Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft
File: 1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft (raw, json)
Hash identifier: BHAKLMGZYm9wXUW9n/op48ndYEXmwhVVB7Ep04WZ9JY=
Subject key identifier: D4:35:07:8A:F1:44:74:CA:E3:74:9E:C1:07:46:8A:16:44:CF:04:CF
Authority key identifier: FA:64:6A:63:23:B3:D6:FC:34:AE:49:D8:BE:88:84:F7:29:2B:DB:F4
Certificate issuer: /CN=fa646a6323b3d6fc34ae49d8be8884f7292bdbf4
Certificate serial: 019873E319B7F57FE771AF926748A292A43D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft
Manifest number: 021B
Signing time: Mon 04 Aug 2025 07:01:59 +0000
Manifest this update: Mon 04 Aug 2025 07:01:59 +0000
Manifest next update: Tue 05 Aug 2025 07:01:59 +0000
Files and hashes: 1: 1-mRqYyOz1vw0rknYvoiE9ykr2_Q.crl (hash: bwmmqMm59n4VMGftFwO9XZIIR1NT24Px07TH7LnLYzE=)
2: bqDqPRBPFnQ0iuBvOTbQfn6LTaw.roa (hash: xUukexmvBcgVlPXbTsXO9o0sOZZdZlg/TOftt6SW0yE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:19:b7:f5:7f:e7:71:af:92:67:48:a2:92:a4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa646a6323b3d6fc34ae49d8be8884f7292bdbf4
Validity
Not Before: Aug 4 07:01:59 2025 GMT
Not After : Aug 5 07:01:59 2025 GMT
Subject: CN=d435078af14474cae3749ec107468a1644cf04cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bd:30:c8:62:da:ca:9c:5d:f1:83:23:60:bb:
1b:79:c6:14:83:ca:ae:5f:2c:56:34:b7:9b:bd:1e:
57:b2:37:1b:fb:8f:46:37:a7:f6:dd:5a:eb:63:aa:
08:2e:db:ab:ee:2f:7d:b0:26:53:f1:ea:55:bb:af:
52:c8:ac:91:1b:d1:31:b2:6a:20:35:ba:b0:c4:01:
53:77:cd:2c:3d:f5:7b:75:4f:ce:97:d3:23:82:d7:
8c:e4:2b:88:4b:ac:e3:91:fc:71:17:49:2e:2c:fb:
4b:57:9d:6d:55:a1:6a:05:e1:3d:e9:13:c6:b0:47:
cb:e9:28:9e:fb:99:ac:dc:e6:bc:de:75:61:83:5b:
dc:c2:3c:d5:00:4e:dd:75:aa:df:9b:68:3f:b0:fc:
b9:b8:6c:b9:75:94:51:ef:2d:74:35:89:55:fe:14:
40:c0:7f:b5:33:89:5f:3f:8d:48:ab:a2:30:10:bb:
d6:91:e7:b4:e3:9c:5c:bd:13:36:e7:8a:ee:2a:1e:
46:87:13:69:7b:ba:d5:a1:da:78:91:e5:7c:14:84:
03:ef:ac:d5:97:d3:a3:31:65:65:93:67:85:a8:2b:
bd:2d:57:82:5d:37:9b:92:67:fc:98:4b:de:7c:a5:
64:27:f3:94:a1:b8:8c:73:d3:b7:6d:74:e8:42:cf:
26:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:35:07:8A:F1:44:74:CA:E3:74:9E:C1:07:46:8A:16:44:CF:04:CF
X509v3 Authority Key Identifier:
keyid:FA:64:6A:63:23:B3:D6:FC:34:AE:49:D8:BE:88:84:F7:29:2B:DB:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:56:1e:e0:b5:87:fd:29:f6:a5:03:26:65:13:41:91:5c:48:
d0:f6:93:0a:4e:35:15:de:5d:91:52:4e:c0:27:14:ff:f3:00:
9e:7e:2b:89:30:c2:b4:06:f3:aa:a2:cf:da:77:c9:5d:cb:61:
22:c9:65:17:19:40:7a:63:9c:e7:df:9a:aa:41:24:db:a8:cd:
28:a7:88:7d:78:b0:9e:4d:9f:de:3f:a9:2b:45:8a:9d:b4:35:
92:38:a2:92:62:bd:39:ae:83:af:af:c2:99:c5:0b:95:a6:b7:
9c:4d:7f:04:2b:3d:6e:f7:a3:d3:d2:1e:05:f8:a9:6a:b2:43:
a3:ad:fe:b1:6c:33:9d:d6:49:21:24:6f:07:be:55:47:51:58:
14:d2:7f:81:ab:8a:76:9c:69:31:d6:c6:09:f0:f2:51:8a:24:
0d:31:10:a0:20:c9:45:46:02:0f:79:6d:f2:11:87:71:09:0a:
ab:0b:4c:46:74:1d:a0:88:18:98:3e:04:00:c1:ea:21:67:61:
d4:4f:a6:0b:bd:15:17:96:3b:1f:70:2d:da:d7:e2:1b:13:e9:
8d:4b:1b:96:ad:dd:48:68:16:4c:d9:3e:8d:1b:63:4c:39:cb:
7a:21:1f:12:c0:33:4c:90:93:11:ba:9e:6b:3e:75:c5:a1:11:
3c:7d:cf:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:35 2025 by rpki-client