Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
File: 1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft (raw, json)
Hash identifier: N2xppJAToYRNjtQ4IVQmH68O67dR/L6q97d7PagRtC8=
Subject key identifier: 6D:93:52:9F:26:42:B6:42:B5:29:B5:07:95:3C:76:0B:66:E4:B7:9E
Authority key identifier: FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70
Certificate issuer: /CN=fa70b42d7af6ad78222b30f05f2b7913f8063570
Certificate serial: 019873E1D04C710F577816C32184B8249028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 07:00:35 +0000
Manifest this update: Mon 04 Aug 2025 07:00:35 +0000
Manifest next update: Tue 05 Aug 2025 07:00:35 +0000
Files and hashes: 1: 1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl (hash: jgwEHo5BWbZpEG010uN2HB17WgYj6LUdz04v/ioYuVQ=)
2: KK6CnYNVLgkO9qFyFOT9UGvXJYI.roa (hash: ZHlrP8V5BtXECEdhL9eJuVBZKLMvwmVQC0U5b4cXw08=)
3: o5N_jAG9g_aL4MkwpX9OBq0Dy-k.roa (hash: M8ydZ1fG/pikMq2g2Lj2Oo2CSVv2VUo2aqU5TzG0PFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:d0:4c:71:0f:57:78:16:c3:21:84:b8:24:90:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa70b42d7af6ad78222b30f05f2b7913f8063570
Validity
Not Before: Aug 4 07:00:35 2025 GMT
Not After : Aug 5 07:00:35 2025 GMT
Subject: CN=6d93529f2642b642b529b507953c760b66e4b79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:aa:9d:ea:ac:77:f2:26:4d:99:64:6b:11:ab:
a2:a9:22:ae:fc:c9:3f:14:c8:b8:80:9c:2d:64:cc:
af:f4:86:1a:44:33:e2:cc:36:af:54:33:8c:dc:3f:
9a:9e:cc:4c:b0:2c:5f:d6:92:12:53:01:73:f8:93:
56:a9:e2:83:2d:ba:d7:3f:af:92:97:73:6a:2a:c5:
89:77:7d:a4:b4:f5:f4:19:83:56:1f:90:2a:84:ba:
15:b5:21:73:16:6e:46:86:cc:ca:67:45:ed:dc:6f:
9a:bf:91:13:73:0e:0a:03:52:a6:01:74:ba:ab:69:
c8:9c:cc:32:69:8f:e5:c3:52:21:4d:87:c4:e8:7d:
e1:2f:08:14:ad:41:f7:ab:65:4e:08:8d:c0:35:04:
fc:43:1d:e6:53:c5:af:a8:d7:f0:29:b6:3c:54:09:
55:b8:8c:70:72:d7:a7:36:4b:6a:de:5f:8c:df:0e:
18:54:05:35:0d:16:7a:e7:23:8e:fd:38:e5:3f:ee:
5d:cf:03:ef:af:f3:42:a8:cf:12:56:9d:54:18:75:
e0:3b:38:5b:d5:60:bf:46:39:ee:27:11:fc:59:0a:
9f:10:da:49:b8:08:3c:1e:b1:a3:b7:42:22:c7:0b:
dc:54:d9:6a:54:52:85:31:31:ce:fa:0b:5a:e9:e2:
11:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:93:52:9F:26:42:B6:42:B5:29:B5:07:95:3C:76:0B:66:E4:B7:9E
X509v3 Authority Key Identifier:
keyid:FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:ee:4e:20:97:cc:2a:0b:66:ae:e7:12:91:bd:fe:54:46:f1:
79:90:66:07:35:bb:f5:1d:8e:9e:06:8e:11:32:d1:72:b5:89:
af:30:81:09:33:d1:68:86:12:a8:1f:13:9b:05:fa:88:5b:d2:
0e:6b:87:61:8d:67:cb:6e:38:81:4f:9c:77:39:b6:e3:2d:39:
8d:d9:d4:77:84:71:fa:1e:43:e8:54:b8:e9:f7:d6:07:98:1a:
a4:99:7f:42:44:17:cc:6b:29:3e:54:92:d3:68:2c:91:06:7f:
4f:2b:3d:79:b9:1e:24:ae:cb:d4:b9:a3:28:e9:7a:3b:6a:9e:
01:53:e9:50:98:f2:0d:3f:4d:fa:0e:41:02:f2:ef:55:ab:b4:
ee:3b:14:fa:00:68:28:5e:47:1e:47:aa:7f:5f:5a:cb:6a:85:
c3:58:f4:51:b1:a5:9c:7d:1c:2c:69:cb:18:8e:6c:1e:f3:b7:
8b:f7:dd:24:7d:1e:30:40:72:f4:1c:4b:a5:96:a8:3a:7f:cf:
c7:d5:a7:cc:0f:e6:74:28:f7:ad:4a:9d:f4:4e:c0:68:7b:c5:
46:1a:f4:7e:5a:0a:10:73:f2:cd:a3:e7:3f:c1:84:16:a0:86:
57:76:99:36:51:18:97:7d:43:b5:18:05:4c:a9:ad:9c:d1:f7:
5d:c3:fb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:14 2025 by rpki-client