Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
File: 1-TVqludOotcrZUXIfHnSEtcqe94.mft (raw, json)
Hash identifier: 9D0QGcE5+b1+Ju+tHVMDA9nuUtSnr2Faxe1D3Fm2Qj8=
Subject key identifier: BB:E3:1B:55:1F:52:77:F6:71:F3:FC:4C:BB:18:FA:9C:CD:8F:1D:24
Authority key identifier: F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE
Certificate issuer: /CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
Certificate serial: 01988279D9F82DCD5D9F8C69666A78E6D0DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
Manifest number: 14F1
Signing time: Thu 07 Aug 2025 03:01:20 +0000
Manifest this update: Thu 07 Aug 2025 03:01:20 +0000
Manifest next update: Fri 08 Aug 2025 03:01:20 +0000
Files and hashes: 1: 1-TVqludOotcrZUXIfHnSEtcqe94.crl (hash: Tg6ENXkpUUjp4b57m6SQ/iKwHMJdSXjyBZQzVkESQFY=)
2: 40BuKq_ENsetJ0coeTja2uim-XM.roa (hash: jFKs1Nj/rGuvWwuXC1CAsi/+KiI87gmidC/b6O4pmJ4=)
3: Ozsn4JoKAsG2v5UbV7B2BGsrTbM.roa (hash: 3pxKTq3sMKN1NqkN5QM+NnGuUJMn7eGHWu6Nl0xki4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 03:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:79:d9:f8:2d:cd:5d:9f:8c:69:66:6a:78:e6:d0:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
Validity
Not Before: Aug 7 03:01:20 2025 GMT
Not After : Aug 8 03:01:20 2025 GMT
Subject: CN=bbe31b551f5277f671f3fc4cbb18fa9ccd8f1d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d0:84:2d:80:3f:99:3e:a8:a0:37:1a:cc:36:
bb:9f:a7:63:af:09:28:c7:bb:83:70:fd:8b:ed:0d:
f4:e2:75:04:89:75:51:03:a5:11:14:50:76:b0:de:
0a:ec:45:cd:a2:70:75:a7:22:6f:e3:66:10:62:e1:
82:ca:b1:f0:02:ce:dd:67:90:1a:9f:66:02:be:a2:
27:8a:a4:ca:ad:54:b9:f7:9d:9c:09:16:5c:fe:81:
60:e5:2b:f7:02:24:b4:45:59:85:3a:b7:ca:c2:d4:
13:93:de:e7:ef:e4:9a:53:27:ed:9f:f0:6e:25:57:
65:31:57:08:17:86:e3:0d:4a:b8:35:3f:d7:39:99:
17:b5:7f:e5:9e:71:b1:28:ac:1f:0e:20:51:48:29:
9c:53:2b:5a:80:e4:c2:f1:3a:b2:94:b4:ee:64:80:
02:3a:56:31:5b:b7:fd:43:6e:23:3a:c3:48:6e:52:
5f:79:ab:bc:c8:5f:9c:4f:16:db:70:21:0a:da:4c:
15:21:3a:f4:15:48:ac:14:e7:f9:09:f0:a2:f7:91:
74:9e:bd:4b:f8:1d:16:df:6a:4b:77:00:11:11:d0:
8a:4c:9d:59:91:4d:eb:68:06:91:9e:13:c3:47:b2:
40:6c:75:24:77:fb:e1:04:ca:33:b6:3f:dd:25:4c:
63:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E3:1B:55:1F:52:77:F6:71:F3:FC:4C:BB:18:FA:9C:CD:8F:1D:24
X509v3 Authority Key Identifier:
keyid:F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:11:b4:85:36:73:fa:14:7f:50:d3:38:c5:16:5e:1c:55:d1:
b9:7a:d9:d9:50:1d:da:81:1b:55:69:73:55:3f:38:62:da:ec:
fa:1c:85:45:3b:5f:95:1e:72:a3:36:f7:6c:a7:94:e2:d7:cb:
67:ef:74:5e:90:6b:a5:3f:18:6b:33:75:7f:aa:1a:de:33:4c:
8f:74:64:db:ac:d3:49:42:d1:2c:92:87:05:08:e3:96:fe:7a:
26:2b:3e:27:e4:3d:18:4b:5c:d5:84:78:f1:59:88:f2:f7:33:
b9:bd:18:b4:c7:fc:e8:c6:79:7e:2a:c6:bd:70:56:47:e1:e2:
8c:9e:17:e1:07:65:a8:94:fa:5e:91:13:ce:4f:77:4f:ad:1e:
8a:e3:93:57:41:39:ea:da:38:2c:64:b8:97:c0:cf:20:dc:0d:
6b:7c:b5:bb:25:d6:44:3c:39:01:dd:cf:52:b0:2d:37:1f:2b:
dd:cb:55:78:b3:80:d1:26:61:92:0a:47:bf:72:9f:36:6a:fa:
23:92:af:e9:84:6f:8a:db:1d:1c:4a:bb:a1:f4:f4:1c:f4:42:
73:be:61:e9:b1:66:40:27:1f:15:b7:c7:80:32:91:bd:ac:a2:
8a:a4:cc:9a:0b:8d:21:d3:6d:5a:13:85:38:54:70:f1:6f:71:
e8:b2:bb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:10:16 2025 by rpki-client