Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
File: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft (raw, json)
Hash identifier: Vmz81Vgp1Me+zdOWnSlS+JwpcE4WqZkGT45yUoPUGl4=
Subject key identifier: 84:1F:9C:0E:94:01:27:6B:9E:23:12:47:F1:8A:0C:08:4B:9C:1A:0A
Authority key identifier: F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
Certificate issuer: /CN=f970877985b0c5cf69167c91e837424c47d9a425
Certificate serial: 019873E4061B203399E15BA4AF4B8E351429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
Manifest number: 0B20
Signing time: Mon 04 Aug 2025 07:03:00 +0000
Manifest this update: Mon 04 Aug 2025 07:03:00 +0000
Manifest next update: Tue 05 Aug 2025 07:03:00 +0000
Files and hashes: 1: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl (hash: 9zTsCtSvHFJLkBft7DPC+XS8Fqk75LiT14nLYHyHTU4=)
2: dtRhkrrPSJQXLxdge4ROTUVkWDI.roa (hash: LG59mLDEL6OnHYs5spoH7ylFHPQpE2H4qHB7zS4ODlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e4:06:1b:20:33:99:e1:5b:a4:af:4b:8e:35:14:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f970877985b0c5cf69167c91e837424c47d9a425
Validity
Not Before: Aug 4 07:03:00 2025 GMT
Not After : Aug 5 07:03:00 2025 GMT
Subject: CN=841f9c0e9401276b9e231247f18a0c084b9c1a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a8:9c:22:3b:96:f4:6b:57:b2:bd:3e:75:41:
a2:6c:71:95:eb:f2:bf:e5:fc:ef:bf:d3:bb:6f:de:
11:56:ee:e2:8a:5e:90:55:d1:21:91:2f:d2:d8:87:
44:81:98:ff:e9:4b:c2:37:8b:8f:80:16:b1:3d:3d:
ca:a6:d9:b2:07:3f:5f:48:38:91:85:0a:20:c2:54:
78:af:80:11:95:b2:0e:e1:bb:de:c1:0d:fb:e8:36:
96:f5:9e:1d:d6:c3:96:00:eb:53:10:c5:c4:f9:27:
5a:51:cc:c6:d7:84:9e:95:4a:e5:dd:9a:0e:e4:27:
4a:a4:4a:e0:fb:f6:2c:e1:a1:c8:09:2a:b2:e6:c1:
be:5a:a8:70:d2:74:dd:fc:9f:09:5e:52:a8:5f:a7:
a0:41:e1:c0:38:3c:41:93:e1:63:53:ff:ee:29:44:
9e:f5:55:8c:22:20:09:8f:da:73:f1:58:2c:be:db:
28:8d:e7:54:8e:9a:52:c8:5c:82:70:28:d5:12:0a:
0d:20:af:69:79:7e:2b:49:9f:00:13:93:9f:fe:92:
b7:4a:11:53:80:0e:78:50:ed:87:80:16:cf:47:b8:
51:d6:ea:60:f9:71:e6:42:89:78:c1:14:f0:ba:97:
de:dd:46:e2:99:fb:41:41:10:e4:55:ca:cf:ed:17:
d2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1F:9C:0E:94:01:27:6B:9E:23:12:47:F1:8A:0C:08:4B:9C:1A:0A
X509v3 Authority Key Identifier:
keyid:F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:26:f5:6e:9e:63:39:08:67:55:f7:c5:11:c2:30:a8:c3:bb:
2f:1e:84:49:4c:8a:2e:a4:d7:be:30:6f:12:40:ea:bd:39:c0:
56:48:d3:8f:19:db:6e:91:a7:99:f2:6a:d4:7f:47:0d:82:4e:
14:4f:19:ca:d3:fc:c5:20:d0:7f:7c:63:8d:3b:e9:ca:ef:f5:
5a:c4:04:95:55:70:8d:0e:2e:02:37:d9:97:d5:0a:d5:4c:1a:
1a:30:ca:9e:de:e6:70:3b:38:9e:0a:30:73:35:27:9a:12:e9:
45:91:f8:2c:e6:69:80:35:e6:93:33:39:a1:bc:b1:6d:c8:19:
9b:ed:61:36:d5:08:da:7f:0f:67:34:bf:20:0a:ae:80:08:d9:
2c:35:14:04:d4:09:2e:b7:84:f9:aa:b7:4f:07:af:c4:7f:da:
86:75:52:3d:b1:83:0c:91:d0:f2:53:a8:ff:c6:c0:8b:3a:a3:
57:ee:5f:b2:3f:e9:16:0a:ec:74:fe:6f:91:95:97:0c:58:9a:
ae:2b:02:a6:89:47:ee:a3:29:e0:68:28:6c:fb:11:7a:aa:7c:
3e:17:8f:4b:03:7a:ef:09:c6:40:da:0f:74:51:41:00:2d:e7:
af:77:96:49:dd:19:0b:88:cb:c2:ec:c1:a3:9b:90:34:db:99:
71:8a:01:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:05 2025 by rpki-client