Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
File: 1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft (raw, json)
Hash identifier: 2rRO5HgNYa0z2DGsfxHYX8kGBuZCAQyte5TpTOagC4Q=
Subject key identifier: E5:A1:7A:37:B7:F7:32:0C:7E:D1:7E:34:5F:5D:8C:51:61:C3:C4:23
Authority key identifier: F9:AA:8A:3E:A9:91:33:33:93:F3:EF:2A:18:22:45:11:23:D3:EE:C7
Certificate issuer: /CN=f9aa8a3ea991333393f3ef2a1822451123d3eec7
Certificate serial: 01976CCFD935748CA4ADF4033C4019D8EE95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
Manifest number: 158B
Signing time: Sat 14 Jun 2025 05:00:50 +0000
Manifest this update: Sat 14 Jun 2025 05:00:50 +0000
Manifest next update: Sun 15 Jun 2025 05:00:50 +0000
Files and hashes: 1: 1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl (hash: Nx/xK4FRcN5MXy8sUr0LMefrVOtPuuwAQMGBWDhye+4=)
2: mxOutmmSzZNxuKpcgLVVZu-l64M.roa (hash: 9XVkgMijFdMAyjZxhpANyJaDNj4FdVCkkG/qmNyFekA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:d9:35:74:8c:a4:ad:f4:03:3c:40:19:d8:ee:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9aa8a3ea991333393f3ef2a1822451123d3eec7
Validity
Not Before: Jun 14 05:00:50 2025 GMT
Not After : Jun 15 05:00:50 2025 GMT
Subject: CN=e5a17a37b7f7320c7ed17e345f5d8c5161c3c423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c0:c4:5b:45:c2:ca:fd:87:3d:23:70:84:28:
89:5a:40:f2:6a:6b:bc:3e:86:52:ad:77:a3:d2:f3:
b8:6a:7d:75:a0:e8:3f:d0:5e:4d:8e:62:50:81:1c:
ec:05:67:2e:2e:e0:66:55:a2:1a:c0:c8:40:92:d7:
aa:1f:e4:25:c3:e3:81:5a:ad:75:da:34:b3:b9:6e:
3e:38:ac:b8:aa:6d:1e:41:fc:be:de:a6:62:51:1c:
4c:32:4d:02:50:94:fa:f8:51:3d:65:80:6f:92:d1:
0f:5a:9f:7e:6c:25:ed:e7:61:71:d0:59:2f:8b:5c:
f0:00:cf:ee:9e:52:6c:db:fa:42:5e:f7:37:86:21:
8c:aa:27:da:e3:a6:a8:82:f7:73:69:99:03:09:b8:
38:fa:bc:05:25:59:95:7e:db:1c:54:4a:51:6e:38:
57:5b:ff:d7:26:f4:f9:ba:be:a4:ef:1c:de:25:3e:
31:b8:cc:d7:30:61:e0:14:48:74:b5:d4:9a:b1:af:
64:6c:19:c7:8f:f5:39:70:a1:ad:35:b2:21:c0:58:
72:e5:f7:88:e6:17:25:09:6c:a9:3f:3c:a6:22:f6:
8c:a7:e3:5c:12:3d:33:1e:48:7c:38:e8:32:ce:07:
e9:a6:a5:09:98:ed:1d:c4:52:84:d3:28:43:7f:fe:
0c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A1:7A:37:B7:F7:32:0C:7E:D1:7E:34:5F:5D:8C:51:61:C3:C4:23
X509v3 Authority Key Identifier:
keyid:F9:AA:8A:3E:A9:91:33:33:93:F3:EF:2A:18:22:45:11:23:D3:EE:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ff:ba:db:5d:77:e8:6e:94:29:25:01:00:91:3f:cc:68:ce:
31:38:9b:3b:b4:d0:f9:d7:a8:2d:43:90:a8:19:bb:90:03:65:
21:5d:6c:25:e2:a3:be:09:6b:9a:9a:69:46:ac:a6:da:6f:02:
28:be:7a:98:b6:f9:3f:1d:6a:db:88:c2:63:96:9c:0a:c2:59:
1e:71:bd:30:e8:1a:09:33:86:0e:9c:d9:11:5a:a4:58:36:06:
83:e2:eb:5a:31:32:2b:d3:89:ee:64:ab:c0:02:d6:91:18:dd:
fe:03:69:ed:9b:3e:ef:26:ea:1d:36:f2:3e:33:e5:46:d8:98:
7f:71:5a:19:23:a6:4d:03:a1:1e:39:b2:91:93:09:f4:41:5d:
95:d7:a6:b6:94:dd:22:b7:4d:ed:69:e8:a1:9a:d1:88:65:29:
01:0d:31:fe:ad:d7:d9:94:56:aa:9a:4c:21:f7:e1:4c:e2:80:
7f:21:2c:30:76:77:2e:0d:73:44:a6:6b:1a:74:3b:f5:50:21:
df:18:ab:37:9d:48:50:be:b1:44:6f:50:57:ce:4d:55:0a:c7:
82:4e:56:68:a3:9f:e6:24:05:19:1d:55:9c:24:cf:7c:c8:a2:
45:cb:ae:51:08:05:43:7c:c3:5d:a8:1e:31:a5:da:f0:ab:a6:
4d:fa:f5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:59:08 2025 by rpki-client