Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
File: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft (raw, json)
Hash identifier: 12fUNTn1Y56AHllav4cyTZhRquscMXaBHZlNZCul3OQ=
Subject key identifier: 60:7E:EE:6F:1C:24:C7:15:0F:EB:15:CF:4A:04:83:75:33:EB:2E:8A
Authority key identifier: FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E
Certificate issuer: /CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
Certificate serial: 019836C19EBE6A2449256545A84A56CF68BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
Manifest number: 1399
Signing time: Wed 23 Jul 2025 10:08:35 +0000
Manifest this update: Wed 23 Jul 2025 10:08:35 +0000
Manifest next update: Thu 24 Jul 2025 10:08:35 +0000
Files and hashes: 1: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl (hash: oxcp1Lh5AfaUdJ5oYxwlyVxkAUhkETD8qy+w267+4wI=)
2: uamuqQFO1RITJ5dk81fUrUR6XPQ.roa (hash: 1C1t+rXqVF/ZLbA2JmjtUkNNdPmBmSQrsPid9bwQzME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 10:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:c1:9e:be:6a:24:49:25:65:45:a8:4a:56:cf:68:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
Validity
Not Before: Jul 23 10:08:35 2025 GMT
Not After : Jul 24 10:08:35 2025 GMT
Subject: CN=607eee6f1c24c7150feb15cf4a04837533eb2e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:91:43:f6:0e:a8:ea:a1:17:cb:01:6b:be:59:
ca:68:3b:f0:25:3e:dd:61:d1:0f:7a:db:ae:13:96:
ac:ae:43:88:dc:51:73:30:0b:18:73:3d:d1:e0:24:
df:d8:46:88:ee:9a:76:12:f9:be:f5:74:63:63:e0:
26:d7:8f:63:53:7b:4d:e3:e9:93:3b:25:93:b7:75:
7a:4b:ce:f5:4e:a8:a4:85:ba:ce:c1:c1:89:59:4f:
18:d2:0a:90:f1:d2:57:2f:6e:30:6e:ce:e1:4c:df:
ce:c8:2e:03:6c:8c:a7:0c:53:e7:a9:e6:4c:2e:8c:
9c:42:54:be:a3:91:2a:33:5e:be:aa:d3:3d:29:af:
64:d0:66:a8:2b:1b:e7:76:67:74:32:6f:ec:53:e0:
bc:3e:5e:c1:1c:e3:ac:16:d3:b4:39:44:ed:e5:7a:
32:62:f9:f7:58:28:31:e0:0e:18:77:66:53:d9:66:
34:22:de:7a:6b:78:a6:13:9c:05:22:31:93:63:03:
37:b0:0d:36:73:40:38:65:c6:8d:12:6f:e4:88:e8:
be:23:63:e0:ff:4b:99:40:5d:a5:c4:5c:d1:7e:4a:
cf:b0:9a:cd:65:85:9b:eb:6c:f5:3e:df:84:70:3f:
78:33:8c:d6:31:25:4e:0c:4c:e6:28:5e:b2:0c:b2:
41:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7E:EE:6F:1C:24:C7:15:0F:EB:15:CF:4A:04:83:75:33:EB:2E:8A
X509v3 Authority Key Identifier:
keyid:FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b9:31:eb:80:a9:23:d9:92:d3:95:fa:ba:21:9d:b2:71:6a:
8a:80:e8:e5:55:5f:74:30:d0:69:34:a6:23:61:78:57:1c:9a:
9a:ee:a3:62:32:48:a7:69:89:c9:2c:3a:44:ff:c1:3d:4b:6d:
4b:6f:44:aa:dd:13:ff:c2:45:7b:a5:90:69:2a:e5:64:f7:be:
15:f3:1e:22:66:dd:71:67:29:eb:21:83:7e:36:2e:6d:60:9f:
7b:16:44:50:b8:4c:0c:bd:78:79:89:d3:4c:f6:d5:42:a6:89:
c6:8f:12:9e:86:5c:1b:e5:af:e9:de:8b:cf:0e:2d:c8:a5:5f:
d9:4f:c8:a2:62:f6:26:e2:de:d8:8f:68:14:2b:6e:71:f1:6b:
bf:54:5f:c9:38:e9:be:e3:e0:7a:be:19:12:62:02:23:c9:9e:
4b:9a:6a:57:c3:6f:f1:4d:45:69:60:e2:fa:5c:59:54:b1:3b:
3f:f2:4a:3c:fe:6c:94:fc:82:60:c5:b0:d2:db:8c:ad:56:5b:
3a:b5:cb:73:ba:dd:1e:1e:0f:64:b5:41:4c:af:f5:a6:7b:0d:
a5:73:2b:08:1e:bf:27:1d:56:03:3b:01:4f:dc:64:07:ff:94:
f7:8a:0e:90:a5:1c:03:24:0d:0e:89:c6:e5:61:3f:0b:bc:dd:
8e:84:91:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 18:34:39 2025 by rpki-client