Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
File: 1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft (raw, json)
Hash identifier: eIIfcryjySxszvVQCfcpMXMt4D96fhO+v2+s9NXxxy4=
Subject key identifier: 5B:7F:BE:9A:AA:4C:0C:C0:79:E1:D3:22:0D:9E:0F:F7:96:01:A2:03
Authority key identifier: F9:AA:8A:3E:A9:91:33:33:93:F3:EF:2A:18:22:45:11:23:D3:EE:C7
Certificate issuer: /CN=f9aa8a3ea991333393f3ef2a1822451123d3eec7
Certificate serial: 01987D1C7F7B5342E7C220A0683B6E676A88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
Manifest number: 1618
Signing time: Wed 06 Aug 2025 02:01:16 +0000
Manifest this update: Wed 06 Aug 2025 02:01:16 +0000
Manifest next update: Thu 07 Aug 2025 02:01:16 +0000
Files and hashes: 1: 1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl (hash: L5ylhc0RsNOJrir7TN/+WTG1H22wi1ytHCvNYH+pyOU=)
2: mxOutmmSzZNxuKpcgLVVZu-l64M.roa (hash: 9XVkgMijFdMAyjZxhpANyJaDNj4FdVCkkG/qmNyFekA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:7f:7b:53:42:e7:c2:20:a0:68:3b:6e:67:6a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9aa8a3ea991333393f3ef2a1822451123d3eec7
Validity
Not Before: Aug 6 02:01:16 2025 GMT
Not After : Aug 7 02:01:16 2025 GMT
Subject: CN=5b7fbe9aaa4c0cc079e1d3220d9e0ff79601a203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3b:fd:1c:fb:ed:b6:da:52:a7:d7:e8:4d:08:
ec:76:0d:97:b5:ad:94:17:f4:c8:3c:8e:17:6b:a7:
a1:db:34:34:8f:35:01:6e:5e:57:86:27:99:d4:fe:
b1:7d:4f:1d:dc:74:01:39:0b:5a:48:05:02:c5:99:
64:d5:0e:91:13:ec:37:02:15:7a:d8:4f:6b:b6:fe:
69:c2:19:93:0b:6e:d1:7f:10:85:82:1d:89:3c:2c:
d1:d7:0d:66:64:5b:c2:58:e8:d0:78:6c:53:87:ce:
2e:f0:0d:4a:fa:fe:04:0a:cd:40:f7:9c:04:25:6e:
53:84:c0:52:20:bf:42:51:8d:8f:33:9d:da:33:24:
bf:d4:8c:69:32:fb:c4:51:2d:fb:7e:71:e4:e5:53:
5a:62:eb:7e:21:9e:2a:38:5f:c7:74:db:87:56:30:
28:12:3a:4e:5f:3d:74:b0:ff:ad:37:0a:29:ce:c1:
95:10:f0:9b:4e:b2:11:41:bc:b3:65:b7:b6:c4:8e:
07:d7:6a:13:f5:0f:f1:68:f6:d1:14:60:68:cf:9a:
52:20:6f:f2:c2:47:46:2a:6d:fe:f4:e0:5b:59:15:
40:55:82:5c:37:d9:46:82:74:f8:15:95:e5:c4:8b:
ba:13:36:49:3a:d6:92:de:25:b1:c0:65:c0:e9:1e:
f4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7F:BE:9A:AA:4C:0C:C0:79:E1:D3:22:0D:9E:0F:F7:96:01:A2:03
X509v3 Authority Key Identifier:
keyid:F9:AA:8A:3E:A9:91:33:33:93:F3:EF:2A:18:22:45:11:23:D3:EE:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:11:b1:c1:63:d4:ae:75:ce:51:58:c6:13:6a:ac:0a:87:06:
40:f1:89:4b:36:de:d9:10:81:f9:03:a6:d2:19:30:55:0b:22:
34:6e:20:ca:cf:13:f3:00:5a:79:99:26:ea:f2:b2:ca:80:f2:
ed:c6:56:89:b5:0a:17:f4:62:4a:ba:58:a1:63:9f:f2:f7:89:
45:93:3a:95:c0:13:cb:83:54:b9:ab:ec:89:03:34:99:31:c8:
bd:38:9b:18:a8:2a:07:ff:74:c3:df:a4:8e:cf:4b:45:c9:91:
7d:2f:1c:6d:38:69:9f:53:ce:fb:3f:12:e2:c5:a8:b5:b1:e7:
fe:2a:21:b8:ac:1d:be:2c:a9:1e:05:7a:8b:3c:31:98:4e:27:
d5:8d:7f:60:77:ea:7d:80:0f:de:d9:94:ad:19:e3:ac:62:40:
ac:b8:e7:f4:fb:ac:9f:b9:4c:f3:c1:0f:4b:26:02:da:8b:df:
2d:50:39:73:fc:dc:1c:95:0e:8c:cc:c1:d7:0a:bc:20:d4:81:
86:39:f8:1a:e7:bb:ff:67:c7:bf:8d:44:ea:52:bb:52:1d:6c:
a4:4e:4f:64:1d:48:ea:7f:76:ab:af:05:a3:f1:7c:a3:96:3d:
c9:6b:d3:63:b9:71:11:92:2d:31:2a:de:fd:06:7f:68:b6:6c:
56:ec:65:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:14:18 2025 by rpki-client