Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
File: 1-qTuqG-fPm54gbS42hmh0nJehxA.mft (raw, json)
Hash identifier: 0NNCfTWBEuo8RO+dCeNS7o9u1mSrUcJcHfCtzHhVx8o=
Subject key identifier: C9:2C:B4:F2:CD:F4:EA:AD:C0:33:1B:B8:4A:89:06:52:01:33:0F:0A
Authority key identifier: FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10
Certificate issuer: /CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710
Certificate serial: 019873E264ECBE71D1426E60DFA9704555E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 07:01:13 +0000
Manifest this update: Mon 04 Aug 2025 07:01:13 +0000
Manifest next update: Tue 05 Aug 2025 07:01:13 +0000
Files and hashes: 1: 1-qTuqG-fPm54gbS42hmh0nJehxA.crl (hash: vNbRQ0OLAj0P+GdBlxrPnqfoWGOY0GxWyJtqhmml0mY=)
2: jnyTmD1DxoXGsX8QKO4GFLyk0hU.roa (hash: VHKaN5/CfBmdBMdYUm6aa5suZnMbN/eE/uaYAJ9tsUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:64:ec:be:71:d1:42:6e:60:df:a9:70:45:55:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710
Validity
Not Before: Aug 4 07:01:13 2025 GMT
Not After : Aug 5 07:01:13 2025 GMT
Subject: CN=c92cb4f2cdf4eaadc0331bb84a89065201330f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:71:25:e3:2f:8d:99:bf:81:c9:e3:5d:7d:99:
03:3f:50:5a:db:94:36:71:27:c0:a4:35:48:be:18:
c9:11:56:a5:a3:8e:a9:48:e2:a4:2d:cc:e3:ca:de:
2d:77:7e:0d:07:fe:96:18:32:8f:af:a0:81:3a:63:
cc:a1:3a:bb:94:84:de:02:7a:5c:71:3a:b1:27:b2:
fd:73:5b:89:32:11:07:ba:a4:60:0b:91:71:57:44:
b3:35:4e:1d:7b:52:8f:0b:ee:8b:25:3f:f7:75:f0:
40:9b:37:51:76:87:32:79:be:e7:70:9d:67:4d:43:
a2:5e:73:e0:7a:d5:cb:b1:05:b4:0c:09:2e:02:6a:
36:b2:a9:37:60:ea:89:90:e3:63:53:61:07:be:49:
73:cc:10:eb:6e:52:6b:61:16:9d:a0:d1:3f:27:5f:
23:a5:d1:aa:1e:3c:d7:4d:37:65:26:77:c4:28:44:
28:89:7c:5a:61:94:57:68:f0:24:88:80:c5:b7:1e:
3e:f6:19:50:75:ae:6f:5e:04:d9:9c:2a:07:c4:dc:
5d:95:5d:cd:77:c3:34:3a:03:20:0a:86:5b:f6:f1:
71:20:82:2e:7f:20:18:af:66:3f:0b:1a:1d:71:4b:
f2:66:b1:e9:8a:51:c9:01:0d:73:c1:18:4b:27:74:
7a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2C:B4:F2:CD:F4:EA:AD:C0:33:1B:B8:4A:89:06:52:01:33:0F:0A
X509v3 Authority Key Identifier:
keyid:FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c5:fb:2f:f0:36:bc:e9:69:4a:e8:22:b6:70:6d:c1:ef:13:
2f:a7:e9:b6:35:f9:9a:50:ab:9f:5e:8e:ec:df:e6:84:b6:75:
1e:3d:62:03:1e:35:e8:ea:15:61:67:db:2c:a2:8a:ae:f9:05:
8d:e3:6c:c6:6b:95:ca:d8:04:ef:e5:40:ed:2a:0b:78:56:f5:
d9:67:d0:62:9d:34:6d:7a:29:fb:52:dc:e8:0c:53:5c:ca:af:
85:2d:27:cb:21:f1:9d:5f:fc:47:ff:e8:57:59:d1:0c:6f:20:
2e:6f:fd:bb:2f:eb:2d:b2:2e:4e:c5:bd:48:70:cf:ac:08:98:
67:06:c8:d7:e9:fd:6e:2f:20:eb:68:ea:67:13:3a:64:47:b0:
79:32:15:d2:4e:76:94:db:d3:76:04:ca:97:ed:f1:e7:69:77:
76:3b:ae:41:ba:1d:e8:54:11:8e:4e:4c:41:ba:c6:2d:88:98:
11:66:45:66:62:fc:f2:1a:c1:d3:82:66:e2:2d:8c:90:ca:3f:
73:e4:9e:92:29:bb:73:a1:ec:80:83:bd:f0:f6:95:25:d9:1e:
30:63:36:bc:8a:52:23:24:a0:b6:ba:65:aa:a8:03:75:11:b6:
81:86:54:a3:a1:f4:81:83:92:10:06:8c:2e:cf:e6:95:a0:6a:
6c:77:fc:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:38:10 2025 by rpki-client