Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
File: 1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft (raw, json)
Hash identifier: lax9/iLQCYmhN+NacRci/TH0ta7H+uHcluNUT1WhfO8=
Subject key identifier: 7F:C7:84:F7:60:E8:54:AE:81:45:80:37:C7:6C:5C:D6:4B:07:77:B3
Authority key identifier: FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2
Certificate issuer: /CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2
Certificate serial: 01987B9C77681C9C470B2A1D7EA6E7D3E8F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
Manifest number: 161B
Signing time: Tue 05 Aug 2025 19:01:48 +0000
Manifest this update: Tue 05 Aug 2025 19:01:48 +0000
Manifest next update: Wed 06 Aug 2025 19:01:48 +0000
Files and hashes: 1: 1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl (hash: UKX4LVqNpNWPy3sb4wUbTMAffufRNzrbwhswof1+SIQ=)
2: c4ZXKHEEWbDTWPlUmqmsKLah8L0.roa (hash: F1WOSma/c9vioH3acUcPAtmz6J5nLcuBuR+41Bzl7HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:77:68:1c:9c:47:0b:2a:1d:7e:a6:e7:d3:e8:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2
Validity
Not Before: Aug 5 19:01:48 2025 GMT
Not After : Aug 6 19:01:48 2025 GMT
Subject: CN=7fc784f760e854ae81458037c76c5cd64b0777b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0f:0a:f5:ab:98:3e:f1:72:8e:b9:3e:c2:8c:
66:70:61:9b:32:4d:3b:08:03:45:f0:9d:b0:7d:5a:
24:9e:5c:89:05:d6:2a:8d:32:c3:49:a4:14:93:ec:
35:52:7f:a8:c9:f8:46:73:16:04:41:76:19:dc:1f:
e1:d1:ad:a8:10:d9:63:61:95:13:2b:33:74:99:d8:
c0:ca:f1:0d:d5:80:40:06:db:f8:77:99:0c:55:b9:
ab:51:0e:b5:dc:64:b3:81:46:59:ea:7e:55:21:09:
84:68:75:03:d0:47:e0:02:81:42:0e:8a:ff:2b:4e:
a9:0e:7a:1d:0a:b3:85:9e:d8:96:ad:f3:55:c4:ff:
f2:57:ae:29:28:a2:1d:e1:8c:35:05:34:43:b2:c8:
ea:da:50:ec:9f:82:a0:64:d0:16:91:24:35:0d:c2:
17:58:56:6f:84:50:7c:02:96:22:50:99:c1:2c:09:
bb:00:af:bd:ef:b2:0b:fd:96:8e:56:3f:dd:29:ea:
a4:04:94:53:f5:00:11:15:3b:fe:c8:d0:a3:14:15:
51:69:10:5b:7d:9c:49:c0:76:b6:29:f9:80:a4:f8:
01:60:ef:e9:2d:b0:7b:4d:f0:d1:b2:98:e3:a1:d8:
9e:f2:cf:f2:b5:bf:d4:51:25:78:bf:73:ef:48:b2:
c1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C7:84:F7:60:E8:54:AE:81:45:80:37:C7:6C:5C:D6:4B:07:77:B3
X509v3 Authority Key Identifier:
keyid:FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:fd:dd:16:72:7e:85:3a:b5:11:45:5a:29:cc:b5:2e:29:1b:
d1:aa:a2:0f:26:f2:cf:f1:ef:fe:86:df:04:e5:11:13:b1:9e:
ce:49:a3:8d:11:73:c1:d4:9c:ad:6a:1d:20:ed:86:b0:6e:be:
a4:e9:30:83:20:38:34:d8:26:6f:47:fa:82:e3:ef:61:54:f2:
58:ed:cd:6d:47:4b:ad:18:02:7d:33:e3:6e:9f:35:7c:9b:81:
39:a8:85:35:0d:7a:ca:3d:6e:2f:e8:85:01:3f:43:fd:a1:09:
4a:db:21:45:6f:9b:eb:eb:99:c7:1f:03:ef:08:b2:32:34:d8:
61:02:37:fb:ef:38:8d:2f:de:bf:f6:bc:71:9d:dd:5f:37:51:
25:79:7f:42:9c:68:67:6b:33:cc:63:01:ff:cb:49:38:b2:5e:
08:d2:ff:30:96:d3:c0:fc:73:ec:49:fb:81:94:ff:13:8f:f2:
19:b7:1c:86:78:b2:42:47:26:01:a2:5e:58:ef:6a:0a:9a:e7:
dc:8f:d1:99:c4:40:1b:82:c7:b9:13:21:3d:06:7e:a9:03:42:
c3:4b:97:5f:df:7a:c9:8d:1b:cb:1e:7d:1e:da:be:08:16:ea:
64:95:c1:fe:84:af:88:2e:b6:f6:c5:7a:38:35:f7:1d:c9:55:
58:58:73:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:20:40 2025 by rpki-client