Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
File: 1-14u6ugu75tlf-J5UmcmECD5RMk.mft (raw, json)
Hash identifier: Dqarn/3jWTqQBBhfEhxrQbOrYguDbYZRETjB+HlqaK8=
Subject key identifier: 44:DF:19:A4:22:AE:DA:4D:6F:8A:C2:31:D2:3C:FA:8B:2B:B7:BD:72
Authority key identifier: FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9
Certificate issuer: /CN=fb5e2eeae82eef9b657fe2795267261020f944c9
Certificate serial: 0198974A4566C874AF81BE189BF6C83FD0E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
Manifest number: 01B3
Signing time: Mon 11 Aug 2025 04:01:23 +0000
Manifest this update: Mon 11 Aug 2025 04:01:23 +0000
Manifest next update: Tue 12 Aug 2025 04:01:23 +0000
Files and hashes: 1: 1-14u6ugu75tlf-J5UmcmECD5RMk.crl (hash: qLcBwbIUdmSp/OpGuJL8EMZvrmv4A9kjjQZZWpmf6jg=)
2: Dr_PQO2BPHoa4Gl0AZtI905-d-M.roa (hash: +sFVK8H7AnsXd5rUe7kR0o92ssiFNiEpWCKNsSev/NE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:4a:45:66:c8:74:af:81:be:18:9b:f6:c8:3f:d0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5e2eeae82eef9b657fe2795267261020f944c9
Validity
Not Before: Aug 11 04:01:23 2025 GMT
Not After : Aug 12 04:01:23 2025 GMT
Subject: CN=44df19a422aeda4d6f8ac231d23cfa8b2bb7bd72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ce:6c:ad:6f:4c:cb:11:26:c6:54:47:bf:f9:
5c:3a:b9:40:52:11:b5:26:1c:e9:17:f9:79:cb:9d:
4d:54:b7:8c:df:c9:c3:da:3b:03:cb:1c:a6:b4:95:
b7:06:54:45:1f:82:eb:82:10:80:cb:fc:f7:54:be:
54:fa:ee:3e:bd:39:75:a4:06:83:d6:fb:10:d4:ae:
65:89:bb:5d:b9:76:78:75:aa:37:17:35:e3:35:1b:
5d:de:4c:82:11:1a:66:bc:91:e6:f6:2c:09:39:18:
bf:35:17:d4:b3:3e:b9:09:3c:d1:8a:4c:71:1e:c9:
25:91:04:8a:88:b2:3e:aa:e3:f2:3f:51:ac:c9:ee:
2c:3f:92:59:cc:b9:ff:3a:c7:89:9b:cd:59:7b:42:
e0:20:0c:34:a2:df:75:f4:e7:95:1d:ef:9d:e3:8e:
20:0c:19:f7:8a:70:33:d2:b3:7f:a6:3d:2c:cf:b4:
ca:98:f5:b9:3f:22:b7:12:88:34:29:dd:a1:50:80:
d9:2c:b4:cb:09:e8:7d:23:5b:04:39:81:58:c1:22:
a0:99:c6:52:04:59:f4:b8:5d:db:64:6d:a2:04:fe:
b7:8a:0b:91:76:ab:22:aa:72:92:51:46:ef:05:e4:
0d:04:90:4a:bc:d2:5a:87:73:13:d4:69:ab:c8:74:
22:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:DF:19:A4:22:AE:DA:4D:6F:8A:C2:31:D2:3C:FA:8B:2B:B7:BD:72
X509v3 Authority Key Identifier:
keyid:FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:fe:50:7c:76:a4:64:8e:86:8c:27:ed:81:eb:75:ad:c3:b6:
3d:9e:9f:d2:87:35:6a:56:ee:de:a5:a3:35:52:2f:a3:bd:8c:
10:bd:76:cf:4d:9d:c4:a6:b8:9a:9a:04:db:c6:23:de:53:89:
c4:55:77:48:aa:aa:fb:e0:d8:80:29:5d:47:f7:19:14:9f:4c:
42:e3:a6:74:d3:21:6f:83:e2:10:cb:cb:b6:24:b9:80:86:b4:
94:03:e5:8a:31:fd:1d:24:2e:fd:96:28:43:c7:b5:d1:41:43:
5e:1b:39:25:a6:99:da:e6:7f:35:67:26:0f:f2:33:28:8c:a5:
c3:b9:f9:be:21:58:74:a2:46:22:ae:7a:4a:a1:e8:63:06:cd:
0b:49:5d:11:fe:c9:e1:b4:2e:dc:d8:13:be:9c:7e:e6:cb:2f:
ae:6f:17:f2:f1:ad:f7:39:15:2a:b7:e0:76:7c:52:40:af:c7:
6f:bd:a2:57:bd:5c:d0:33:ee:d2:fa:8c:52:69:9b:15:28:7f:
34:db:a5:1e:4b:84:fc:a8:3c:45:b3:fa:3f:4c:ef:f2:a1:7e:
56:b1:37:93:06:4f:3b:31:b4:af:23:cc:1a:3e:0f:92:e7:98:
dc:06:f0:e1:8d:d7:ed:52:86:a9:a1:8b:42:3a:79:f7:f6:68:
d1:b2:ca:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:51:17 2025 by rpki-client