Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
File: 1Xx9sE54wiHz3yoq8IK1GNliqPA.mft (raw, json)
Hash identifier: Q/ggDhoNp6FkMpcYzp3i5igDs+A7ataGUmiwkZW4hok=
Subject key identifier: 8B:75:6E:EE:80:6A:71:65:0A:10:B0:FC:01:A6:16:1E:E7:00:DC:76
Authority key identifier: D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
Certificate issuer: /CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Certificate serial: 019768BBB7E46E75F5B6A493CE9B842A2D95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
Manifest number: 135B
Signing time: Fri 13 Jun 2025 10:00:22 +0000
Manifest this update: Fri 13 Jun 2025 10:00:22 +0000
Manifest next update: Sat 14 Jun 2025 10:00:22 +0000
Files and hashes: 1: 1Xx9sE54wiHz3yoq8IK1GNliqPA.crl (hash: sw0JMCNDD3czExKmbbclmqlPl74JpF4AEP1BsGJEju8=)
2: AF4umlxpodxfUYcflJsK8xOOPvc.roa (hash: h6ZT1Xj2HoW6T1BM9+3KLrI7XGShfMvSe65xEZ1pN+8=)
3: eKdaY9u7yd9VS291GQM22qgfzCo.roa (hash: LpBEMBev2akTDLzB/P1Zql8JVSF96+zbvpBVIyg+mMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:b7:e4:6e:75:f5:b6:a4:93:ce:9b:84:2a:2d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Validity
Not Before: Jun 13 10:00:22 2025 GMT
Not After : Jun 14 10:00:22 2025 GMT
Subject: CN=8b756eee806a71650a10b0fc01a6161ee700dc76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:64:a7:1e:8c:81:dd:df:f9:40:68:aa:ae:e4:
0c:75:ca:7b:f0:12:19:74:29:b9:60:22:27:1f:94:
6f:31:69:cc:63:bd:a9:09:4f:33:34:d3:06:6e:76:
c9:cd:d6:62:28:ce:a2:bd:d8:a4:ea:64:a1:ec:d5:
b2:6a:97:41:2b:12:92:fc:cd:ce:2c:b5:9b:5c:5f:
67:25:e0:1a:d6:46:1b:52:03:1f:38:4f:11:10:7e:
7e:6c:a8:c4:e3:d2:ba:9e:f4:eb:c8:1b:ce:93:1e:
89:c2:81:8a:93:a3:ef:29:7f:9a:a3:81:a2:f8:2e:
d1:56:db:67:f7:28:0c:83:27:5f:d1:71:3b:a8:ed:
81:00:38:ee:ea:73:ee:48:d2:68:22:81:ad:11:cc:
ab:ae:bc:f2:f9:7e:ce:2d:9a:a2:26:e6:42:e2:86:
2c:f9:9d:e6:e4:4d:10:5e:97:10:48:6e:f9:d1:66:
fa:e3:e5:ed:a4:43:ec:3e:f2:b4:f1:e5:78:37:18:
03:b4:52:97:95:39:e0:d3:a9:a0:11:64:79:a7:0d:
3e:53:e3:38:70:65:b3:a9:d3:3b:27:23:bd:77:31:
6b:5e:3e:aa:bb:d1:e5:6b:d0:3e:0d:3a:56:40:60:
3d:52:4d:46:04:f0:ae:ad:e8:d1:84:5e:4c:c9:c0:
0d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:75:6E:EE:80:6A:71:65:0A:10:B0:FC:01:A6:16:1E:E7:00:DC:76
X509v3 Authority Key Identifier:
keyid:D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:7b:14:b6:b9:3d:0b:26:5d:60:b0:b9:45:80:b9:bf:6d:08:
70:ea:33:2b:00:0a:b8:fa:72:ae:12:f3:f7:47:b5:3c:78:ea:
4a:24:ae:d5:ff:e5:e1:77:f1:9f:97:84:f8:98:d4:7b:06:82:
e6:23:c2:bf:d7:03:e5:ec:62:18:75:5a:45:d9:f0:09:c8:26:
a6:54:09:37:d4:9a:e0:06:f7:a3:45:8b:4f:26:f7:51:aa:88:
c0:c6:43:9f:98:03:b8:cd:c0:bb:53:d8:5d:67:9a:1c:91:d2:
1f:f3:15:36:50:da:3d:9d:05:f0:96:ca:c0:04:1c:db:1c:f3:
1d:96:89:7f:f7:2e:10:47:cd:92:f6:db:d9:1f:67:f2:ee:2e:
97:03:15:9d:f2:16:d6:a7:9d:bf:3f:08:62:50:fc:35:46:27:
2f:25:53:ca:31:a4:7a:4d:62:9a:78:32:8a:e5:cb:72:1c:0e:
68:bf:0c:75:2f:00:96:4f:1b:c3:e9:c1:bb:a0:3e:d0:d3:ab:
c8:e8:19:b9:98:c1:4d:a5:d8:e6:5a:55:4b:c6:60:7b:56:1a:
a7:9b:c8:c5:98:51:0c:3c:a3:c0:d4:2b:58:7c:6b:55:65:5b:
b8:99:11:77:ea:03:31:b2:14:84:84:79:42:2d:3f:fe:83:45:
cd:43:c7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:27:31 2025 by rpki-client