Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
File: 1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft (raw, json)
Hash identifier: laRnDhrT87Lh/pUVdG1P1OE40DdxqElOrY69B0n2brY=
Subject key identifier: 60:F8:F4:17:C2:14:22:15:BB:1D:E6:61:24:C0:E7:60:F6:6A:BA:37
Authority key identifier: F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32
Certificate issuer: /CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
Certificate serial: 0198733DB57CD4DFC10009B800E4EC4B30DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 04:01:20 +0000
Manifest this update: Mon 04 Aug 2025 04:01:20 +0000
Manifest next update: Tue 05 Aug 2025 04:01:20 +0000
Files and hashes: 1: 1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl (hash: cjrPUR2GYElQRjdErtRp5FyBx5JKlhdMs9sU3iSp/xU=)
2: 621hWvBObU0KbojSBLWUXo4jF5o.roa (hash: bGhGcnNXquYec5H9mQpND+EzafK9SyRlgLrctL4mXdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:b5:7c:d4:df:c1:00:09:b8:00:e4:ec:4b:30:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
Validity
Not Before: Aug 4 04:01:20 2025 GMT
Not After : Aug 5 04:01:20 2025 GMT
Subject: CN=60f8f417c2142215bb1de66124c0e760f66aba37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:44:f9:b6:32:c7:13:e9:9e:c5:eb:0d:07:39:
56:18:2a:a5:93:98:d7:c3:b2:b0:83:91:74:3f:06:
42:9c:5f:70:30:38:f5:82:ed:6f:13:e4:95:43:26:
4d:d8:fb:3c:50:87:c1:3d:c7:d7:f5:35:83:0d:69:
aa:ef:1e:a9:ee:0e:06:a6:31:9b:57:7d:77:08:72:
48:f8:96:5e:4a:ca:5d:75:86:c5:c0:6c:f4:9c:e0:
22:68:2f:a5:91:8d:bb:76:75:a7:a7:82:ca:fd:b0:
fc:e3:e3:f8:4c:88:b0:bd:88:15:37:88:3e:ed:cc:
58:6c:9c:32:a2:3c:7b:e2:83:32:9c:45:42:a6:87:
1b:89:d8:f9:c0:e5:04:52:9c:a3:67:b2:0e:ad:c1:
1c:b6:72:ff:85:fd:b4:3b:12:f4:dd:9e:03:a1:2a:
c2:87:e6:1a:a0:ea:7a:ab:f0:89:8f:a9:06:25:ab:
bc:39:b7:df:58:9c:9c:e3:43:4e:75:6a:39:e6:2c:
f3:f4:24:40:5b:d2:86:fd:dc:aa:e9:eb:ed:07:45:
c0:03:be:fd:fc:a4:59:a7:0a:ca:0d:5f:7f:75:cc:
20:8b:9c:26:bc:e1:6c:72:67:0e:cd:b1:ac:a2:57:
a4:54:5a:d4:df:b8:f8:f4:17:5f:66:0e:c4:e2:c0:
c0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F8:F4:17:C2:14:22:15:BB:1D:E6:61:24:C0:E7:60:F6:6A:BA:37
X509v3 Authority Key Identifier:
keyid:F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e3:d8:aa:0d:28:22:a3:de:70:32:92:d7:4e:f0:5b:8f:46:
f8:b0:bd:83:7b:e9:ba:ac:61:29:10:3a:8e:71:1f:f0:2d:4f:
db:b0:c8:94:24:89:70:2a:67:58:bf:8f:d2:5d:3c:c7:18:d2:
71:8e:9f:52:bd:b6:3a:09:37:6c:03:e3:cd:e8:c5:47:6a:12:
c4:9c:c7:35:77:ec:a9:88:79:d3:aa:d5:c9:56:12:2c:d7:39:
b7:9c:9e:3a:bf:59:68:4d:ca:b7:21:19:9f:46:ab:88:b5:d0:
57:a1:74:11:a3:da:90:92:19:10:4e:f0:a6:c3:dd:98:df:30:
96:c9:99:de:f9:0a:9f:4f:f0:14:36:92:76:23:67:bb:de:2d:
22:48:21:86:3c:69:5c:67:8c:ba:a9:d4:a3:65:c1:e1:1f:40:
0b:d5:7f:1b:c1:f0:ff:1f:fb:7f:eb:f6:af:87:96:ab:4f:8c:
5b:fb:b6:17:ab:ec:5b:e6:c9:eb:c7:0f:49:b8:74:af:c5:dd:
52:94:1f:93:ba:ac:a8:e5:26:15:50:c3:9a:90:75:be:78:56:
ed:cc:d9:3b:bf:31:05:d5:7f:24:ba:39:e0:21:3b:06:1e:61:
95:79:c1:fa:bb:89:f2:78:35:9a:be:71:2d:21:e8:70:65:0f:
3b:8b:75:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:57 2025 by rpki-client