Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
File: 1-s2QGroNNrZWz5jgwCkX46qiibQ.mft (raw, json)
Hash identifier: fxKkJDeeBhwPbh4mF6kK4dP7JQ3rpdK7UETLN+bkos4=
Subject key identifier: 7A:45:C0:D7:8C:5C:99:0F:D6:DA:7D:CE:A2:5E:40:9D:89:29:EA:60
Authority key identifier: FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
Certificate issuer: /CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Certificate serial: 019895925EADC290ABB017D8D3525AFD936B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
Manifest number: 068A
Signing time: Sun 10 Aug 2025 20:00:54 +0000
Manifest this update: Sun 10 Aug 2025 20:00:54 +0000
Manifest next update: Mon 11 Aug 2025 20:00:54 +0000
Files and hashes: 1: 1-s2QGroNNrZWz5jgwCkX46qiibQ.crl (hash: pcop+qo79qBt/2Yte2XMNNRi/8YU4QUnp2RYgptRi1U=)
2: wSUCaZlDq8tA-HMBau3EJ93tyfU.roa (hash: yMgrf3IwtSaiP9aq+f/a8xegEvYBFlBB7iCkJrEJ6kA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:92:5e:ad:c2:90:ab:b0:17:d8:d3:52:5a:fd:93:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Validity
Not Before: Aug 10 20:00:54 2025 GMT
Not After : Aug 11 20:00:54 2025 GMT
Subject: CN=7a45c0d78c5c990fd6da7dcea25e409d8929ea60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2d:c6:4c:9d:c4:c1:56:9d:60:e4:55:aa:ed:
d7:55:35:93:9b:b6:b9:fc:54:11:68:03:55:2d:2d:
7f:25:13:ba:70:af:b1:7e:e6:7e:d6:ca:7d:49:a1:
bf:55:38:44:ba:93:00:b5:af:e3:f8:ab:72:fe:11:
8f:9e:f7:cc:df:4e:93:63:09:75:eb:f5:e6:50:ff:
78:a8:81:7d:cc:07:b1:c6:b0:59:72:9d:cb:dc:04:
8d:1f:92:65:90:7a:9e:c5:0e:fd:a9:d3:42:39:5c:
12:da:da:20:d9:91:ed:e3:f6:93:a3:2c:a1:d8:7e:
29:7d:6e:12:8b:20:2f:bb:0d:8f:ba:d7:d4:4e:7e:
41:59:81:a5:b6:65:06:a2:87:da:c0:61:cf:23:64:
2a:e0:06:42:d0:63:e5:7c:2e:db:4d:6b:cf:58:3f:
2a:4b:d6:81:39:55:f7:e2:1c:9b:f3:ae:0d:2a:a1:
c7:20:9e:fc:35:43:9d:a7:fa:f3:f9:83:74:03:27:
2a:36:c8:af:7b:ae:f5:59:b2:b1:33:4a:f0:40:21:
de:ac:95:75:86:b0:d3:6f:df:cb:b6:f5:b5:83:a0:
5f:c9:c7:42:69:23:5e:d8:60:dc:9f:43:d4:c1:f6:
af:30:3b:38:05:6a:c1:b3:1c:ca:ed:f7:bb:a7:4e:
e1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:45:C0:D7:8C:5C:99:0F:D6:DA:7D:CE:A2:5E:40:9D:89:29:EA:60
X509v3 Authority Key Identifier:
keyid:FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:9b:ca:6b:4a:4a:00:33:ff:5a:ff:89:14:5c:59:61:46:e4:
0c:db:cf:0b:53:d0:86:2f:ad:24:d7:9a:e0:b3:cb:52:8a:c0:
81:e4:fe:8e:58:c7:8a:3f:e8:44:ce:14:32:d6:3f:34:ce:32:
6f:b6:44:e5:0a:91:f1:5c:e9:9c:71:85:80:c2:d1:5d:28:1e:
57:84:bc:45:47:b3:df:65:cc:a6:53:86:d9:c5:4e:1b:99:0a:
7a:19:cb:57:57:d9:4a:a4:9d:44:0c:4b:c9:2f:32:7a:57:6f:
36:b1:5f:07:64:60:c7:30:c3:fa:f7:d5:cf:da:ca:ee:66:f1:
0e:7b:5c:a8:5b:60:60:72:2d:48:af:ac:0e:b2:d7:1d:89:da:
a9:0c:e9:20:4b:73:16:a2:51:7c:a9:a8:f9:9e:f6:50:da:df:
d7:09:d2:a4:1b:38:af:e3:b9:f1:6f:96:3d:92:41:eb:02:ab:
94:bc:38:40:53:f6:8e:32:f0:96:62:db:08:8b:2d:b0:78:6f:
07:d3:c1:aa:ef:a6:7e:02:15:aa:69:0a:8a:e4:be:67:da:ac:
5d:bd:81:30:9e:17:58:9f:61:3a:b8:96:5c:7c:d0:9b:8f:f1:
30:20:12:51:73:34:42:6a:13:f0:35:d2:9d:17:af:47:b2:6b:
66:37:7e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:09:22 2025 by rpki-client