Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
File: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft (raw, json)
Hash identifier: fNNKZK/ebZ+UsTcR1k6MP7qFpHCWAWAov/25k1zg+J0=
Subject key identifier: 9A:90:11:27:C5:3D:A3:7A:5E:74:85:A2:A1:26:CB:15:AB:0D:79:6E
Authority key identifier: F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
Certificate issuer: /CN=f970877985b0c5cf69167c91e837424c47d9a425
Certificate serial: 0197488CAA7663ECD928129803C2A43D0C6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
Manifest number: 0A85
Signing time: Sat 07 Jun 2025 04:01:07 +0000
Manifest this update: Sat 07 Jun 2025 04:01:07 +0000
Manifest next update: Sun 08 Jun 2025 04:01:07 +0000
Files and hashes: 1: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl (hash: tKxZfYE+h5UqMCNwmz4XVIj71c09o8GqGFG54yvgURk=)
2: dtRhkrrPSJQXLxdge4ROTUVkWDI.roa (hash: LG59mLDEL6OnHYs5spoH7ylFHPQpE2H4qHB7zS4ODlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:aa:76:63:ec:d9:28:12:98:03:c2:a4:3d:0c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f970877985b0c5cf69167c91e837424c47d9a425
Validity
Not Before: Jun 7 04:01:07 2025 GMT
Not After : Jun 8 04:01:07 2025 GMT
Subject: CN=9a901127c53da37a5e7485a2a126cb15ab0d796e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cc:c5:f9:e3:d6:55:be:78:8e:7d:ae:f1:db:
cd:52:c4:66:80:1d:e2:ff:e3:ce:51:c0:1b:fe:a1:
52:0d:31:b1:67:4d:00:c4:ff:9d:6c:92:9e:fa:00:
0e:72:5a:8f:7f:ed:85:9b:05:ac:86:01:d1:22:f0:
39:be:65:3c:a0:9b:b0:70:50:02:7d:46:70:2c:56:
a4:f2:d9:f4:f7:95:c9:5e:44:fb:20:92:a1:c6:2c:
d7:f9:a3:93:d3:b1:31:84:fb:6d:1e:89:bf:a3:9e:
7a:2c:57:ed:45:3d:26:4a:b8:44:11:78:70:ee:d8:
03:ef:86:c0:83:e4:26:35:5e:1d:fc:fc:dd:da:d6:
5c:81:ff:1d:59:b3:66:da:ac:ea:32:fd:11:95:a4:
cb:28:99:97:bd:9b:39:37:5b:50:8f:70:dc:4c:e5:
57:e9:55:e0:3a:70:18:d7:a7:5c:6b:7c:94:a6:63:
bb:3c:f8:61:5f:f1:3f:4a:0f:43:26:ef:5d:ec:9e:
0f:8d:d1:79:1d:1c:47:24:24:1c:43:f6:60:9c:16:
56:8e:88:23:c1:55:55:23:b9:74:d1:4e:ce:be:c3:
29:a4:88:cd:94:36:ee:88:0a:16:a2:f1:2b:45:fd:
1b:1b:14:48:0e:4a:39:f5:83:9e:af:87:ee:32:99:
5a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:90:11:27:C5:3D:A3:7A:5E:74:85:A2:A1:26:CB:15:AB:0D:79:6E
X509v3 Authority Key Identifier:
keyid:F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:1a:d1:a0:3f:e3:e0:7e:87:2b:2c:51:9b:de:00:1b:73:15:
ab:ce:ae:82:81:24:8a:a9:46:d0:1d:f6:16:52:16:de:78:94:
5b:e4:be:33:cd:1c:24:eb:25:f2:31:14:5f:5f:43:11:16:37:
2a:c9:fa:9d:67:cd:a3:36:a3:3d:ea:dd:bb:72:9a:5d:85:d5:
71:78:23:ac:13:be:21:9c:bd:89:5b:c4:63:fe:c3:35:93:44:
a3:b6:46:23:e9:9e:12:93:6d:a3:93:90:2a:32:ba:13:72:ad:
a0:04:d8:bf:e8:fc:c4:97:e2:4d:cc:92:b5:dd:61:21:84:f4:
9a:ef:0f:ba:86:1a:f6:34:04:28:2c:24:18:12:35:16:08:c3:
68:b7:1a:f7:a8:fa:ad:1f:e9:32:9f:74:80:46:f2:49:81:dc:
a2:a0:77:be:9f:89:0f:bf:4f:04:bc:50:d4:2b:63:cb:90:71:
3b:2c:0a:1c:f7:04:d5:aa:33:c1:85:f6:3a:b1:18:67:e3:0b:
0d:ea:7b:66:dd:77:d0:b8:65:e9:8e:cf:a9:79:73:21:e2:71:
9b:f4:00:f0:51:84:a8:ae:78:0b:a9:b4:a0:df:e8:77:f1:04:
03:e9:59:ae:8a:fc:90:8f:98:35:5e:a5:c0:d6:fa:04:02:68:
ca:d3:fa:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:46:21 2025 by rpki-client