Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
File: 1Cq3jtp78B2VtZd07TRry_lqJoQ.mft (raw, json)
Hash identifier: uhMKan21Lstk2I1RXZDl0Ea/Ku67bR0TYXjQripo7eY=
Subject key identifier: F5:2E:6C:98:A5:4B:19:A2:25:EB:90:25:61:10:3F:9D:7C:D7:8B:2D
Authority key identifier: D4:2A:B7:8E:DA:7B:F0:1D:95:B5:97:74:ED:34:6B:CB:F9:6A:26:84
Certificate issuer: /CN=d42ab78eda7bf01d95b59774ed346bcbf96a2684
Certificate serial: 019896A4F10B787E323A71C1A2FF49F4C6FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
Manifest number: 0677
Signing time: Mon 11 Aug 2025 01:00:48 +0000
Manifest this update: Mon 11 Aug 2025 01:00:48 +0000
Manifest next update: Tue 12 Aug 2025 01:00:48 +0000
Files and hashes: 1: 1Cq3jtp78B2VtZd07TRry_lqJoQ.crl (hash: aeqrUbtU4wjmJ2YILUzPFTu+TlXW7cYng608j3nEnYk=)
2: veEHXuiIgvjqTG6WTLvj8TN1Y9c.roa (hash: zCX9I5DqbiV1NyDUSWL69SaWgCwLBmNnvgRIApALMN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a4:f1:0b:78:7e:32:3a:71:c1:a2:ff:49:f4:c6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d42ab78eda7bf01d95b59774ed346bcbf96a2684
Validity
Not Before: Aug 11 01:00:48 2025 GMT
Not After : Aug 12 01:00:48 2025 GMT
Subject: CN=f52e6c98a54b19a225eb902561103f9d7cd78b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f5:d1:c5:5d:80:1e:40:21:51:4d:e7:f6:60:
06:bc:83:98:cf:a0:d2:b8:a3:42:07:47:15:4e:75:
af:fe:00:52:08:45:b2:e1:fc:81:30:0f:14:cf:da:
49:c3:ef:e4:b3:d9:8c:2e:e3:d7:03:38:3f:20:4a:
66:6b:24:ec:ed:fb:9c:e6:01:fa:b6:f1:6f:f6:ea:
a6:18:7f:f1:86:33:62:25:73:4b:9d:f8:94:f4:99:
74:58:2a:42:82:aa:c9:f6:1d:5a:ac:e4:1e:d7:7f:
ff:13:98:82:cf:97:6b:f7:92:44:1d:e5:6f:d9:f8:
7d:26:e5:91:8f:ae:10:39:7b:68:a7:b1:71:df:46:
22:44:e3:ba:71:31:28:2b:de:1b:5b:4d:59:e5:65:
f4:11:5b:f8:c3:82:4b:55:1b:5e:7d:4d:10:14:27:
ab:8a:ca:a1:dd:74:88:72:62:7a:f3:fe:6e:f3:d7:
91:13:42:1d:24:a6:a4:82:3b:fe:f8:74:a8:9e:38:
b2:51:bd:97:0e:b1:f1:22:e2:ce:65:9f:84:fd:ae:
c0:d5:87:fe:d2:38:48:52:26:69:1d:8f:f8:b4:2f:
0a:64:03:e7:9d:74:c1:f8:10:08:e2:83:27:d5:90:
07:13:37:f4:59:41:08:ff:d7:3f:9e:48:5f:82:87:
91:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2E:6C:98:A5:4B:19:A2:25:EB:90:25:61:10:3F:9D:7C:D7:8B:2D
X509v3 Authority Key Identifier:
keyid:D4:2A:B7:8E:DA:7B:F0:1D:95:B5:97:74:ED:34:6B:CB:F9:6A:26:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:62:d9:6a:db:7c:50:74:87:b5:ec:89:3b:8c:b5:c7:07:c3:
68:32:34:b1:b5:61:74:6c:94:2e:f8:c2:10:1e:ff:eb:22:1a:
07:cc:76:ae:65:8c:fc:13:3f:14:0f:a4:3f:e1:7c:6a:a3:84:
b1:bc:f4:62:b4:a8:ab:76:fc:83:5b:3f:c8:ab:5f:00:ef:57:
f8:c9:c4:48:21:b1:49:17:79:1b:e9:75:45:99:35:dc:38:41:
fb:89:f7:b0:43:4c:13:4f:8c:7c:c2:c3:95:4a:03:53:be:97:
09:1f:b0:e4:ee:79:94:fd:93:95:11:58:6d:0f:a6:74:a4:cc:
10:96:d2:0b:0e:19:4d:45:b2:0b:26:2f:72:bd:c6:bc:6c:e8:
4f:69:7b:fd:71:89:d5:24:c3:f6:3b:8c:8f:8d:86:37:f7:03:
1a:6e:d8:a4:e7:cd:f4:b3:87:0d:a7:a4:17:48:04:5a:03:92:
32:46:ce:f4:4e:bd:13:bd:23:39:24:0e:f3:c0:49:d2:2d:56:
92:1b:f7:67:7a:14:e1:e3:f5:fc:04:fc:83:56:1e:ac:2b:04:
98:53:0d:09:b6:6a:01:21:51:b1:0d:0b:63:65:8c:18:86:96:
94:93:c2:18:0f:96:15:71:8a:60:cc:c2:cb:ab:8b:4a:1f:07:
61:54:19:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:25:25 2025 by rpki-client