Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
File: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft (raw, json)
Hash identifier: Mfds+5dFPnxoFBz1pMTYN3sqQrvSKCA37AwrRNBl8xo=
Subject key identifier: DE:B9:E6:A2:EF:1C:11:61:C4:75:F3:44:FA:E1:65:77:61:DC:0F:0D
Authority key identifier: F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79
Certificate issuer: /CN=f973209625e2a03ddeecf91bb480548e5729d479
Certificate serial: 019887A05D2C1416FA126BB29BBE4B5F23BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
Manifest number: 161F
Signing time: Fri 08 Aug 2025 03:01:30 +0000
Manifest this update: Fri 08 Aug 2025 03:01:30 +0000
Manifest next update: Sat 09 Aug 2025 03:01:30 +0000
Files and hashes: 1: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl (hash: yiiAgKqz9MgwzIw0fKhXvz825foRSHv2I2TUtRkMMUY=)
2: l3JzatKnSb-qTPQjQ9VOzx8MD7g.roa (hash: 40hMQclA6AyvTYjGgbc8RhGg1fGmdxgMO6uT9Avjx2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 03:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:a0:5d:2c:14:16:fa:12:6b:b2:9b:be:4b:5f:23:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f973209625e2a03ddeecf91bb480548e5729d479
Validity
Not Before: Aug 8 03:01:30 2025 GMT
Not After : Aug 9 03:01:30 2025 GMT
Subject: CN=deb9e6a2ef1c1161c475f344fae1657761dc0f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7b:65:45:8d:f6:f9:f8:9c:aa:69:34:54:00:
6f:a2:68:f1:82:dc:2e:6c:55:b7:e2:87:95:a1:88:
8b:2d:3d:65:f2:9c:83:1a:54:6c:5f:da:0a:3e:7f:
73:ce:9a:b5:6c:ea:e3:d5:69:de:9e:b4:cd:9f:8f:
2b:4d:36:9b:9a:31:b3:91:e3:31:05:e8:89:b5:66:
bb:38:76:8e:0b:44:62:d4:5a:a9:35:7e:55:f1:52:
4c:1b:5b:de:fb:3e:35:88:a6:52:8a:de:c3:4f:6d:
8d:41:59:d5:f1:15:61:74:bb:5a:78:44:fc:ab:e5:
8f:ac:c7:7c:0d:75:60:ed:93:11:6c:a4:e2:03:10:
c5:fe:90:a4:d4:69:0a:a2:ff:8f:68:07:fc:9f:16:
f6:5e:34:0d:31:b3:c5:9a:0e:e6:d9:ec:d8:7b:9c:
1d:05:48:58:57:fe:ea:12:f3:f2:dd:1a:c6:5e:9f:
ab:ef:01:b9:4b:32:f2:9e:6f:37:14:16:69:d1:48:
ea:b7:fd:6c:ab:f5:7e:dc:ea:24:1e:73:5c:6c:a8:
4f:ed:92:2c:c6:8c:0a:a2:65:73:6e:1b:09:f0:51:
9c:a2:02:be:7f:d5:ba:05:ac:bd:e4:63:f8:0e:ee:
2d:d0:a2:4b:6e:cb:d0:1a:94:f5:ba:c8:18:46:3b:
c3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B9:E6:A2:EF:1C:11:61:C4:75:F3:44:FA:E1:65:77:61:DC:0F:0D
X509v3 Authority Key Identifier:
keyid:F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c9:d2:44:8e:b6:ad:41:b9:53:6a:d5:48:83:35:58:88:1e:
87:56:9f:d2:4d:58:9b:b4:b3:43:f5:a1:26:74:bc:7d:7f:57:
65:ce:ec:ac:53:9f:29:62:47:c4:32:5a:5d:6e:ac:86:90:e6:
47:9b:88:c1:ca:5d:76:ae:1d:99:ef:45:64:88:c1:a9:d8:5c:
c1:5f:d4:a7:d6:4a:26:a2:94:b9:d6:aa:1b:fa:96:d4:ee:a3:
e0:cf:1e:0b:53:14:a8:f2:2a:88:41:71:66:72:c2:54:cd:26:
9f:8c:f5:fd:22:20:bb:8f:34:c5:02:bb:be:4e:25:5e:60:37:
fb:55:ef:0b:33:73:e6:91:0f:4c:5c:f9:b6:80:c3:08:d8:fb:
71:06:47:a5:9e:ea:70:66:89:12:a4:ba:8d:3b:9d:99:e1:19:
51:ee:da:42:da:1f:8e:37:c6:7f:14:22:2e:bb:e9:eb:e9:16:
fa:8a:45:71:37:8e:51:d9:60:a0:89:00:b7:c0:3b:01:7f:bf:
13:2e:4a:f3:32:82:ae:ae:21:2e:94:a4:9d:fc:19:6f:6e:df:
5c:79:81:57:71:d8:ad:80:01:a2:cf:1b:a0:f6:12:88:49:5f:
8e:7e:5e:d6:6d:bc:dd:76:39:e5:b7:57:b8:8b:b8:65:5a:fd:
41:c1:98:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:48:27 2025 by rpki-client