Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
File: 1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft (raw, json)
Hash identifier: +5gm/y5laVJV/d/5SNsc56WWAWL2XQ0G/bDMCPUBkRM=
Subject key identifier: 0A:07:4D:B1:CD:36:22:6A:26:AF:BE:3A:46:CE:47:C6:81:F2:C0:25
Authority key identifier: FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83
Certificate issuer: /CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
Certificate serial: 01987F797AE84B7F1501B43345B77E5739C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
Manifest number: 07CD
Signing time: Wed 06 Aug 2025 13:02:04 +0000
Manifest this update: Wed 06 Aug 2025 13:02:04 +0000
Manifest next update: Thu 07 Aug 2025 13:02:04 +0000
Files and hashes: 1: 1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl (hash: YQFK1VtWwxyGibIP1UqWbmhwuAZXkxtYqviz/hyAo9U=)
2: C0t1fb68tH4owkDmVZ6xwZW1iYA.roa (hash: Y7ISCB0haKo2tmOyS195RCJ+HbABAyZzsD8GbOG5Lkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:79:7a:e8:4b:7f:15:01:b4:33:45:b7:7e:57:39:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
Validity
Not Before: Aug 6 13:02:04 2025 GMT
Not After : Aug 7 13:02:04 2025 GMT
Subject: CN=0a074db1cd36226a26afbe3a46ce47c681f2c025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cb:93:50:10:40:c3:b7:7e:27:1b:f4:57:16:
9d:b7:dd:5a:92:04:9b:a1:d9:32:59:30:d2:78:7f:
23:51:d6:e0:a3:28:9f:73:5c:bc:dc:78:ae:f5:55:
c6:ba:1e:1d:67:61:94:33:30:ab:56:dd:8b:8d:97:
45:12:15:66:bf:d2:5c:2f:00:af:66:d2:f2:56:c9:
5c:bf:b8:ce:6b:65:6d:fb:54:49:89:ba:5f:06:99:
1c:79:28:8c:64:b8:08:2c:cd:6c:98:c3:81:02:e7:
dc:a2:f3:82:a3:e9:cc:a7:b6:f3:7d:93:42:92:d4:
5a:e9:ac:a7:2b:2a:2d:67:a8:a1:87:15:62:42:63:
6b:92:5d:f6:94:92:fc:a7:78:66:01:84:6d:a6:97:
66:13:62:40:ff:35:b2:f5:0b:14:a2:18:2d:da:7f:
57:dc:2c:b3:cf:bf:cd:88:c7:70:a6:89:15:25:48:
7d:8d:29:8b:c5:c9:fe:66:2e:da:62:16:8b:fa:d8:
eb:51:de:b3:4d:aa:07:40:ed:2e:8c:30:37:43:88:
dd:35:6b:fc:e0:97:4f:0b:3d:62:3a:b9:fb:4f:0c:
c1:82:39:e2:21:99:18:72:6d:f6:92:8e:c0:ab:f3:
c1:d1:c3:3b:1a:9f:48:7f:1a:8f:f7:71:75:d6:05:
71:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:07:4D:B1:CD:36:22:6A:26:AF:BE:3A:46:CE:47:C6:81:F2:C0:25
X509v3 Authority Key Identifier:
keyid:FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:af:8b:e2:05:23:08:b2:57:da:35:43:e0:be:04:7e:b4:3f:
4e:2f:09:79:ed:3d:36:d1:8b:2f:91:af:2f:90:8e:8e:c5:af:
d2:e9:e2:4f:f9:e3:c5:ce:74:9b:7e:78:c3:a3:f6:eb:58:be:
31:35:2e:05:88:4f:6e:7b:d2:ad:2b:bb:17:49:fb:0e:07:c8:
bc:b7:0a:5a:9f:c1:0e:50:63:e9:56:50:a6:ef:4c:97:c2:a9:
90:95:6f:b3:b4:34:5f:60:7b:68:d0:e9:8e:da:83:64:a0:b0:
4b:da:2d:f5:02:64:c0:75:43:a2:60:2f:fd:85:94:11:18:d1:
32:90:76:cc:5b:f6:3d:49:da:47:b0:e7:cc:0a:a2:e9:91:8f:
d4:3e:85:66:38:1b:09:77:22:03:65:3a:f0:6d:c9:9a:77:ac:
4a:1f:70:dc:f3:95:b1:e9:e0:ab:c9:07:00:6f:0a:13:39:51:
ba:dd:f4:74:07:8d:62:b3:23:20:fb:b7:ed:38:fa:0e:0a:2e:
af:bf:f8:b3:91:3b:fa:ce:ab:1e:6d:54:b9:d1:a7:ab:68:3f:
02:a4:c8:1d:6c:66:e9:05:08:ce:74:2b:7a:53:71:38:1b:c6:
93:19:07:39:ef:cf:66:ef:51:e8:1b:a6:fb:7d:b1:ff:dc:6e:
48:57:64:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:06:21 2025 by rpki-client