Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
File: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft (raw, json)
Hash identifier: ErVj09iOgAMpRfmTk1Nu9/PmDpfmTDZ4pw/nfAY2AXU=
Subject key identifier: D5:15:10:B3:F7:30:FB:25:2A:79:81:87:CC:F7:37:F0:2B:A2:D5:06
Authority key identifier: F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79
Certificate issuer: /CN=f973209625e2a03ddeecf91bb480548e5729d479
Certificate serial: 01976DAC0DA06AC5A3A0ADF519E48B666DF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 09:01:21 +0000
Manifest this update: Sat 14 Jun 2025 09:01:21 +0000
Manifest next update: Sun 15 Jun 2025 09:01:21 +0000
Files and hashes: 1: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl (hash: SoawrGLJ44h3pConkCcNSk0WX3gz78McfGxVAyxyP2U=)
2: l3JzatKnSb-qTPQjQ9VOzx8MD7g.roa (hash: 40hMQclA6AyvTYjGgbc8RhGg1fGmdxgMO6uT9Avjx2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ac:0d:a0:6a:c5:a3:a0:ad:f5:19:e4:8b:66:6d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f973209625e2a03ddeecf91bb480548e5729d479
Validity
Not Before: Jun 14 09:01:21 2025 GMT
Not After : Jun 15 09:01:21 2025 GMT
Subject: CN=d51510b3f730fb252a798187ccf737f02ba2d506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:12:73:44:76:7a:25:a0:cc:d9:ba:06:c8:19:
3c:fb:e4:79:9d:03:66:95:b0:b7:cb:ef:bd:ae:0e:
f3:26:f1:de:92:28:af:0f:66:70:4e:c2:c7:a5:82:
ee:b4:99:5e:d8:f9:8a:75:37:5c:c9:6f:08:06:c6:
66:b0:0f:10:87:6d:03:70:70:bd:92:29:9a:f0:6f:
db:de:05:89:5d:57:91:b3:f0:ce:d5:cc:b3:e5:bd:
f5:91:41:2d:2e:ba:cb:ec:3f:99:ed:7f:77:3f:f7:
88:69:ac:ac:7a:ab:59:87:1b:5a:b9:1a:da:c6:87:
bd:84:7d:d6:37:21:a5:65:ae:a0:1d:e0:4e:d3:b0:
b6:fe:7f:63:90:02:ab:d0:58:26:c6:87:71:47:85:
d4:e8:a6:d0:20:f6:97:95:67:77:a4:55:ae:3d:95:
93:18:1a:f2:90:c6:1f:2e:93:9d:a5:65:c0:74:46:
c8:bb:3a:4e:1e:c2:63:e9:fb:50:2a:23:56:fc:0a:
50:b3:42:2a:47:5e:98:ed:6c:16:79:ef:dd:fd:e6:
c4:46:25:5e:99:66:c4:cf:52:6d:85:8a:a4:a0:7e:
dc:b1:12:01:09:9e:69:d5:5f:7a:35:84:be:5d:b4:
02:d9:81:82:b1:12:0a:37:28:8e:7e:60:5d:3c:7a:
ae:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:15:10:B3:F7:30:FB:25:2A:79:81:87:CC:F7:37:F0:2B:A2:D5:06
X509v3 Authority Key Identifier:
keyid:F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d3:58:48:65:7c:e6:d4:b7:84:60:88:4e:92:33:6c:c1:44:
c3:87:16:71:fc:05:22:c4:66:c4:9a:cd:4f:40:42:a0:fd:43:
6e:0d:7c:e0:0b:6f:50:94:a1:0b:08:24:25:c7:f8:6f:ce:97:
7d:26:4e:4f:9e:54:a1:e9:57:9b:63:df:3a:f8:75:71:86:a0:
cd:36:b6:31:cb:a2:a7:79:10:ec:cd:a0:1a:7b:13:84:3c:2f:
28:fb:bd:b2:51:91:d0:e0:71:ab:04:70:e4:41:db:f3:72:f1:
d0:ad:1f:86:63:fa:51:e2:07:23:5d:d2:52:cd:c9:32:6a:b9:
37:01:2e:fa:13:70:55:59:4b:4b:e0:53:e3:f8:64:c1:c0:cd:
05:03:51:4d:da:bb:02:8c:b0:9d:eb:c6:72:e6:02:dc:a2:04:
b1:8f:51:6f:fc:5d:e4:6a:18:61:45:5f:f3:30:e6:19:db:d5:
14:d7:1c:64:4f:c6:ef:ab:67:84:3e:db:7f:9e:98:a7:a8:5c:
b4:c4:e5:e9:91:36:f5:ba:5a:a4:03:81:67:21:53:ef:0b:22:
40:25:70:3a:90:17:14:c0:61:6d:25:06:1c:86:69:b9:4b:f2:
4f:94:81:a2:f5:95:c7:f5:5f:5f:02:c7:a2:fc:59:99:e3:78:
f8:ea:ba:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:39:50 2025 by rpki-client