Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft
File: pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft (raw, json)
Hash identifier: 0o1bZbiITkgStjjTGmyt/FrxJ4i7jWKeDKwi7lo8rvg=
Subject key identifier: AE:64:0E:7C:02:B8:77:11:FD:55:8F:18:F1:DE:82:15:C0:BB:A0:B3
Authority key identifier: A6:AD:5E:70:01:3F:4D:F8:45:5F:A0:6C:93:E6:00:12:C2:99:73:D5
Certificate issuer: /CN=a6ad5e70013f4df8455fa06c93e60012c29973d5
Certificate serial: 01987D8AA345BE71D1D016F67A0A7DB9E7EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft
Manifest number: 1618
Signing time: Wed 06 Aug 2025 04:01:34 +0000
Manifest this update: Wed 06 Aug 2025 04:01:34 +0000
Manifest next update: Thu 07 Aug 2025 04:01:34 +0000
Files and hashes: 1: pq1ecAE_TfhFX6Bsk-YAEsKZc9U.crl (hash: UkqEcaIfijYstE/tg7JoyiDAXWh1VI1AiAYqQV1xtz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:a3:45:be:71:d1:d0:16:f6:7a:0a:7d:b9:e7:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ad5e70013f4df8455fa06c93e60012c29973d5
Validity
Not Before: Aug 6 04:01:34 2025 GMT
Not After : Aug 7 04:01:34 2025 GMT
Subject: CN=ae640e7c02b87711fd558f18f1de8215c0bba0b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:57:d3:3b:e7:36:bc:94:d6:b7:cb:7d:64:91:
68:52:8b:d0:36:2d:97:6c:fc:eb:88:3b:96:3f:09:
9d:70:3e:47:c1:f4:26:e7:09:df:32:d3:7e:f0:d1:
a2:ca:2d:ae:01:52:87:a5:60:2e:91:1b:54:fd:43:
c6:15:e9:73:90:44:6b:d2:f2:3b:92:e3:65:56:58:
dc:02:74:60:e9:73:2c:f7:09:91:da:29:4e:bb:75:
5b:2e:e9:14:3c:4a:24:c6:db:45:7b:50:d0:4d:de:
b8:b0:23:37:80:76:31:0e:ba:5a:e0:5a:74:21:4f:
6b:b0:63:93:08:bc:a7:03:f9:aa:ef:44:b1:bc:f6:
3c:5a:3b:5b:76:f8:f0:61:10:f5:19:44:b9:71:56:
18:c6:c6:d1:95:f5:a9:08:5f:33:59:cc:fc:bc:67:
dc:bc:15:59:65:a2:9a:0c:e4:c1:c8:64:b1:6d:3c:
0e:f2:95:e5:38:7a:23:c0:a2:40:31:f1:0e:ed:42:
83:5a:8d:4d:7a:52:26:50:6e:63:98:bf:a5:82:fd:
33:30:df:cd:97:18:b2:16:0c:7b:1c:ff:d2:b4:f4:
b4:d9:3b:3a:8f:96:9b:83:54:e5:95:5b:3a:87:25:
61:3a:ff:d0:41:94:03:7a:ef:ac:48:c7:1d:0e:e7:
39:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:64:0E:7C:02:B8:77:11:FD:55:8F:18:F1:DE:82:15:C0:BB:A0:B3
X509v3 Authority Key Identifier:
keyid:A6:AD:5E:70:01:3F:4D:F8:45:5F:A0:6C:93:E6:00:12:C2:99:73:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:a6:3e:6d:ce:b8:aa:89:76:7f:c8:56:60:65:22:b2:fa:5d:
6d:de:e1:08:05:92:62:6f:06:c9:c1:0c:99:0e:f8:8e:13:9e:
82:9e:e6:2e:dd:02:fa:22:c8:f9:2e:f6:09:76:7f:51:7b:f1:
32:77:36:87:ad:de:a6:7c:66:1b:13:1b:04:a5:c6:35:03:78:
f9:47:c9:88:30:92:81:b5:67:bd:db:55:67:53:ce:db:17:01:
68:05:d5:c0:64:4d:cc:00:9d:b5:17:3b:4e:fb:d1:91:14:35:
a9:4e:cc:96:f2:54:d6:fa:1b:ad:02:39:de:1d:9b:59:88:c8:
8a:22:89:71:58:35:9f:25:85:22:52:1d:f4:25:4f:ab:87:0f:
53:cc:3b:98:fa:08:5f:cb:bb:bb:a5:fe:a5:13:6d:35:14:b4:
45:06:1a:42:52:ec:be:39:3b:52:06:6b:02:55:18:2b:d3:85:
b1:a5:34:3e:39:29:91:01:2b:74:ed:e3:7e:06:2a:f6:a5:8a:
d9:14:b8:b1:c9:f0:57:a0:bb:79:33:00:98:93:c1:65:77:61:
fa:7c:ac:cc:e3:d6:95:f6:8d:09:9c:b7:a6:18:1d:68:ed:74:
05:0d:52:70:55:0f:02:c9:82:72:d4:de:3d:b2:10:c4:bd:98:
cd:b9:d3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:29:16 2025 by rpki-client