Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
File: 1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft (raw, json)
Hash identifier: z+1EwDGgRGU/Tgcp4mtu+3p+rjjyCVsPtaemQCcQu3w=
Subject key identifier: 86:B9:2B:C6:3C:2D:C2:C1:E7:9F:1E:2F:E2:8D:00:75:CA:AE:66:5D
Authority key identifier: FA:A1:69:09:CA:4D:A3:99:35:EA:B9:AF:03:8B:58:A5:23:31:22:B3
Certificate issuer: /CN=faa16909ca4da39935eab9af038b58a5233122b3
Certificate serial: 01987DC0EC017F96D033BB409BC7A0076DBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
Manifest number: 15B0
Signing time: Wed 06 Aug 2025 05:00:51 +0000
Manifest this update: Wed 06 Aug 2025 05:00:51 +0000
Manifest next update: Thu 07 Aug 2025 05:00:51 +0000
Files and hashes: 1: 1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl (hash: ZgwvCr0/8p+ubI7M+i56wabbQCWHwPTTS6/C0F8b2kQ=)
2: 95gvF9PQMIrb-BKphnns2uDXNiw.roa (hash: MBJ0PohSRVPGJ57dBumqXOfbyvugttOgIAsIwTytItw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c0:ec:01:7f:96:d0:33:bb:40:9b:c7:a0:07:6d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa16909ca4da39935eab9af038b58a5233122b3
Validity
Not Before: Aug 6 05:00:51 2025 GMT
Not After : Aug 7 05:00:51 2025 GMT
Subject: CN=86b92bc63c2dc2c1e79f1e2fe28d0075caae665d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e5:26:ea:81:49:03:cc:31:23:37:b1:84:b8:
14:ba:b8:df:07:55:de:73:0d:af:30:c9:9d:b0:b7:
67:e2:25:ff:78:e4:c5:19:c7:26:37:a4:95:45:4b:
8b:ee:d2:83:6f:f7:4d:3b:01:2d:e4:ee:d8:e5:fe:
0c:11:62:7f:54:51:57:e1:26:65:cf:5d:6e:db:a2:
7d:dd:de:32:54:76:70:6c:d5:fc:5d:7b:2c:5c:bd:
75:45:61:48:18:a2:bf:8f:3b:99:92:11:f9:31:34:
7e:e1:12:62:eb:a7:5c:26:0b:7b:a9:96:a9:0f:e5:
32:1c:5c:77:af:91:cd:c2:43:6d:3d:5c:30:d6:3b:
17:e8:fd:3b:07:19:90:18:31:6f:a4:a9:7e:73:b0:
d0:f0:02:34:96:29:06:88:ca:f3:a5:43:5a:07:be:
ed:c9:f4:9e:dc:ae:e0:d8:fd:33:b5:34:94:05:8a:
6c:21:c7:ab:eb:f3:e3:8f:9c:84:95:22:40:cd:cc:
6a:63:74:46:3b:55:ce:9a:af:c4:36:79:12:0c:8c:
fd:51:ea:c9:be:db:f8:2e:ef:3e:d3:66:3d:73:ce:
87:be:04:28:97:43:b4:dc:1a:08:34:65:ab:82:b0:
fc:f1:8a:b7:93:a9:b8:23:cf:10:0c:cd:da:0a:24:
ae:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B9:2B:C6:3C:2D:C2:C1:E7:9F:1E:2F:E2:8D:00:75:CA:AE:66:5D
X509v3 Authority Key Identifier:
keyid:FA:A1:69:09:CA:4D:A3:99:35:EA:B9:AF:03:8B:58:A5:23:31:22:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:13:ed:f1:3d:01:57:9f:c0:48:49:fe:3a:3f:ba:ac:e8:31:
1c:47:bd:6d:f3:61:5d:e1:b3:fe:45:99:e1:ea:63:b6:59:73:
c3:24:d5:74:35:51:aa:7d:8a:29:3d:3b:5c:a6:15:56:e9:09:
4e:81:69:c9:a7:d1:91:1e:c9:4d:58:af:76:f7:51:7b:ad:e8:
91:91:ef:91:eb:7f:87:0f:b0:33:48:55:79:1c:a8:1e:d4:48:
d5:ac:17:5d:3f:bc:00:ef:81:a0:04:90:92:22:94:07:03:29:
9d:d4:69:de:90:e7:c7:a6:39:08:52:ee:b3:d5:fc:af:ea:d3:
ac:61:da:40:1b:3a:f7:48:a0:8a:3f:f1:3f:2f:2d:cf:b9:49:
52:29:d4:f7:56:23:63:78:22:86:b5:f3:7e:61:91:82:f5:4d:
59:84:81:15:ac:46:b5:fc:22:69:83:f4:5d:76:05:e1:7d:2c:
31:dd:03:bc:15:ee:87:82:a6:18:d5:96:1a:b5:d4:36:f0:d9:
0d:ed:32:de:47:8d:5e:64:f9:81:e3:10:fd:c9:0c:37:0e:52:
b3:e3:a3:e2:73:a0:65:45:07:aa:fb:d0:20:df:0e:88:78:b0:
81:bc:e7:43:90:90:2c:a5:89:7c:a5:04:33:90:cb:5b:f7:ba:
2d:29:70:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:57:30 2025 by rpki-client