Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft
File: pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft (raw, json)
Hash identifier: eA2jtg/yxe8sxXxw65vGWdSunYS5CwYCbIBSdyAR/EE=
Subject key identifier: D9:1C:08:23:15:0A:90:F5:FF:4E:E7:B7:18:A4:7F:23:CF:D2:A8:7F
Authority key identifier: A6:AD:5E:70:01:3F:4D:F8:45:5F:A0:6C:93:E6:00:12:C2:99:73:D5
Certificate issuer: /CN=a6ad5e70013f4df8455fa06c93e60012c29973d5
Certificate serial: 01984F316D00C093B299691690A63611F35F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft
Manifest number: 1600
Signing time: Mon 28 Jul 2025 04:01:35 +0000
Manifest this update: Mon 28 Jul 2025 04:01:35 +0000
Manifest next update: Tue 29 Jul 2025 04:01:35 +0000
Files and hashes: 1: pq1ecAE_TfhFX6Bsk-YAEsKZc9U.crl (hash: G4rCfK4RCZDXCCSTb+Xk5D/JVgxzbkHNgctbVZ/ptog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4f:31:6d:00:c0:93:b2:99:69:16:90:a6:36:11:f3:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ad5e70013f4df8455fa06c93e60012c29973d5
Validity
Not Before: Jul 28 04:01:35 2025 GMT
Not After : Jul 29 04:01:35 2025 GMT
Subject: CN=d91c0823150a90f5ff4ee7b718a47f23cfd2a87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c1:59:42:24:02:3f:02:2a:86:0e:b4:d1:20:
92:ea:31:04:a5:4a:d8:e4:00:cb:e2:98:59:4d:8c:
a4:d6:22:ce:b0:42:2a:cb:fd:79:b8:39:ad:99:18:
6d:45:e7:f3:3e:bc:b0:aa:c8:cf:0c:d9:c7:e7:6e:
19:0e:97:06:a8:da:8e:52:eb:b8:3a:d2:c9:ab:6e:
00:a4:c5:ad:85:ed:06:e6:2f:b0:20:de:f1:b8:7e:
88:69:46:df:78:00:09:38:f1:9b:9f:9c:af:12:58:
1b:d5:f2:70:45:35:c2:b7:6a:c6:20:d7:fc:da:fe:
fd:8a:cd:66:74:43:a1:34:77:86:00:5d:f0:b4:38:
83:9d:b1:67:f0:85:b8:5f:15:7d:83:51:0f:d0:3b:
95:41:9c:88:e7:8a:23:65:b3:ef:cb:50:9e:03:2d:
71:dc:79:92:d2:ca:22:3b:b6:9a:3a:42:09:1c:49:
fb:be:ac:5e:89:43:c4:de:60:94:ba:9f:71:a3:a5:
a7:12:0e:c8:87:ff:0a:89:da:b9:ba:e8:0a:14:86:
4f:fa:44:31:ab:f0:56:eb:b3:e1:53:31:fb:f9:1c:
87:48:c6:ee:eb:b4:be:c8:f3:8c:45:86:42:6c:58:
50:be:30:a0:62:07:23:36:bc:62:80:0d:3c:88:db:
65:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1C:08:23:15:0A:90:F5:FF:4E:E7:B7:18:A4:7F:23:CF:D2:A8:7F
X509v3 Authority Key Identifier:
keyid:A6:AD:5E:70:01:3F:4D:F8:45:5F:A0:6C:93:E6:00:12:C2:99:73:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:dd:44:90:29:9c:40:fb:76:96:7c:94:c8:19:0c:d4:dc:71:
bc:7d:ac:55:93:c2:45:a6:5d:e6:e5:3d:03:0a:33:8b:e2:11:
b9:15:2a:b7:ee:19:a9:1d:cd:28:fb:4c:66:64:4d:08:96:b7:
f1:f9:ce:fe:e9:fb:62:2f:fd:af:66:62:68:ec:9b:9f:ed:a4:
76:52:fb:4b:a0:de:ac:b0:64:c9:9c:9b:c7:ac:f8:41:e7:9a:
95:71:36:19:e5:e2:2b:8b:1a:72:08:a6:0e:59:c6:ee:75:ff:
58:39:9f:27:9e:04:76:64:5f:56:e9:49:8c:08:fd:12:bc:fa:
27:5f:c7:d2:79:2a:e6:78:db:79:5c:37:d7:87:15:d6:2f:c2:
0e:14:e5:53:fb:65:cf:7b:75:7a:ba:3f:ff:bb:fa:91:62:da:
d5:20:1e:52:7c:72:bc:a0:b4:35:ed:86:3d:01:cd:8f:d8:ef:
ac:fa:10:6e:f0:e5:6e:fc:86:97:99:df:1d:2b:a3:d5:69:f0:
46:8d:42:e9:48:26:f0:cc:79:f1:ea:e3:32:99:a8:1e:2b:13:
14:eb:cc:ce:ee:54:d7:a3:52:02:b9:f2:7a:f1:0b:92:39:ab:
d6:cc:4e:80:bb:3b:f3:00:bd:21:b2:5e:d6:cd:5d:c5:00:8a:
1a:8e:29:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 05:55:31 2025 by rpki-client