Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft
File: Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft (raw, json)
Hash identifier: E1WRhOa7kif4AOTuffIRebLiatFwKRIcA7wgEoluo0Y=
Subject key identifier: 99:B5:18:2D:6E:0F:87:89:19:4A:E7:AD:A5:A8:41:2B:CB:38:9D:98
Authority key identifier: 32:AD:7F:7D:83:84:85:A1:9E:00:27:99:68:A9:B9:86:83:A4:C5:6E
Certificate issuer: /CN=32ad7f7d838485a19e00279968a9b98683a4c56e
Certificate serial: 0198439B5BC0EDADE52177ED1AF059D59351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft
Manifest number: 15FB
Signing time: Fri 25 Jul 2025 22:01:51 +0000
Manifest this update: Fri 25 Jul 2025 22:01:51 +0000
Manifest next update: Sat 26 Jul 2025 22:01:51 +0000
Files and hashes: 1: Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl (hash: cilzM/kaJnV1wf3FCuZ1NSrmTOYpGEJoLdZjzBtfzGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9b:5b:c0:ed:ad:e5:21:77:ed:1a:f0:59:d5:93:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ad7f7d838485a19e00279968a9b98683a4c56e
Validity
Not Before: Jul 25 22:01:51 2025 GMT
Not After : Jul 26 22:01:51 2025 GMT
Subject: CN=99b5182d6e0f8789194ae7ada5a8412bcb389d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c9:15:e1:11:00:9f:6a:d0:82:55:2d:75:0e:
31:03:21:9f:c8:36:c2:ec:b1:59:e1:4c:4d:a1:46:
0e:b3:d3:91:ad:77:e4:05:99:c3:07:c5:ec:1b:c2:
cc:6b:bf:08:e3:69:df:d1:16:0c:aa:e3:d7:70:61:
32:a6:fe:c3:c1:cf:d2:d0:61:04:1d:9e:94:a5:93:
75:2e:a1:56:e8:30:73:90:ed:3c:68:07:a7:90:b4:
29:1e:67:84:3d:4b:a2:ec:4f:96:ba:f2:ff:14:a3:
30:ba:1a:99:4d:2c:df:4c:9b:a7:d9:23:00:56:3c:
a0:1b:f2:09:bf:81:67:9b:9e:1f:e0:31:47:1e:49:
64:2f:1d:c0:99:42:b8:ff:56:c0:8f:cb:78:55:98:
ce:dc:6f:30:a0:b9:6f:c4:0b:ee:82:2e:45:f9:16:
b5:af:e9:0e:c7:f9:73:db:60:94:d8:54:05:38:78:
d5:1a:9a:a0:26:b1:08:a4:69:6b:e5:2a:be:ea:68:
7f:1b:85:e1:2e:39:49:bc:f5:6b:40:c1:a2:e3:3b:
4e:22:6c:b2:a7:de:17:d1:dd:53:a9:7f:7a:74:02:
a8:29:25:92:67:bf:06:47:cf:34:22:2a:8c:8f:78:
ee:f2:92:01:d9:c3:67:4a:eb:d5:7f:30:ba:04:ac:
79:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B5:18:2D:6E:0F:87:89:19:4A:E7:AD:A5:A8:41:2B:CB:38:9D:98
X509v3 Authority Key Identifier:
keyid:32:AD:7F:7D:83:84:85:A1:9E:00:27:99:68:A9:B9:86:83:A4:C5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ff:22:41:18:01:f0:c3:0e:4b:f5:b7:c2:d4:84:35:d6:43:
26:ca:b6:38:41:f8:87:cb:b5:27:b7:81:20:4b:c2:5a:3a:c8:
13:12:1c:13:47:77:50:be:9d:52:e6:5d:af:ca:d5:25:c4:7c:
32:47:d2:c5:86:af:f2:eb:ea:11:6d:b8:2e:3b:5b:16:f1:19:
37:0e:44:ed:70:5b:40:73:1e:a3:27:fb:39:fa:aa:46:88:8e:
72:f0:77:09:e2:f3:95:79:22:ad:d1:0e:fb:0e:e3:b4:3b:54:
e3:bd:80:95:81:e4:f1:53:7c:4e:28:7a:b3:57:df:4f:ef:65:
47:c8:18:b1:2a:cb:0c:34:49:1b:7e:5a:3e:fb:d5:c4:24:e6:
52:92:87:de:ee:b0:9d:a5:77:ca:57:7e:bb:ac:e6:10:e4:5e:
12:b5:f1:fd:69:98:f8:15:ac:70:81:2a:72:2f:cd:b5:11:70:
84:12:dc:fe:86:e4:9a:2b:74:d5:ab:ff:af:aa:dc:c8:5a:82:
5b:30:be:74:ec:5d:5c:4b:a2:58:f2:c7:13:b0:fd:18:3e:5c:
8f:66:f6:bb:66:88:26:1e:a4:b8:ff:20:cf:3f:ea:31:63:f4:
0a:e6:be:a8:79:a2:ef:d2:74:dc:04:05:80:75:5b:47:c7:57:
c5:96:13:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:42:50 2025 by rpki-client