GU=
Subject key identifier: 7F:D4:91:AF:8B:F6:A6:05:AF:6A:B2:83:7D:3A:F5:D3:61:D4:97:23
Authority key identifier: F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
Certificate issuer: /CN=f9742d777d082416a2d847d4003a331b50e2423e
Certificate serial: 019747798DBBE29A43ABC5860FD3DD856D01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
Manifest number: 153A
Signing time: Fri 06 Jun 2025 23:00:37 +0000
Manifest this update: Fri 06 Jun 2025 23:00:37 +0000
Manifest next update: Sat 07 Jun 2025 23:00:37 +0000
Files and hashes: 1: 1-XQtd30IJBai2EfUADozG1DiQj4.crl (hash: +2zrgByfggot1IOvwyhYuROP9wU1AkscaB5cqj8SdF4=)
2: 1-kqFnbhB2LCPJU3KtgP3OhHNEbM.roa (hash: sYai5O0I+e4s9fEjeNx81CRmECPgFmQDJeWhDrbRAeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:8d:bb:e2:9a:43:ab:c5:86:0f:d3:dd:85:6d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9742d777d082416a2d847d4003a331b50e2423e
Validity
Not Before: Jun 6 23:00:37 2025 GMT
Not After : Jun 7 23:00:37 2025 GMT
Subject: CN=7fd491af8bf6a605af6ab2837d3af5d361d49723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:74:83:25:31:5d:b8:dd:4b:f1:3b:c8:5b:59:
d7:39:27:96:98:c1:32:88:c0:fd:2d:00:3a:d6:33:
51:67:fb:95:06:46:42:7c:58:49:7c:27:b7:db:ab:
82:5a:fc:01:e9:04:1d:c1:57:22:ad:a8:c7:27:ce:
74:00:bc:f6:bf:49:16:6b:78:73:24:aa:81:69:45:
87:e2:85:e1:fe:e8:da:05:71:ed:ee:54:35:e0:1c:
d8:dd:53:9b:81:c7:a6:0c:44:47:05:2f:98:2d:9f:
f2:f8:43:c6:85:41:cc:cb:1a:d9:3d:f7:14:70:1c:
e5:98:23:0d:43:10:42:05:4c:4b:4f:f5:7a:ab:82:
f9:39:1c:5e:c7:37:c2:f4:d5:39:6f:db:f4:5d:43:
78:42:be:37:e2:4e:e6:18:59:bd:e0:95:ac:c6:9f:
df:fc:eb:a3:b9:58:e8:a8:b9:5d:8d:72:7d:bd:47:
a9:10:88:99:cc:b2:0e:cf:18:6d:bd:73:de:0a:07:
e3:e6:fb:e3:48:ba:f7:73:89:48:0c:da:0f:e8:4c:
19:cf:a2:71:70:20:ce:b7:e8:cf:eb:1e:99:ad:8f:
aa:68:25:65:b4:64:4b:e9:bc:1c:f1:63:a9:ba:a0:
65:cc:2f:42:92:08:33:40:d2:01:b4:47:fb:bd:08:
fe:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D4:91:AF:8B:F6:A6:05:AF:6A:B2:83:7D:3A:F5:D3:61:D4:97:23
X509v3 Authority Key Identifier:
keyid:F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:2b:05:27:c0:c2:86:91:33:ed:09:76:e4:8c:64:86:7b:18:
f7:f0:67:04:95:90:39:36:7f:98:74:47:14:e8:8c:d5:81:8e:
5f:5d:a0:5e:78:42:24:04:ca:e7:59:b6:48:58:1d:fa:5c:c0:
d7:2d:bd:fa:27:b1:09:2e:7e:b7:38:8d:90:03:77:1d:a3:0a:
d2:04:ef:cb:4a:26:29:f7:69:26:eb:4e:ba:65:c7:a7:f5:d3:
d6:70:cd:8e:04:0f:71:f8:85:92:f3:88:84:14:c0:cc:e4:30:
2a:56:a2:c5:24:aa:27:ea:34:59:cb:8f:fa:a3:ea:2a:85:83:
38:47:9e:a5:85:24:69:2d:b0:67:d4:6c:de:9b:1c:ac:f1:42:
32:f6:68:3d:b5:e0:cc:86:a7:02:ed:c1:ba:e5:9f:c3:db:f8:
72:0f:63:80:57:3e:b2:95:59:1c:52:25:ae:aa:2c:81:0f:ac:
4f:3b:6d:89:cc:a1:8b:fd:4c:0c:cd:a3:42:98:ae:30:2a:fd:
18:57:42:30:ef:0c:15:ef:12:90:34:60:17:be:bd:0f:74:a5:
9e:d4:5c:70:29:14:80:dd:f3:b8:f4:91:22:f0:f8:2a:05:08:
b7:21:58:39:34:f4:08:3c:c4:a1:e3:e7:7a:70:1a:70:95:8a:
a1:7b:4a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:04:49 2025 by rpki-client