Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
File: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft (raw, json)
Hash identifier: P4w7bkBSPxQRno9llo4V5fVeSklGT//0igEX+YcN9qc=
Subject key identifier: 91:A3:B1:AD:7C:60:71:F1:09:FD:5B:E0:DE:5F:8C:FA:76:34:DC:06
Authority key identifier: FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
Certificate issuer: /CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Certificate serial: 0197688554E6E9B243873741D0319147835C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
Manifest number: 0382
Signing time: Fri 13 Jun 2025 09:00:57 +0000
Manifest this update: Fri 13 Jun 2025 09:00:57 +0000
Manifest next update: Sat 14 Jun 2025 09:00:57 +0000
Files and hashes: 1: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl (hash: iTIE/Vm6rrvUriqC06js2mEXWv1xPWAIeOfZ4ub61UM=)
2: RfQdtLKXYLdrItaAhtareV1d0X8.roa (hash: 2v2M5d2SJj08W++N719Wz/Nxup00xLX8rohfuP7PYPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:54:e6:e9:b2:43:87:37:41:d0:31:91:47:83:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Validity
Not Before: Jun 13 09:00:57 2025 GMT
Not After : Jun 14 09:00:57 2025 GMT
Subject: CN=91a3b1ad7c6071f109fd5be0de5f8cfa7634dc06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6b:f0:bd:08:e3:6c:d5:72:39:e4:fe:77:17:
64:13:ef:64:25:93:03:67:05:1e:4f:3f:11:3b:a4:
8c:6c:b9:29:74:53:1a:14:5e:6c:4e:b2:4c:d8:d6:
37:81:ba:f8:07:0a:00:65:64:45:c4:f9:8b:d1:4a:
bb:60:fa:f7:51:e8:c7:5a:ca:fd:ad:2e:4a:c0:d1:
1c:0f:77:fa:80:cc:cb:9c:4b:ee:11:b1:3b:46:c8:
ea:0b:25:df:11:69:a7:0f:ca:f4:f8:8a:0f:88:2d:
5e:af:8f:fa:7b:c7:79:8f:16:49:39:df:b2:28:6d:
be:39:aa:90:3e:fc:9c:1a:e2:06:59:22:36:2d:71:
bf:c7:99:30:ad:a3:b9:50:06:fb:a0:b5:e7:18:9c:
e2:0c:bd:16:f0:25:d0:c3:2d:dd:ff:16:72:92:ae:
82:9f:69:47:ff:83:27:5c:93:f8:d6:9f:e0:c9:0c:
88:8f:1c:dc:73:d8:5d:2e:8f:6d:94:bf:d0:44:87:
5f:0a:0d:4b:2f:9e:49:8a:31:73:e0:32:fb:92:67:
92:bb:0e:34:c3:99:fd:99:f3:77:fd:f8:cd:aa:a9:
af:8c:fb:ba:7c:55:38:d8:ca:47:9f:a6:48:fb:31:
52:13:83:5f:97:6d:91:53:eb:4b:38:6a:b5:22:64:
da:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A3:B1:AD:7C:60:71:F1:09:FD:5B:E0:DE:5F:8C:FA:76:34:DC:06
X509v3 Authority Key Identifier:
keyid:FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e0:1e:52:66:34:ce:55:2e:1d:fb:18:f8:91:0a:b9:55:59:
08:43:59:74:1c:75:a1:08:52:8b:eb:02:07:0e:ba:52:65:e2:
4c:58:25:ed:c8:8b:cc:6c:c7:40:bb:3f:56:1d:72:f6:92:29:
97:de:69:8d:24:c9:3d:4b:25:39:ce:8f:f0:a4:e9:b9:ac:e5:
31:79:c7:4c:42:d4:d7:f7:1b:58:d2:9d:0c:88:73:b8:2f:20:
20:dd:c8:e1:ae:cb:33:5b:cf:7f:a9:eb:06:cf:f9:71:c7:c3:
d0:20:0f:2a:ea:d9:13:88:d5:6d:2f:f8:08:1e:a7:d5:7c:5e:
20:29:1d:fa:87:c0:d3:97:fa:a0:79:9f:52:2d:a3:8f:88:45:
e0:41:88:f2:ef:72:6c:22:cb:12:09:d4:0e:dd:2a:2e:d2:a8:
8f:9f:35:ca:98:9e:5e:fd:18:8d:82:8f:89:65:b7:6f:8c:79:
49:5f:82:1e:e8:3a:eb:85:79:5a:2a:31:a4:e5:18:51:f8:82:
63:37:5f:9d:bf:25:0e:70:59:d3:6e:39:25:a6:c8:6f:02:17:
e4:95:dd:5b:f7:f4:fc:9b:6b:b4:b3:ec:52:88:49:37:3c:d9:
40:c0:ba:49:92:fa:7d:86:ab:29:4e:fe:d7:22:5d:2c:b7:30:
2d:9e:52:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:19:20 2025 by rpki-client