Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
File: 1Xx9sE54wiHz3yoq8IK1GNliqPA.mft (raw, json)
Hash identifier: 4PRpbwWRdj5wZLwlvygfp5zGiw8gaIfMU5/4WkdolkA=
Subject key identifier: 8D:96:8D:48:F7:B1:18:9C:2E:E1:55:36:C3:5B:DB:30:AE:88:84:AA
Authority key identifier: D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
Certificate issuer: /CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Certificate serial: 01987AF6D1B78A82F9C1CAE74036FDE445AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
Manifest number: 13E9
Signing time: Tue 05 Aug 2025 16:00:52 +0000
Manifest this update: Tue 05 Aug 2025 16:00:52 +0000
Manifest next update: Wed 06 Aug 2025 16:00:52 +0000
Files and hashes: 1: 1Xx9sE54wiHz3yoq8IK1GNliqPA.crl (hash: dKmniCRT+BQcTP3JatU9Q7O1GJoNOpxAvf0Xq4TrWJU=)
2: AF4umlxpodxfUYcflJsK8xOOPvc.roa (hash: h6ZT1Xj2HoW6T1BM9+3KLrI7XGShfMvSe65xEZ1pN+8=)
3: eKdaY9u7yd9VS291GQM22qgfzCo.roa (hash: LpBEMBev2akTDLzB/P1Zql8JVSF96+zbvpBVIyg+mMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:f6:d1:b7:8a:82:f9:c1:ca:e7:40:36:fd:e4:45:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Validity
Not Before: Aug 5 16:00:52 2025 GMT
Not After : Aug 6 16:00:52 2025 GMT
Subject: CN=8d968d48f7b1189c2ee15536c35bdb30ae8884aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b3:21:de:f5:67:ae:41:ad:6a:50:8c:35:f8:
1d:7a:97:4f:29:76:10:58:09:16:15:fd:bb:40:05:
34:3d:ae:b0:e1:eb:df:1a:85:93:32:86:e4:19:ed:
38:50:4d:bf:be:a2:38:16:97:f6:52:d4:a3:f1:1d:
9f:86:64:af:97:91:23:c3:c3:41:29:92:2a:d0:82:
92:02:d1:2c:f8:5e:e8:54:96:35:9e:ea:60:a0:03:
04:28:5e:51:bc:85:f0:51:d7:83:9d:8d:39:99:72:
9b:b8:ba:b7:71:c6:8c:f2:ce:a0:e8:91:6c:8b:e8:
07:7e:3a:34:e4:35:54:c9:03:64:dc:84:95:b8:08:
cf:ba:bc:c2:39:a0:6c:5a:ad:73:12:da:17:a0:b5:
5a:53:89:50:e1:d6:1a:68:12:3c:a4:b5:ab:cf:91:
67:b1:01:b8:54:ae:5f:60:18:e5:2b:84:be:1b:c2:
61:f1:c6:1d:6c:fa:63:79:5c:61:02:48:23:81:d5:
aa:83:1d:84:48:80:c4:b1:7d:a8:f2:f5:60:ee:96:
47:d9:8b:21:ff:13:ac:51:68:3e:33:9d:b1:35:b8:
4a:af:40:b0:ea:05:84:e1:4a:b8:4b:51:30:09:8d:
f5:bd:25:64:79:de:d3:a7:24:c8:fc:14:cf:62:cb:
b1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:96:8D:48:F7:B1:18:9C:2E:E1:55:36:C3:5B:DB:30:AE:88:84:AA
X509v3 Authority Key Identifier:
keyid:D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:c1:fd:41:11:70:d8:84:80:7a:af:bd:b6:bc:bd:ac:7c:60:
ad:c0:12:79:17:0c:53:67:18:d2:4a:a8:a1:cd:e6:51:6b:36:
30:d3:71:93:e9:03:47:07:cf:21:19:0d:02:5f:2e:c2:97:51:
a6:70:e7:f2:78:0b:7a:7f:04:6b:f7:e7:c3:5d:4c:70:90:cf:
8d:80:c2:3c:a3:0f:ed:46:c7:37:27:27:bc:dc:72:60:01:0c:
f1:02:3e:73:ba:4d:43:9a:ff:e7:ae:61:44:2d:39:1b:f7:26:
9f:a0:1f:14:59:41:3c:33:7b:bd:63:87:e8:b1:8a:02:90:7b:
b1:92:cb:89:c6:37:76:0b:11:52:25:1e:3a:cb:18:b8:64:29:
d4:64:5a:17:93:f0:47:4f:32:9e:fb:5d:8f:38:0b:f5:e7:ef:
89:24:84:a5:5d:7d:48:2d:96:97:a8:04:ac:32:ef:9f:05:cd:
79:3e:98:b0:bb:a2:90:da:26:28:eb:5a:ad:db:a3:a6:05:2f:
05:cf:54:c2:a9:1b:3c:15:32:7e:1a:ab:79:3c:93:13:ae:a0:
b6:e5:af:9b:cb:0c:dd:12:cc:fd:68:ad:22:e9:86:72:97:cf:
0e:d5:50:a5:60:cc:a6:45:c1:19:df:01:46:98:b7:83:c2:30:
b6:8e:d1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:37:47 2025 by rpki-client