Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
File: 1-qe1orkHCRPTSTKBX-tH42Mf318.mft (raw, json)
Hash identifier: EuUZykISBTSp2X2uYId8fcyNyu7l4FVx5UWb5yTCxq4=
Subject key identifier: 82:0D:A6:E2:84:9F:95:C0:E4:1E:3E:05:5E:0E:F7:DD:78:22:29:0E
Authority key identifier: FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
Certificate issuer: /CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Certificate serial: 01976F99A1DDCD69575604CEA38158AC8D66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
Manifest number: 136B
Signing time: Sat 14 Jun 2025 18:00:28 +0000
Manifest this update: Sat 14 Jun 2025 18:00:28 +0000
Manifest next update: Sun 15 Jun 2025 18:00:28 +0000
Files and hashes: 1: 1-qe1orkHCRPTSTKBX-tH42Mf318.crl (hash: XA1VUPltrWviVegwLuRgZBhKuQcCmhHKNJWIUd8fESE=)
2: gHlRquCMx6iwfFhK1AbziJf-SOA.roa (hash: vGvXkm75uZ6w5eWBxSl4fiUVkztcBJ6xWRWL2h8kjfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:a1:dd:cd:69:57:56:04:ce:a3:81:58:ac:8d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Validity
Not Before: Jun 14 18:00:28 2025 GMT
Not After : Jun 15 18:00:28 2025 GMT
Subject: CN=820da6e2849f95c0e41e3e055e0ef7dd7822290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:05:b8:ae:31:33:70:ec:8d:d3:59:fe:b9:42:
48:6f:e8:74:36:15:95:5b:39:47:2b:6e:00:5e:0d:
cd:b5:b3:ad:7c:02:53:90:df:c2:b4:56:ac:a3:b6:
ce:9d:b1:3b:6a:12:21:76:b4:ee:01:a1:0e:60:14:
5a:5a:ad:37:44:e9:3f:13:c2:7b:55:f7:c8:0e:0e:
88:7c:53:ef:a4:e6:02:9e:aa:20:fe:b9:b5:87:b5:
88:72:cd:a8:a8:bf:62:19:b8:5d:ca:f8:1d:f7:af:
d4:ff:7e:e2:ab:41:33:b1:9e:4d:f6:c9:ed:e1:03:
84:57:b4:73:9d:c5:26:4e:47:2f:71:dd:47:94:fa:
75:c1:5b:11:c1:9d:11:cb:2a:cf:fc:bb:e6:52:9b:
3e:65:42:0b:85:b8:43:94:6e:a0:c8:13:cc:cd:7a:
cc:c1:a9:c7:7f:c0:a5:93:0f:40:4e:c1:ce:a1:3b:
68:53:82:f4:f0:dc:41:6f:8c:82:0b:e5:73:05:d3:
5c:b6:91:74:f8:05:af:02:69:1d:41:df:be:6c:8e:
4c:b3:fe:11:42:e6:d2:1f:7c:f0:0a:9f:43:d0:9c:
10:77:b4:d8:14:7c:1b:1c:d3:ac:da:07:a0:e7:cb:
b3:b0:12:7f:e9:de:f2:f9:b2:c5:aa:3d:84:ba:c2:
2d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0D:A6:E2:84:9F:95:C0:E4:1E:3E:05:5E:0E:F7:DD:78:22:29:0E
X509v3 Authority Key Identifier:
keyid:FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:47:99:db:47:ba:be:ad:e8:60:44:28:c8:40:69:dc:26:b4:
62:07:d9:93:cf:b0:68:6f:aa:d8:7c:85:86:72:5d:fc:ee:3d:
1c:29:8c:04:dc:6c:5b:0c:3f:43:b8:ad:67:34:50:7c:5a:40:
f9:d3:6c:cd:82:77:ff:42:53:34:cd:f6:67:fb:6c:8c:97:f6:
d0:be:19:1d:04:ad:42:20:07:9c:70:c2:24:02:27:89:c3:65:
81:f2:3b:48:da:fb:4c:1f:39:1f:b9:0b:ec:ed:8d:33:2f:a5:
fc:01:5a:5a:5e:6f:36:74:de:f5:4a:e7:97:3e:6b:49:03:33:
8f:7a:ba:5c:c9:cb:3e:1b:46:27:01:14:a6:a6:ec:bd:4e:69:
fc:6c:6c:6a:aa:ef:a3:96:3a:0c:0e:b3:a5:31:9f:99:de:1e:
79:f7:93:1b:79:e4:61:13:19:80:20:f0:f7:79:d1:60:3a:01:
40:41:8e:d7:dd:b7:b3:9e:90:e2:f7:53:3f:df:1f:69:e8:5a:
73:8e:d3:b2:86:49:60:39:e6:2d:18:50:53:c9:71:c9:a4:08:
f5:ed:14:36:2a:af:1c:73:bf:31:e0:ec:92:fb:73:4f:33:ef:
67:c5:fb:c5:bb:ee:8e:8b:27:be:4b:2a:10:3c:a8:06:d5:dd:
05:f2:af:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:23:37 2025 by rpki-client