Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
File: 1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft (raw, json)
Hash identifier: FXJvig1fBsg7FDSYqmA6OfRcGb3iSGH15Rs2N1n2NTc=
Subject key identifier: F6:0D:A9:22:77:ED:E5:31:AE:C1:55:55:AA:98:2E:8F:DB:C5:E5:65
Authority key identifier: FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70
Certificate issuer: /CN=fa70b42d7af6ad78222b30f05f2b7913f8063570
Certificate serial: 01984B535AA5BC0B9CAAE86CE514607F715F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 10:00:10 +0000
Manifest this update: Sun 27 Jul 2025 10:00:10 +0000
Manifest next update: Mon 28 Jul 2025 10:00:10 +0000
Files and hashes: 1: 1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl (hash: ijGFJ4Vg5DYOCKbxhok6he5WlBqKiZ3kpm3Ip/BQe4I=)
2: KK6CnYNVLgkO9qFyFOT9UGvXJYI.roa (hash: ZHlrP8V5BtXECEdhL9eJuVBZKLMvwmVQC0U5b4cXw08=)
3: o5N_jAG9g_aL4MkwpX9OBq0Dy-k.roa (hash: M8ydZ1fG/pikMq2g2Lj2Oo2CSVv2VUo2aqU5TzG0PFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:5a:a5:bc:0b:9c:aa:e8:6c:e5:14:60:7f:71:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa70b42d7af6ad78222b30f05f2b7913f8063570
Validity
Not Before: Jul 27 10:00:10 2025 GMT
Not After : Jul 28 10:00:10 2025 GMT
Subject: CN=f60da92277ede531aec15555aa982e8fdbc5e565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0e:0d:8a:3c:a9:00:2f:01:58:5e:3a:b8:4f:
2b:81:98:63:98:58:e2:86:eb:a0:b6:b4:b3:5e:e4:
97:68:1b:ee:c4:d0:f4:4c:b0:3c:e7:99:ab:ef:20:
77:b5:cd:cf:dd:bc:37:87:3a:da:f3:04:c7:d1:5f:
67:49:02:52:3d:ab:2b:ad:ad:c1:56:6f:c2:1e:70:
00:c2:e1:d7:75:53:fd:86:64:f1:b7:6d:5c:92:67:
6c:ec:83:a3:dd:86:e0:d6:cd:3e:f3:05:65:36:f3:
99:c9:d2:89:b1:8d:e3:c1:f7:ec:5d:d0:00:4d:cc:
6f:12:b5:e7:7d:3d:97:cd:c5:7c:5f:46:ef:2c:c7:
c5:da:0b:d4:51:51:18:a6:71:77:8a:1c:5c:c9:69:
94:f3:ff:5c:c6:31:8d:ec:de:17:d1:8a:b7:37:e0:
bc:f9:18:e7:a2:d0:7f:63:6e:bf:11:eb:fc:5b:25:
ae:9d:e3:51:43:f3:9e:bd:2c:69:52:9b:22:f7:ad:
fa:84:9a:39:30:d3:81:93:72:f8:34:7c:fa:6e:dd:
b4:72:af:12:f8:48:f7:9e:70:4a:25:fc:d0:d9:4a:
40:4e:50:43:64:0e:d8:9f:86:25:1f:56:a7:73:3b:
b7:a4:e3:99:48:f1:07:a3:84:97:ad:44:9d:02:8f:
e7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0D:A9:22:77:ED:E5:31:AE:C1:55:55:AA:98:2E:8F:DB:C5:E5:65
X509v3 Authority Key Identifier:
keyid:FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:32:e5:fa:85:85:a4:18:36:fc:63:8f:b3:3b:aa:22:94:1b:
05:87:73:6a:e7:c2:73:ce:97:0d:7f:f4:6b:80:a7:3b:53:80:
d6:ed:b9:fc:5d:8e:81:c5:ea:6b:e1:77:45:33:2a:96:81:c2:
26:66:76:5a:c3:93:30:75:a4:ce:fe:94:75:8b:cb:cd:50:87:
cb:4f:fa:cf:60:3a:77:c2:c8:f7:4d:15:85:4a:39:9b:e4:0a:
0a:fc:57:e5:33:c3:1b:b2:ba:5f:89:ef:f5:44:47:ae:3e:9b:
dd:a0:9f:05:94:14:bf:ef:cc:b5:7a:6a:d5:a0:e6:fc:92:b6:
6a:e9:00:21:80:22:6a:2b:a6:2e:35:59:a3:3e:77:44:4f:8a:
b5:35:20:28:81:89:65:08:45:df:25:a3:0e:e1:8e:ef:0c:56:
d6:d0:89:1c:b0:ed:19:1d:ad:ff:95:19:c8:33:de:45:eb:d9:
96:23:c6:da:ed:b0:4d:30:05:f0:08:4e:d6:cb:e0:c3:d0:55:
ec:d2:1e:0b:49:08:23:59:46:55:cb:ec:ac:28:f4:14:49:44:
4f:43:af:8e:d8:29:29:15:b5:db:7e:8a:d5:bc:9b:74:a0:ca:
0d:1b:c4:55:88:53:25:d9:ea:11:66:04:a3:28:86:fb:a6:bc:
cd:f9:cc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:41:51 2025 by rpki-client