Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
File: 1-RqCIwAuMSTluwboLU9go3m5Pc0.mft (raw, json)
Hash identifier: n+NL3jUtqbfvuAEt5bhvuKl23101/yLgSer886DZXls=
Subject key identifier: DF:5B:0C:80:EB:3C:69:2A:2B:55:4D:89:9C:96:EE:7A:95:F9:87:A8
Authority key identifier: F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD
Certificate issuer: /CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
Certificate serial: 01984F31AC36DBFBD68EC6FC484D7B4B6BBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
Manifest number: 10B5
Signing time: Mon 28 Jul 2025 04:01:52 +0000
Manifest this update: Mon 28 Jul 2025 04:01:52 +0000
Manifest next update: Tue 29 Jul 2025 04:01:52 +0000
Files and hashes: 1: 1-L2N1IxNmqwC6SnQGrk2zfPC90E.roa (hash: lv5rh5EEaSGLGKAlKwyPA6/B7Y5vo8o7IkiCP0ociGg=)
2: 1-RqCIwAuMSTluwboLU9go3m5Pc0.crl (hash: SO5LxSAE5RRcgwoihqp2/L5PFfEufh8ZOJGU1vTU7d4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4f:31:ac:36:db:fb:d6:8e:c6:fc:48:4d:7b:4b:6b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
Validity
Not Before: Jul 28 04:01:52 2025 GMT
Not After : Jul 29 04:01:52 2025 GMT
Subject: CN=df5b0c80eb3c692a2b554d899c96ee7a95f987a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fd:63:76:2c:99:8e:24:86:03:a4:64:fc:96:
55:44:07:a2:16:4f:fa:4f:c6:a3:1d:ac:7c:2c:50:
79:72:19:9a:1a:57:93:94:d4:6d:d0:81:59:1f:d4:
f7:96:2c:bd:7a:63:c8:8e:08:e8:fa:89:60:90:ea:
1a:db:93:ad:42:ee:00:1a:34:8a:2a:c7:5c:82:b4:
75:e8:74:82:45:85:db:cc:0e:d1:3c:ef:8e:d0:1f:
23:03:21:2a:96:97:70:da:fa:e6:26:a2:08:dd:a5:
1d:75:c0:1b:6a:12:f7:24:7d:59:45:16:59:7f:50:
13:34:16:28:04:d6:97:b3:9c:e2:cc:06:35:29:dc:
92:d3:71:33:a7:b5:d0:f1:d8:83:0f:d8:15:8a:05:
4b:55:d6:07:d6:aa:e4:30:0d:06:78:19:e0:56:4b:
95:0c:0d:e7:ad:db:36:de:cb:7d:4d:91:5b:a1:83:
87:2e:d5:0c:62:e3:bd:e2:e7:ae:2d:f4:ec:d4:af:
a8:d9:c0:0b:a6:26:4b:c1:e0:7d:6f:e2:98:a4:39:
6c:ab:a0:ac:f5:62:7d:a3:84:1e:25:23:fe:67:fa:
27:0a:f5:5f:00:ec:dc:56:5f:60:82:4e:b2:fd:4f:
37:a1:39:5f:74:78:a6:f6:e0:9e:96:76:9d:12:94:
f2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5B:0C:80:EB:3C:69:2A:2B:55:4D:89:9C:96:EE:7A:95:F9:87:A8
X509v3 Authority Key Identifier:
keyid:F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ed:28:4a:aa:a6:f6:8d:2d:ee:34:d0:e4:84:cb:f2:42:ef:
00:ee:cf:36:ac:ad:20:7b:ab:f0:3c:eb:04:71:28:4d:88:27:
22:52:c6:d8:41:51:d9:be:0c:ca:0a:96:19:07:a7:91:cf:e3:
35:cf:e2:6e:69:98:c0:37:b0:c2:94:32:73:84:49:6c:2f:76:
67:61:64:df:cf:80:f8:ba:d1:3e:8f:b2:72:46:94:9c:c3:94:
cc:76:cd:2e:e8:2a:88:c3:83:a6:0e:25:a5:c0:14:32:92:a2:
c9:05:4a:f0:43:96:b3:8e:57:d8:2a:21:bb:44:9c:f5:1c:1f:
3f:8a:b6:ad:3e:dc:b7:bc:1d:32:89:2b:84:e0:66:ba:43:f0:
20:be:34:7f:96:21:8e:43:b0:8f:55:0a:f5:cb:9c:87:0d:c1:
be:76:16:0c:c7:df:63:8f:e5:73:68:f9:43:0b:40:34:4d:9b:
5d:08:ed:2f:5c:bd:b0:06:b4:38:95:6d:ac:91:43:d6:6f:67:
9c:2d:df:5d:8f:b8:9e:a6:5a:33:91:d2:30:3f:e5:6b:30:23:
e7:e1:f2:19:2a:6f:72:e5:c4:bd:96:2d:27:e2:1c:fb:0f:2d:
cd:78:33:62:e6:42:b9:6e:33:e5:a6:4b:df:63:ae:9a:2e:8f:
f9:c7:1f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 07:09:41 2025 by rpki-client