Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
File: 1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft (raw, json)
Hash identifier: HpxKFvqlmim00ilDJv5yXXC+Uh5GnhIaODndFsM4vug=
Subject key identifier: 62:D9:F7:5E:B1:93:08:2C:D7:9D:36:C2:22:70:BC:00:0C:22:7A:6C
Authority key identifier: F9:AA:8A:3E:A9:91:33:33:93:F3:EF:2A:18:22:45:11:23:D3:EE:C7
Certificate issuer: /CN=f9aa8a3ea991333393f3ef2a1822451123d3eec7
Certificate serial: 01984AE5FE17E6D2205380DC04C6A34F3998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
Manifest number: 15FE
Signing time: Sun 27 Jul 2025 08:00:43 +0000
Manifest this update: Sun 27 Jul 2025 08:00:43 +0000
Manifest next update: Mon 28 Jul 2025 08:00:43 +0000
Files and hashes: 1: 1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl (hash: paOA9x8GRjxf6/+IF9/gJQN6mvlEQAsARcqE12m/SGc=)
2: mxOutmmSzZNxuKpcgLVVZu-l64M.roa (hash: 9XVkgMijFdMAyjZxhpANyJaDNj4FdVCkkG/qmNyFekA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:fe:17:e6:d2:20:53:80:dc:04:c6:a3:4f:39:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9aa8a3ea991333393f3ef2a1822451123d3eec7
Validity
Not Before: Jul 27 08:00:43 2025 GMT
Not After : Jul 28 08:00:43 2025 GMT
Subject: CN=62d9f75eb193082cd79d36c22270bc000c227a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7f:3c:72:d2:be:b1:11:d5:2a:9c:38:b0:40:
5c:68:bf:ae:19:d4:49:72:75:db:ce:d7:59:ef:10:
74:20:9e:39:41:84:13:26:ed:6d:5a:15:93:3c:7a:
55:2d:79:e0:69:9b:05:27:20:38:12:76:e5:b1:b8:
71:b6:08:b1:d2:4b:ea:a5:b7:5f:79:4c:74:c5:f4:
78:fe:6c:53:ca:fe:00:7e:69:1e:c0:23:07:5e:b9:
92:55:f2:f8:d7:0c:dd:8d:cf:e0:a4:cb:7b:bb:cf:
df:71:00:f2:39:b3:36:9e:1f:bc:a0:2d:17:db:b1:
00:e7:f9:f9:25:e6:b5:2e:14:d9:70:a7:d1:13:d8:
9f:27:c1:f5:53:b4:56:51:a1:66:b9:e0:19:a2:13:
4c:05:ff:89:8d:2d:0a:10:3e:3a:d8:41:52:c9:04:
70:20:6b:3d:b5:5d:7c:85:66:9b:05:54:d9:da:aa:
7d:5a:d9:c3:7e:84:e9:d4:d8:48:c8:55:4d:75:f9:
81:80:4a:9b:0b:60:06:46:4e:1c:ee:af:ea:62:57:
38:4b:88:53:07:6d:27:e3:b7:76:cb:a9:59:f4:46:
8a:ee:25:68:3c:37:70:6e:65:19:a4:29:3f:d4:79:
ac:48:48:c8:9c:63:ed:d1:d7:10:95:50:54:9a:78:
fa:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D9:F7:5E:B1:93:08:2C:D7:9D:36:C2:22:70:BC:00:0C:22:7A:6C
X509v3 Authority Key Identifier:
keyid:F9:AA:8A:3E:A9:91:33:33:93:F3:EF:2A:18:22:45:11:23:D3:EE:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c7:24:e4:6e:31:90:9f:32:a5:06:c0:fe:86:33:a5:40:49:
39:b0:81:07:e2:05:12:72:02:f4:b7:88:a7:7c:76:20:77:2f:
d2:41:36:80:b3:a0:17:1c:7b:67:8f:a4:de:b1:86:1a:2a:bf:
7a:bf:9d:2c:14:32:65:42:d6:8c:c5:a8:dc:a1:d0:ee:05:fb:
00:95:ce:70:9a:68:d8:d1:95:09:ff:14:e4:b4:85:eb:60:0c:
b7:a0:35:69:de:53:02:45:92:6f:c2:b8:58:34:4f:85:ca:73:
8a:07:59:1b:ea:aa:c5:5b:db:09:cd:c1:77:7e:61:7f:ff:aa:
87:8a:01:ce:7a:d9:dc:e5:ff:4c:90:0a:a8:62:b3:83:bc:86:
72:8b:88:c1:6f:3b:df:d6:97:cf:df:50:38:1e:f6:84:46:ca:
02:aa:c4:7c:bd:67:ff:22:f1:67:3f:62:e6:6c:38:00:be:b5:
e9:f4:0a:7c:9d:ed:5d:8d:42:b6:72:91:62:8f:74:54:30:9c:
26:93:43:24:7a:db:65:47:af:7b:9d:2f:11:6b:f8:3e:bc:8f:
60:2a:ca:a5:7d:33:04:dc:84:91:a3:8f:a0:30:1e:c1:49:19:
da:c6:b1:fc:d0:70:f1:38:08:da:8e:ba:7c:29:44:14:eb:3e:
d1:a3:3b:f2
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZhK5f4X5tIgU4DcBMajTzmYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5YWE4YTNlYTk5MTMzMzM5M2YzZWYyYTE4MjI0NTExMjNk
M2VlYzcwHhcNMjUwNzI3MDgwMDQzWhcNMjUwNzI4MDgwMDQzWjAzMTEwLwYDVQQD
Eyg2MmQ5Zjc1ZWIxOTMwODJjZDc5ZDM2YzIyMjcwYmMwMDBjMjI3YTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv388ctK+sRHVKpw4sEBcaL+uGdRJ
cnXbztdZ7xB0IJ45QYQTJu1tWhWTPHpVLXngaZsFJyA4Enblsbhxtgix0kvqpbdf
eUx0xfR4/mxTyv4AfmkewCMHXrmSVfL41wzdjc/gpMt7u8/fcQDyObM2nh+8oC0X
27EA5/n5Jea1LhTZcKfRE9ifJ8H1U7RWUaFmueAZohNMBf+JjS0KED462EFSyQRw
IGs9tV18hWabBVTZ2qp9WtnDfoTp1NhIyFVNdfmBgEqbC2AGRk4c7q/qYlc4S4hT
B20n47d2y6lZ9EaK7iVoPDdwbmUZpCk/1HmsSEjInGPt0dcQlVBUmnj6yQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGLZ916xkwgs1502wiJwvAAMInpsMB8GA1UdIwQY
MBaAFPmqij6pkTMzk/PvKhgiRREj0+7HMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1hcUtQcW1STXpPVDgtOHFHQ0pGRVNQVDdzYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2QvZDFlMzI0LTU0ZjMtNGRmOC04ZWM2
LTAzOGQ1M2MyM2MzOS8xLzEtYXFLUHFtUk16T1Q4LThxR0NKRkVTUFQ3c2MubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzdkL2QxZTMyNC01NGYzLTRkZjgtOGVjNi0wMzhkNTNjMjNj
MzkvMS8xLWFxS1BxbVJNek9UOC04cUdDSkZFU1BUN3NjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf8ck
5G4xkJ8ypQbA/oYzpUBJObCBB+IFEnIC9LeIp3x2IHcv0kE2gLOgFxx7Z4+k3rGG
Giq/er+dLBQyZULWjMWo3KHQ7gX7AJXOcJpo2NGVCf8U5LSF62AMt6A1ad5TAkWS
b8K4WDRPhcpzigdZG+qqxVvbCc3Bd35hf/+qh4oBznrZ3OX/TJAKqGKzg7yGcouI
wW8739aXz99QOB72hEbKAqrEfL1n/yLxZz9i5mw4AL616fQKfJ3tXY1CtnKRYo90
VDCcJpNDJHrbZUeve50vEWv4PryPYCrKpX0zBNyEkaOPoDAewUkZ2sax/NBw8TgI
2o66fClEFOs+0aM78g==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:03:40 2025 by rpki-client