Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
File: sZQPAAmW6_0tq3HEacxR7ogbP14.mft (raw, json)
Hash identifier: oc/CniYByCtisEDlDe4QnK1GVg2Y1wmnvBmnPCArNlU=
Subject key identifier: 88:9F:E0:2B:16:85:51:4B:F3:9D:73:3C:A5:B1:03:16:07:4E:8E:79
Authority key identifier: B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E
Certificate issuer: /CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
Certificate serial: 019874BE6FE65DAD70CC62F70EDCF7DA6256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 11:01:34 +0000
Manifest this update: Mon 04 Aug 2025 11:01:34 +0000
Manifest next update: Tue 05 Aug 2025 11:01:34 +0000
Files and hashes: 1: BA5XRS-VBm8RVVbSCJW6HST0wD0.roa (hash: b9K7NP8BwX8VNftSD4zDv00erFxrleUYzaeFhztZOO8=)
2: gbBXW-vxInHi16BrBBKHLf7If3g.roa (hash: fBYMDG4bZkxXYdO0y/chVffLP2RSHLaDCHJZ1DFzD3E=)
3: sZQPAAmW6_0tq3HEacxR7ogbP14.crl (hash: Yizw9f+RXzPHyN+tHX7f2sKKS0IygZdoEbxoA2bvyyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:be:6f:e6:5d:ad:70:cc:62:f7:0e:dc:f7:da:62:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
Validity
Not Before: Aug 4 11:01:34 2025 GMT
Not After : Aug 5 11:01:34 2025 GMT
Subject: CN=889fe02b1685514bf39d733ca5b10316074e8e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:97:0d:dd:b2:d3:d8:bd:c2:f7:97:67:8a:71:
7a:60:a8:fc:77:d3:f8:2f:f3:e2:95:25:90:e4:16:
9b:71:59:b7:16:a0:8d:1f:88:20:f3:a6:0f:41:14:
d7:d9:96:51:3c:d8:14:2c:c3:88:4b:e2:72:ba:22:
36:2e:19:aa:9b:e6:fb:06:91:5f:90:1c:8c:1d:39:
c7:39:fd:60:a5:f0:bc:57:df:fd:4a:ab:28:d3:2f:
d1:35:85:33:79:60:58:21:1f:e0:39:bc:f1:5a:71:
8e:36:36:63:da:5b:39:4b:2e:e4:2e:84:56:ad:94:
6e:f0:90:9a:ca:c5:dd:60:46:88:41:aa:d4:11:45:
8e:a1:98:28:6f:ed:45:31:d1:eb:32:e7:00:c3:92:
81:02:50:bc:33:27:4b:72:12:4d:18:42:90:d1:ef:
f0:49:79:59:01:4c:72:71:51:57:ae:7b:8f:85:a6:
49:82:44:c6:3b:e0:ac:02:39:52:9f:58:4a:72:e7:
a2:86:20:d6:b9:5d:65:b5:b7:72:8a:80:aa:39:89:
62:2d:3b:b9:6a:fb:10:0e:fe:b3:02:43:d9:5d:21:
5d:82:71:f7:40:82:cc:e8:12:59:7c:54:f9:4d:7f:
31:1f:6f:b4:c0:9b:7c:64:6c:70:93:2a:c2:a8:84:
9f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9F:E0:2B:16:85:51:4B:F3:9D:73:3C:A5:B1:03:16:07:4E:8E:79
X509v3 Authority Key Identifier:
keyid:B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:34:e7:95:e7:9e:9f:3f:9b:be:f0:53:99:12:c2:87:cd:36:
53:6b:f0:62:9d:e9:58:a1:a9:04:b4:f8:75:30:a4:b1:14:2c:
09:ce:22:85:5c:67:38:5a:2a:53:63:e5:80:7b:bc:83:f1:ab:
eb:f5:c7:19:91:6c:6c:67:15:a0:25:e2:59:e2:1e:1e:be:3b:
80:8e:46:38:d0:02:13:fb:a4:69:6b:52:b1:a4:46:ca:67:42:
c5:a3:e2:f3:2f:d9:5e:d8:76:ec:c5:fe:89:69:9d:21:b7:73:
aa:41:31:34:97:60:f2:d3:c9:5e:2f:ae:3b:53:cf:99:23:7c:
4f:86:d4:f6:52:59:70:93:4d:af:cf:88:f3:67:70:ba:91:66:
db:3d:b5:94:fc:45:c5:99:27:db:aa:60:30:9a:cf:7a:c4:4a:
47:5e:f1:c8:c9:97:e9:a1:69:63:8d:7a:69:05:9a:2a:7a:c4:
db:79:4c:96:29:f1:c1:95:a5:c7:9d:e3:1d:94:22:7a:73:c8:
73:ec:2b:12:19:83:5f:a4:18:28:d0:09:59:d5:16:02:68:23:
dd:12:31:48:7c:e6:88:d5:f6:ac:4b:fd:97:0d:29:68:74:49:
65:fd:38:e9:fa:b2:95:bb:23:82:d1:26:e6:43:66:a6:10:5d:
1a:2b:c4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:15:07 2025 by rpki-client