Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
File: _sQT3TZn54GV5SaKooWupRa8sZk.mft (raw, json)
Hash identifier: 5cnFgHq7Q1Y9v7Vh++sVZknUFGpmkaxQzMWgkTTsGwE=
Subject key identifier: 97:1F:54:25:72:69:E9:1B:FA:96:43:9B:4C:3A:FC:47:AC:3A:55:7C
Authority key identifier: FE:C4:13:DD:36:67:E7:81:95:E5:26:8A:A2:85:AE:A5:16:BC:B1:99
Certificate issuer: /CN=fec413dd3667e78195e5268aa285aea516bcb199
Certificate serial: 0198733DCFC2BF185211C14F4C9F9631149E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
Manifest number: 1340
Signing time: Mon 04 Aug 2025 04:01:27 +0000
Manifest this update: Mon 04 Aug 2025 04:01:27 +0000
Manifest next update: Tue 05 Aug 2025 04:01:27 +0000
Files and hashes: 1: _sQT3TZn54GV5SaKooWupRa8sZk.crl (hash: RDlSz39jMLcabeAjFbLvpiWUJ1h/hHsQrJiJ16FEhWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:cf:c2:bf:18:52:11:c1:4f:4c:9f:96:31:14:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec413dd3667e78195e5268aa285aea516bcb199
Validity
Not Before: Aug 4 04:01:27 2025 GMT
Not After : Aug 5 04:01:27 2025 GMT
Subject: CN=971f54257269e91bfa96439b4c3afc47ac3a557c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ef:20:a5:78:1c:10:55:a8:ed:27:44:0d:93:
eb:62:0b:c1:0b:d5:ed:45:20:42:36:56:94:b7:db:
6c:d1:de:65:70:60:85:99:dc:c4:ae:5e:0e:ad:13:
a0:35:e4:53:75:06:89:1a:54:11:ce:36:4a:25:a0:
35:b6:7c:56:48:16:7c:8f:94:ca:a0:e4:7c:f5:34:
7b:79:36:f4:94:76:7a:44:1f:11:3a:b7:3a:1e:12:
0a:d8:53:5b:f5:e4:1b:2f:4f:43:31:42:0c:83:6a:
d4:f6:ef:14:fd:09:76:6d:f9:a5:78:d9:a8:ac:fa:
99:2e:14:2b:38:56:27:f6:da:fd:b4:b6:6d:13:13:
d9:ee:17:9f:5d:74:f8:62:ee:b6:8c:9c:09:61:37:
fb:fd:ab:a1:3e:4c:f8:99:b5:0b:15:4b:ce:ca:69:
c0:f8:e8:9c:8b:39:20:71:a8:37:60:2b:bf:ea:47:
f1:6a:5a:8c:89:a1:f7:53:71:70:3b:59:21:0f:0d:
eb:af:de:ee:11:21:0f:5e:e5:a7:64:d3:5f:59:5b:
c4:ae:3d:8a:79:f2:51:67:79:43:03:2d:70:2b:b6:
ec:b0:41:fe:ec:39:d9:c0:54:60:9c:59:92:93:93:
ac:80:0a:65:00:9a:d6:a3:b8:0a:d4:1a:3d:5e:8e:
a6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1F:54:25:72:69:E9:1B:FA:96:43:9B:4C:3A:FC:47:AC:3A:55:7C
X509v3 Authority Key Identifier:
keyid:FE:C4:13:DD:36:67:E7:81:95:E5:26:8A:A2:85:AE:A5:16:BC:B1:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:32:fa:bc:d8:4f:13:59:04:d6:a1:d6:3f:64:08:9f:09:ad:
c0:1b:8c:53:a3:73:e5:d2:c2:97:17:ab:1f:cc:a6:9a:4d:56:
10:01:1c:18:5b:8c:2d:eb:56:fb:f5:62:c2:45:22:80:f7:c1:
31:a7:25:d9:db:a7:f9:ed:17:56:5e:65:f8:ec:b5:7c:29:bf:
b1:26:ed:88:66:5e:2e:5c:3e:4c:ce:52:ea:39:ea:68:6d:37:
5f:d5:e4:5b:39:c2:e0:48:ab:b5:16:1d:09:95:ba:53:69:cc:
64:bf:79:5b:84:64:71:6d:3a:56:ae:76:34:01:85:c2:df:c2:
be:93:bc:35:8b:00:ba:30:d9:8f:a2:70:b5:52:7c:de:9e:76:
68:88:3b:b8:39:8b:37:00:3b:6b:f8:5a:8c:89:3e:09:5e:e0:
80:48:f2:ef:b8:20:bf:0f:ce:39:e9:31:42:10:1b:33:41:cd:
e6:5a:63:46:6e:35:95:69:b4:17:4b:5b:87:bb:91:6e:2c:7d:
72:ea:04:ca:23:6f:c3:c2:1c:a0:26:27:9d:da:f2:3f:c9:01:
0d:62:76:ed:6f:42:1c:18:91:24:22:b6:69:8a:10:cf:03:9f:
79:48:98:86:89:28:4e:1f:28:77:92:7e:ea:c7:57:95:25:1a:
60:7f:40:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:05 2025 by rpki-client