Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
File: 1-qWsXSKtkHinLhNplihyR-nx4TE.mft (raw, json)
Hash identifier: UTN2TPjfGaCwkxenLQ7ptZVRjyNAx9sdlCJNfXWJJc4=
Subject key identifier: 4D:AB:A5:6F:33:0F:E4:47:2E:E1:46:9F:3C:D1:A8:68:F6:C5:F4:D8
Authority key identifier: FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31
Certificate issuer: /CN=faa5ac5d22ad9078a72e136996287247e9f1e131
Certificate serial: 01977A5420759FD3D54988A80227A8F340BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
Manifest number: 10C3
Signing time: Mon 16 Jun 2025 20:00:22 +0000
Manifest this update: Mon 16 Jun 2025 20:00:22 +0000
Manifest next update: Tue 17 Jun 2025 20:00:22 +0000
Files and hashes: 1: 1-qWsXSKtkHinLhNplihyR-nx4TE.crl (hash: rcAdmA5DPeIAUjXR1pFUs7BPRRnsH80MpOJG7inoiEg=)
2: NhnMYjAslLVa-AUlcKz__rn95zo.roa (hash: tZEX0EAU3kMvQjAQCJnIAbh87GSUNy8524Ozv2q7nvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 20:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:54:20:75:9f:d3:d5:49:88:a8:02:27:a8:f3:40:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa5ac5d22ad9078a72e136996287247e9f1e131
Validity
Not Before: Jun 16 20:00:22 2025 GMT
Not After : Jun 17 20:00:22 2025 GMT
Subject: CN=4daba56f330fe4472ee1469f3cd1a868f6c5f4d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:53:81:9e:88:81:c3:82:a6:d0:43:9d:7b:eb:
f3:66:36:4c:67:2d:35:20:b2:8e:c6:bf:62:ed:37:
08:7b:0e:b5:50:78:ee:b0:47:cd:e5:53:c3:b8:23:
7b:24:ac:fd:2b:11:6d:03:19:9c:32:65:1f:3f:10:
12:ee:d6:71:29:ea:27:ca:36:a0:77:8a:e7:e0:1b:
96:53:dd:87:56:70:be:57:4b:bc:ad:76:19:45:14:
f1:68:85:e3:82:77:68:60:a8:9a:d3:4d:cb:66:b4:
79:3f:0f:b8:79:82:88:64:9e:bb:35:2e:cc:eb:7f:
0f:71:27:79:b3:2c:bd:95:77:2e:91:7e:4c:1c:ab:
8a:16:3e:9d:55:29:33:31:9c:bb:b6:0b:b6:49:42:
34:d8:8d:6f:fc:5b:27:0d:87:00:73:07:7f:40:57:
3a:ac:af:58:2b:4d:05:dc:7b:c5:38:d8:bc:9a:66:
88:4b:aa:e6:e6:04:45:9a:9a:80:89:43:68:d5:24:
34:d6:77:45:d8:c1:6a:9b:0a:26:4b:aa:0d:67:7c:
90:c7:e2:9e:d6:cb:28:58:b9:a3:11:8d:36:c9:40:
11:fd:b5:04:9c:e9:e9:3a:13:40:d3:63:00:ec:e6:
58:65:61:21:e4:96:73:43:2d:84:67:06:10:45:d3:
01:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AB:A5:6F:33:0F:E4:47:2E:E1:46:9F:3C:D1:A8:68:F6:C5:F4:D8
X509v3 Authority Key Identifier:
keyid:FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d1:df:d9:be:66:76:b8:30:41:cd:97:c2:09:b0:f0:d4:c4:
f6:52:cb:03:75:24:13:9f:ac:18:7e:0b:72:12:78:fd:ea:eb:
db:f1:9c:06:08:8a:cc:43:9b:41:da:8b:39:b0:4b:5f:b1:8b:
0b:4c:6a:ac:7e:ef:1d:10:49:fc:b9:ac:63:21:85:ef:84:dd:
e7:ad:b1:96:a7:10:ea:f7:fc:cd:9a:9c:9b:f0:2f:5d:d9:c3:
3a:3b:c0:0d:3a:f4:0f:f8:88:fd:87:80:4f:b9:f9:93:2b:b4:
d4:d5:ea:bc:1a:be:92:ba:99:f4:ab:54:3a:14:1f:2d:5a:0a:
ee:76:88:89:38:f7:1e:ea:94:20:c2:ad:78:44:ca:e6:ca:b7:
3e:88:e4:03:65:6c:1d:b0:15:6a:60:cc:7d:d8:30:0d:ff:19:
0a:55:70:45:95:76:3f:77:6f:06:6c:e1:eb:ee:df:e6:3f:84:
35:99:09:97:34:c1:82:df:1c:69:28:46:ec:dc:14:03:9d:fc:
be:2e:9f:3f:6e:7f:52:a9:0e:69:bd:f0:29:fe:be:02:ab:cd:
ef:1b:84:b4:3f:3f:64:3f:05:f0:aa:b4:f1:bf:65:74:99:b2:
86:fb:0e:80:b7:70:05:97:26:3d:34:a8:7f:94:fe:3a:04:3e:
2e:1a:f4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:29:31 2025 by rpki-client