Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
File: 1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft (raw, json)
Hash identifier: b+zUiMAc7ltCNHpQvuFVbip8el5HzEz0gl2kH0DzSGQ=
Subject key identifier: 3A:68:53:02:2C:49:B4:15:DD:7D:A7:77:B8:22:B6:75:F6:41:DC:D7
Authority key identifier: FA:DA:5A:AA:6C:99:46:2F:EB:15:9F:56:B1:C0:AF:2D:D3:F4:62:5B
Certificate issuer: /CN=fada5aaa6c99462feb159f56b1c0af2dd3f4625b
Certificate serial: 01987A898F99B6D8467CCF84276277897E58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
Manifest number: 1617
Signing time: Tue 05 Aug 2025 14:01:32 +0000
Manifest this update: Tue 05 Aug 2025 14:01:32 +0000
Manifest next update: Wed 06 Aug 2025 14:01:32 +0000
Files and hashes: 1: 1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl (hash: 8S3riUnt8PQ5Rxig9bcr9nkDs7PyUl5KiqH8nj8kb7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:89:8f:99:b6:d8:46:7c:cf:84:27:62:77:89:7e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fada5aaa6c99462feb159f56b1c0af2dd3f4625b
Validity
Not Before: Aug 5 14:01:32 2025 GMT
Not After : Aug 6 14:01:32 2025 GMT
Subject: CN=3a6853022c49b415dd7da777b822b675f641dcd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f0:d9:1f:65:9c:47:8b:cc:6f:c2:d9:38:2e:
45:a2:56:8c:c9:00:45:a4:53:4f:37:a8:5f:7c:1e:
f0:82:53:74:2f:72:cd:23:64:03:c4:d7:44:96:30:
8e:9f:4d:ee:a5:35:a8:7b:38:b8:d9:e0:6b:fd:91:
0f:5d:9f:07:bf:18:e3:0b:72:bf:e6:23:b7:92:af:
b3:d0:e9:f7:11:6a:09:8d:af:98:d5:8b:7f:8c:87:
3c:fd:55:69:6d:d4:88:0c:6a:30:b8:41:51:69:2d:
e2:70:9a:b1:7e:e8:d4:98:64:4b:b6:24:65:78:26:
93:65:ef:b0:fc:9e:08:dc:63:57:ec:d5:47:1f:d4:
33:a6:80:ae:0f:08:4e:12:99:15:88:8a:cd:5e:c4:
a7:a4:6b:39:15:31:d9:f2:72:f1:39:97:06:c2:90:
13:67:27:1d:25:65:1a:b1:e0:03:b1:37:16:49:41:
9f:34:85:23:df:f5:38:0c:7c:4d:0f:3b:f2:01:3d:
58:79:29:f4:01:39:b4:f6:c4:c7:bb:89:74:23:8c:
47:c0:40:28:44:18:62:b6:32:c2:1f:84:eb:5b:96:
8e:34:21:e6:f0:70:27:79:67:31:26:cc:34:f7:85:
95:e8:95:f1:a8:9e:7c:75:10:c9:d7:35:6a:5e:51:
05:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:68:53:02:2C:49:B4:15:DD:7D:A7:77:B8:22:B6:75:F6:41:DC:D7
X509v3 Authority Key Identifier:
keyid:FA:DA:5A:AA:6C:99:46:2F:EB:15:9F:56:B1:C0:AF:2D:D3:F4:62:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:34:10:c4:74:70:19:c0:22:33:ce:9b:a0:29:20:dc:de:04:
36:81:b1:ce:33:4f:39:e4:76:54:aa:74:2e:6b:45:4e:f2:84:
21:e8:e5:8f:44:c2:5d:35:18:33:77:9b:14:3f:8d:a8:11:ae:
39:cf:22:35:c4:34:f3:e4:23:94:09:79:c1:1e:78:a9:ef:19:
ee:27:d1:87:75:86:ea:b3:0f:bb:30:ed:21:dd:51:85:d0:8f:
7a:2a:10:86:53:dc:68:74:9e:d0:06:a6:f3:50:3c:b7:de:15:
0e:3d:6a:08:59:fe:fc:aa:af:ba:ff:15:35:ce:2d:bd:74:0d:
d6:2c:a6:59:9e:63:e1:86:99:00:44:97:4f:24:4e:7e:15:d3:
7c:bf:93:63:5b:75:40:5f:75:c1:3f:bb:e7:2a:0b:ea:19:c1:
d7:57:03:56:92:a4:05:a7:bd:3a:b9:0d:6a:22:73:a4:33:0e:
5a:96:c5:f7:3f:d9:14:6f:26:b4:03:83:e2:76:d4:88:88:a3:
88:e8:01:70:d8:45:69:79:e8:a1:aa:37:5c:00:98:80:87:87:
66:bc:95:6c:91:a7:1b:6f:8e:7e:70:a6:df:f4:af:e9:43:0e:
b2:97:64:1a:28:54:19:98:bf:6c:56:a3:69:95:4d:23:69:13:
13:93:b7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:04:53 2025 by rpki-client