Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
File: 1XfOFDQjLYCBldDKcKs5HfsHry0.mft (raw, json)
Hash identifier: a02F/9q6lfeLTRv4XB6OuNZQD9uC+8z/yDU0cGBCEfw=
Subject key identifier: 49:FC:08:3B:38:6D:1F:2D:85:51:B0:A6:5B:4A:E3:66:8A:D0:D7:2A
Authority key identifier: D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D
Certificate issuer: /CN=d577ce1434232d808195d0ca70ab391dfb07af2d
Certificate serial: 019872988BC77525FB08DF6CB780B69DF3C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 01:00:56 +0000
Manifest this update: Mon 04 Aug 2025 01:00:56 +0000
Manifest next update: Tue 05 Aug 2025 01:00:56 +0000
Files and hashes: 1: 1XfOFDQjLYCBldDKcKs5HfsHry0.crl (hash: PS4Yy3GACRqL7eCkyKef5kYbadShKCQA4oUc0ruZKc4=)
2: HcDxgF3nqk8cgEWN2FjSYTqgWIU.roa (hash: zRQPtKl4Mi8+zyT9yY1R1Qmmn1wM9W5eQbvQLliU+lY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:8b:c7:75:25:fb:08:df:6c:b7:80:b6:9d:f3:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d577ce1434232d808195d0ca70ab391dfb07af2d
Validity
Not Before: Aug 4 01:00:56 2025 GMT
Not After : Aug 5 01:00:56 2025 GMT
Subject: CN=49fc083b386d1f2d8551b0a65b4ae3668ad0d72a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c5:f0:40:63:e4:4d:86:70:a3:af:d2:30:b1:
1c:b8:1c:05:c3:b9:e7:38:a8:75:aa:3e:a4:e8:22:
29:94:fc:3f:fb:bf:00:a3:26:58:76:c2:2f:92:33:
d2:4d:9c:e0:27:41:84:d7:d4:fe:ae:e0:9a:8c:1f:
d2:e4:62:21:35:fe:dc:2f:f7:fa:63:e6:ec:f1:73:
b8:b6:36:59:9c:cf:de:97:95:68:c4:76:43:c9:c3:
f7:94:cd:d8:73:19:b2:02:74:a8:d3:df:15:05:96:
72:f5:eb:20:75:39:ea:1b:bf:80:ae:04:da:e4:76:
72:78:37:d4:00:89:35:82:85:c1:86:c7:77:5a:2a:
40:da:1a:7c:dc:75:81:70:ec:28:c7:70:05:d6:38:
0c:be:81:d6:71:01:b4:19:2b:5c:3d:9c:59:35:12:
87:c9:a1:3c:7c:86:19:cc:91:fc:ae:cb:b1:4f:0a:
cf:5f:1e:6c:00:cd:68:c0:c1:73:2a:f0:4c:49:a3:
b1:5b:af:70:70:99:e9:e3:3c:c1:e9:ef:52:1d:22:
3a:99:1b:0a:b8:a6:8a:ae:a6:80:bd:26:6c:13:0b:
6a:a6:ab:f5:a0:3b:60:b3:1b:bf:c5:b6:0a:b2:36:
62:5e:9e:ba:f8:6c:d9:b7:a4:59:ed:84:4b:2a:89:
0e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FC:08:3B:38:6D:1F:2D:85:51:B0:A6:5B:4A:E3:66:8A:D0:D7:2A
X509v3 Authority Key Identifier:
keyid:D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:6e:63:49:d9:53:97:ba:4f:e1:7a:61:d2:94:a8:d4:5d:ab:
e8:91:91:92:67:f6:5f:a2:2f:ce:50:0b:fc:7b:79:0a:e8:50:
c4:56:4b:65:bd:66:bb:ef:43:27:53:6b:05:0d:a2:92:4c:11:
91:02:8a:9f:94:ce:a1:49:75:7e:e7:13:95:3d:e0:34:3a:d2:
aa:19:39:e8:ae:3b:13:02:ad:d1:6f:80:0f:c1:38:37:bf:be:
b7:00:96:b2:93:8b:16:8e:b9:c4:de:3d:6f:a1:7a:9f:08:4e:
2f:80:da:e2:e4:62:6d:83:9e:e3:95:c1:d7:a7:74:bd:2a:6c:
6b:84:61:04:eb:df:9e:b8:bc:ac:42:52:3f:16:d9:e0:1f:c1:
60:8c:3b:84:e4:ae:67:a6:6e:16:cf:95:b2:f6:0f:0a:50:5c:
66:52:e8:a9:2a:8d:73:77:11:eb:42:50:e2:f0:b1:ce:92:b2:
72:47:b3:ab:d4:fb:36:df:3f:9b:6e:c7:65:be:83:39:e6:5c:
49:23:01:f6:74:37:d4:56:3e:64:d3:8d:8e:18:58:f1:a6:4a:
6c:38:06:b2:54:16:fe:94:52:41:6e:eb:0e:66:30:78:93:d3:
27:e6:47:02:e0:ce:24:c2:d5:09:dc:1c:bf:59:79:d3:35:04:
15:b2:a4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:26 2025 by rpki-client