Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
File: 1-qTuqG-fPm54gbS42hmh0nJehxA.mft (raw, json)
Hash identifier: sXlx1fpd+iD7e8V6voBN9GtbqXAq1/U57b8pFAoAlgc=
Subject key identifier: E7:CF:BB:84:53:B0:6D:23:98:A4:B2:59:C6:39:A5:3B:89:49:AB:16
Authority key identifier: FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10
Certificate issuer: /CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710
Certificate serial: 019772D1B3AE597AE800EEE04D2FE299EF53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
Manifest number: 1591
Signing time: Sun 15 Jun 2025 09:00:34 +0000
Manifest this update: Sun 15 Jun 2025 09:00:34 +0000
Manifest next update: Mon 16 Jun 2025 09:00:34 +0000
Files and hashes: 1: 1-qTuqG-fPm54gbS42hmh0nJehxA.crl (hash: bIAj2L7YJAl1FkmU1oc/wbgMY8WsVL0jRPK9i5Fbw0k=)
2: jnyTmD1DxoXGsX8QKO4GFLyk0hU.roa (hash: VHKaN5/CfBmdBMdYUm6aa5suZnMbN/eE/uaYAJ9tsUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:d1:b3:ae:59:7a:e8:00:ee:e0:4d:2f:e2:99:ef:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710
Validity
Not Before: Jun 15 09:00:34 2025 GMT
Not After : Jun 16 09:00:34 2025 GMT
Subject: CN=e7cfbb8453b06d2398a4b259c639a53b8949ab16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dc:3a:ad:31:a4:a4:73:fb:85:62:e5:d2:0a:
2c:bc:3f:fc:ae:30:ca:b2:fb:93:33:44:1b:c5:c3:
ef:cf:94:7e:1c:3c:d4:72:e2:99:78:6b:5c:48:e5:
4f:8c:95:ec:b8:1f:a5:2a:a1:7e:ed:72:6d:ee:93:
a0:3f:98:16:03:34:e3:46:86:51:9a:2f:63:33:7b:
d9:80:0c:be:02:16:98:ad:f8:04:09:5a:ce:a7:f3:
97:b3:20:c9:6c:c8:16:b2:ef:9a:42:4f:eb:a1:6a:
07:b4:94:94:60:6c:3e:21:d4:6b:1b:33:b6:00:87:
7f:dc:c1:2d:c3:62:d5:fd:20:f0:a6:27:01:71:53:
d4:6f:1d:e4:9a:6e:9f:a5:c0:84:8b:7a:3e:8c:a4:
6b:5f:47:02:9f:2c:ca:15:64:f1:42:a4:d2:99:64:
e3:3e:8c:4d:50:f9:42:8f:f4:59:b0:32:92:94:c4:
91:f8:1d:0f:f9:ce:bf:ba:a0:54:93:f7:1d:a4:dc:
e1:ba:1d:98:d3:c2:ce:19:e0:17:da:f4:ce:62:62:
f0:04:a6:1e:62:20:89:0c:93:79:bb:ad:44:e4:be:
55:5c:0d:35:d7:d1:42:3c:a9:81:18:3f:ab:2c:09:
74:ad:c3:c5:ad:71:de:02:35:ae:79:3a:c9:8c:11:
2e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CF:BB:84:53:B0:6D:23:98:A4:B2:59:C6:39:A5:3B:89:49:AB:16
X509v3 Authority Key Identifier:
keyid:FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c0:45:6e:e2:5e:92:1d:b8:1d:74:05:30:61:c9:c6:c3:86:
29:7a:68:97:f5:6b:2e:22:bb:4e:ff:49:ba:77:34:ab:59:5b:
f7:31:d0:35:78:36:b6:b1:fa:71:da:99:06:00:44:21:42:97:
a9:60:99:76:a3:b6:80:63:b7:5f:55:93:4f:82:95:cc:e0:c6:
89:80:55:88:0a:28:55:61:a2:2e:cb:a6:51:4d:19:ed:60:56:
27:71:7d:e1:e3:19:a6:c8:f5:56:52:e7:11:eb:88:92:87:a3:
5d:b6:0b:66:3a:4e:37:78:ed:cf:31:97:be:19:7d:11:a1:b8:
48:f7:03:8e:22:11:8c:b2:75:eb:7e:cf:22:b1:97:31:64:60:
b4:2a:87:19:61:a3:82:25:7d:a9:ec:86:d2:37:d6:e6:41:6e:
e7:35:28:e6:89:e1:59:df:a6:20:e8:60:db:a2:11:95:e8:07:
66:9a:7f:dd:09:05:ec:15:f0:50:a0:59:b5:ed:cd:8a:af:24:
01:a6:82:10:0c:6d:30:6c:73:96:ea:80:d1:c0:96:82:e1:4f:
af:13:88:67:3f:37:94:3c:60:01:75:a9:18:a0:40:7e:84:45:
d9:83:7f:93:e0:cf:02:4b:27:5c:96:e7:a3:0a:f1:dc:a4:f1:
21:15:14:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:46:22 2025 by rpki-client