Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
File: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft (raw, json)
Hash identifier: LFWejTOYGmtF2eapmeu+GfGpG9LCq/Egxm3ZlUzXLaQ=
Subject key identifier: 8B:E7:56:59:11:48:39:74:9D:A1:9A:48:CD:26:C3:1B:D8:33:F8:1B
Authority key identifier: FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
Certificate issuer: /CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Certificate serial: 01987306A57A116D0693E1288B9241E4A637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
Manifest number: 040C
Signing time: Mon 04 Aug 2025 03:01:12 +0000
Manifest this update: Mon 04 Aug 2025 03:01:12 +0000
Manifest next update: Tue 05 Aug 2025 03:01:12 +0000
Files and hashes: 1: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl (hash: Socr8+tVmCmuvseK5nz0qA7rx3Xs8/1uiEH4Dc0qoPc=)
2: RfQdtLKXYLdrItaAhtareV1d0X8.roa (hash: 2v2M5d2SJj08W++N719Wz/Nxup00xLX8rohfuP7PYPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:a5:7a:11:6d:06:93:e1:28:8b:92:41:e4:a6:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Validity
Not Before: Aug 4 03:01:12 2025 GMT
Not After : Aug 5 03:01:12 2025 GMT
Subject: CN=8be75659114839749da19a48cd26c31bd833f81b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b0:d0:d0:e4:88:df:84:d8:08:8d:a3:12:9d:
bc:13:af:e4:f5:d1:cf:f4:90:d1:ab:dd:f2:1f:75:
d4:53:d2:a0:53:40:c8:c3:49:af:0e:9f:75:8b:69:
40:fb:f5:e4:d9:80:af:eb:97:4a:8a:3a:93:6d:c4:
01:dd:49:53:43:83:5e:52:57:1e:40:19:52:8b:a5:
12:f0:07:16:be:cc:d4:7f:f6:d8:40:a4:ff:0f:b1:
4b:4c:2e:f4:01:03:72:4a:62:8a:cd:f2:c0:09:b0:
cb:5d:6f:11:73:b4:fe:33:95:f8:74:ef:7b:32:17:
a6:7a:bb:34:00:71:fc:79:08:85:36:8f:1e:02:31:
6f:6a:a8:26:aa:7f:3f:60:8c:68:06:ab:d5:0b:eb:
32:bc:7f:01:56:37:b5:f9:b1:f6:1a:5d:28:bf:06:
74:13:75:44:46:4e:d1:df:8d:1b:b2:03:02:95:c4:
64:76:f0:d7:33:e6:76:ef:4f:b1:4a:ac:f2:2c:9c:
ad:14:0c:9a:31:76:91:c4:89:05:82:8d:2b:7e:c0:
c8:5e:4b:50:98:f1:42:67:37:b9:8d:c7:dc:ce:ff:
7f:fe:5d:38:d3:eb:15:36:71:1a:cb:90:0c:23:4c:
f2:ee:07:85:fa:14:ca:a2:3a:5b:5e:f0:fd:eb:70:
fe:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E7:56:59:11:48:39:74:9D:A1:9A:48:CD:26:C3:1B:D8:33:F8:1B
X509v3 Authority Key Identifier:
keyid:FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a0:49:4b:d4:fe:e4:c5:3a:f2:09:ef:94:7b:d7:a5:fa:14:
8e:ba:a7:bc:01:61:6e:90:1e:f7:8a:d6:68:8f:98:9f:a8:ee:
df:a2:94:f7:4b:28:56:42:dc:8f:48:28:0c:69:68:74:1e:0d:
8d:a5:e9:17:95:29:b9:a7:ee:fa:d0:82:af:8a:f5:69:9f:62:
c1:a0:9d:d1:d7:1a:c2:80:9a:c1:02:8e:82:86:75:60:5e:9c:
4f:4c:b1:af:30:c4:f4:c2:ff:43:d1:03:1b:71:3e:c6:f9:ed:
4a:47:d8:90:69:e2:64:b0:ad:0d:9f:16:26:b8:25:d9:ef:46:
52:cc:2e:b3:16:86:79:01:03:5d:e7:61:b7:9b:82:aa:d7:4e:
b1:64:f2:95:97:b7:01:c9:ae:8f:9e:2e:16:f6:4a:b5:8e:c9:
b4:2c:d0:ca:48:a7:ed:99:04:ae:c3:31:7b:8a:5e:99:e5:f1:
e5:2a:3d:c8:0b:37:23:01:b3:04:fb:8d:a5:20:10:07:1d:06:
3b:b1:08:61:7c:cf:2a:6f:4f:6b:00:d2:5e:4e:2b:2f:b9:f6:
4a:36:c0:79:51:a4:03:08:9a:ea:8e:19:55:9c:55:e5:1c:aa:
47:79:15:80:f2:93:24:41:99:f9:0b:3e:b2:a1:72:98:d7:69:
12:1f:4b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:14 2025 by rpki-client