Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft
File: Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft (raw, json)
Hash identifier: dwFaPov9nGlr36mau8Pkg1fw61gjDyWkNzIyFJOUiYQ=
Subject key identifier: D0:8D:CB:EA:98:9C:BC:E5:F2:A3:89:16:29:9A:83:64:2C:63:E4:48
Authority key identifier: 4A:AE:73:8E:E1:78:27:35:93:9A:4F:B0:D6:72:A6:31:7B:7F:52:43
Certificate issuer: /CN=4aae738ee1782735939a4fb0d672a6317b7f5243
Certificate serial: 019844ACFDCC4CC464A5EA49F64344A05D3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 03:00:44 +0000
Manifest this update: Sat 26 Jul 2025 03:00:44 +0000
Manifest next update: Sun 27 Jul 2025 03:00:44 +0000
Files and hashes: 1: 91OWvN-6lcl5Fjzg5TvE5yYe_W4.roa (hash: Sivu4JLd/Px8fxeRF7CLCRjdAgN7VlKHUjwBf43gaK0=)
2: Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl (hash: 4QlcOwrwZpyRnUQH6vkYgNMogUsANnrfe55JLkGvgGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:ac:fd:cc:4c:c4:64:a5:ea:49:f6:43:44:a0:5d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aae738ee1782735939a4fb0d672a6317b7f5243
Validity
Not Before: Jul 26 03:00:44 2025 GMT
Not After : Jul 27 03:00:44 2025 GMT
Subject: CN=d08dcbea989cbce5f2a38916299a83642c63e448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:26:7f:ad:1a:d6:87:7f:61:36:94:28:23:8e:
4b:43:58:dc:7d:8e:28:e3:d6:a6:ca:ae:b9:8a:23:
cc:e7:d4:9c:43:50:89:59:dc:99:33:1e:c6:f1:e0:
58:26:65:45:28:f9:d9:20:72:06:52:1d:2e:4e:a1:
b1:64:51:f5:8c:55:f0:3e:0d:11:e7:cc:9d:92:e6:
d5:cc:da:6c:7e:74:2f:85:cf:b7:c6:ca:78:ce:97:
ce:a2:57:d7:33:80:d7:19:3d:b4:a5:a3:c9:83:ea:
df:f3:bb:e0:c1:1e:b9:0b:7a:34:68:c4:17:aa:38:
45:9b:d3:6d:2e:a4:09:f4:b0:d1:cb:f7:b4:fd:35:
4f:8c:19:2e:d9:0b:95:bc:f1:77:23:bc:5d:2d:60:
ee:83:ab:65:30:a0:2b:21:7d:3e:b2:d1:98:98:87:
30:d5:f9:18:11:73:e4:4f:ce:b9:7a:40:41:a7:e9:
12:5e:7b:e9:cf:0e:ef:38:09:d2:d6:18:e4:07:74:
21:db:e2:5d:4a:7a:1e:47:cf:72:6a:c5:74:e5:97:
aa:a6:60:2b:86:e0:f3:8f:72:85:2f:d0:da:77:da:
b3:e0:91:50:1d:24:3a:e9:db:e0:6d:e5:66:bb:da:
ed:b4:8a:ec:57:3e:32:eb:08:35:a4:0f:76:ec:a8:
46:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8D:CB:EA:98:9C:BC:E5:F2:A3:89:16:29:9A:83:64:2C:63:E4:48
X509v3 Authority Key Identifier:
keyid:4A:AE:73:8E:E1:78:27:35:93:9A:4F:B0:D6:72:A6:31:7B:7F:52:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:21:fb:dd:c5:82:78:12:9f:7a:0b:0a:38:5b:8c:66:57:e7:
cf:e6:01:a0:7b:36:3e:9b:86:fd:b6:97:f2:17:f0:0a:2a:c2:
3e:1c:79:3f:0a:c1:5a:cc:da:2c:0e:de:9d:d8:96:1a:6f:43:
3a:42:4b:6f:7f:e4:12:fb:98:69:94:d8:1d:2d:8b:23:87:6a:
1d:ee:ab:6b:33:67:a5:80:02:13:d3:0f:a4:88:0b:58:fb:d2:
d6:02:90:88:85:2b:93:6e:b7:77:fc:d5:15:b4:db:9c:c5:b2:
4e:de:e5:2e:cc:83:cd:2e:35:44:39:d7:c0:cb:4d:64:a7:02:
58:3c:3f:df:45:69:e5:9d:84:de:c6:40:35:e1:b8:fc:81:54:
39:ae:40:43:fc:21:ce:f6:67:21:91:ae:82:c1:9b:c5:40:09:
a2:c8:0d:ff:79:48:2b:c5:08:ac:30:f3:7e:1a:78:eb:97:69:
8d:e9:bf:bf:29:f6:91:2a:93:29:6d:d8:b2:69:14:6b:54:16:
02:1a:0d:eb:16:cf:40:98:88:77:05:21:59:50:30:c3:6b:b6:
c4:75:8a:a6:b2:6f:9f:38:da:5d:b3:ca:f5:bf:9c:1a:3b:56:
2d:04:6e:9f:df:3b:44:1d:26:6c:77:3d:64:66:cd:53:d6:bc:
c4:c8:95:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 05:36:10 2025 by rpki-client