Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
File: sZQPAAmW6_0tq3HEacxR7ogbP14.mft (raw, json)
Hash identifier: pHHEUhlRlsA6pMSHNxkFW0LiBnin0v0S7Vr0i4Hb16I=
Subject key identifier: B3:5C:40:B0:88:6B:1D:9A:A5:B4:E1:04:9F:E5:EB:B6:03:54:EB:B4
Authority key identifier: B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E
Certificate issuer: /CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
Certificate serial: 0198277E86BDE71225851B6B18A0D1B6E1C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
Manifest number: 15F1
Signing time: Sun 20 Jul 2025 11:01:00 +0000
Manifest this update: Sun 20 Jul 2025 11:01:00 +0000
Manifest next update: Mon 21 Jul 2025 11:01:00 +0000
Files and hashes: 1: BA5XRS-VBm8RVVbSCJW6HST0wD0.roa (hash: b9K7NP8BwX8VNftSD4zDv00erFxrleUYzaeFhztZOO8=)
2: gbBXW-vxInHi16BrBBKHLf7If3g.roa (hash: fBYMDG4bZkxXYdO0y/chVffLP2RSHLaDCHJZ1DFzD3E=)
3: sZQPAAmW6_0tq3HEacxR7ogbP14.crl (hash: h/LFL6dpFkCBYqvic1X9dDjCahRZgp4m8QoxzLuT/P0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:7e:86:bd:e7:12:25:85:1b:6b:18:a0:d1:b6:e1:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
Validity
Not Before: Jul 20 11:01:00 2025 GMT
Not After : Jul 21 11:01:00 2025 GMT
Subject: CN=b35c40b0886b1d9aa5b4e1049fe5ebb60354ebb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:cd:e3:8e:e0:12:b5:d4:bf:01:46:f5:73:38:
00:e9:72:5e:bd:4b:f7:be:91:7c:b3:5f:a9:cb:74:
74:3f:e8:a1:6e:9d:42:60:22:ac:91:f2:14:d0:1d:
91:97:49:ca:76:9d:20:5b:8c:8f:48:cb:5b:97:14:
c9:e6:7c:2a:c7:ce:82:07:1e:a3:5a:bf:93:43:e0:
0c:1e:12:40:86:56:17:d4:38:25:2d:0f:db:c4:56:
74:c1:eb:79:00:65:99:ce:4c:00:d8:7a:8a:9a:60:
6a:85:7a:2e:7d:f6:15:d4:a5:5e:a2:18:e2:1c:0a:
68:d1:47:f9:26:0c:a3:12:0f:65:79:86:6d:d9:53:
25:25:37:4c:af:c0:47:42:5a:a0:a8:e2:f5:83:3b:
0c:04:22:3c:ad:3c:9a:8c:b6:3a:b8:b8:cf:25:69:
98:84:86:11:59:35:e9:ea:e2:95:01:07:ef:f2:ff:
81:d7:b3:f7:2c:d4:79:76:f8:f5:75:34:30:33:5d:
d1:bc:67:41:32:83:bf:02:86:e6:25:db:2b:00:66:
a2:96:c9:f7:24:fc:df:a6:54:a2:f9:69:5e:32:e3:
60:ea:2a:44:7c:8f:7c:ba:6e:1d:9c:8a:44:81:54:
ff:41:4e:85:c6:8c:32:81:5e:8e:21:6c:25:88:55:
02:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5C:40:B0:88:6B:1D:9A:A5:B4:E1:04:9F:E5:EB:B6:03:54:EB:B4
X509v3 Authority Key Identifier:
keyid:B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:5f:b6:bb:7a:b9:6d:08:71:cb:78:a2:60:6b:cd:db:a7:6e:
5e:0c:6a:9b:c9:9a:2f:51:70:6f:76:fb:aa:9f:76:b5:0c:2a:
94:bd:f7:c7:12:28:9b:eb:e8:61:fc:0c:af:26:ba:af:9c:1a:
fe:0c:ab:ff:05:2b:22:08:10:bb:b3:e4:bd:59:16:bc:10:60:
76:dc:a4:12:41:57:b7:21:f6:d9:c4:0e:eb:50:08:d1:29:75:
d8:64:6c:94:94:bf:e4:f0:b8:6c:e2:f5:29:a5:92:c7:1c:dd:
a7:3d:dc:3c:be:59:a4:35:a1:78:ac:46:e7:5c:92:bc:6d:24:
f9:d2:fb:c7:f4:86:0a:f1:6b:eb:49:1d:9f:01:16:2b:c1:ae:
dd:de:9a:95:d9:e0:5c:51:47:7f:0e:7d:7b:f8:9d:e1:31:4c:
ea:bd:bc:49:5a:2a:43:c6:cd:bb:ce:75:c5:90:d4:a0:1b:1c:
6b:c0:0a:c8:c1:83:f6:04:37:1d:ce:e7:1e:7f:ca:62:21:55:
fc:30:ce:8b:a8:2a:4e:34:e9:d9:b7:4f:7e:de:1b:3f:36:ca:
1c:9f:25:40:f3:9b:e8:5d:4f:63:70:a9:31:45:c6:5c:10:e9:
b8:bd:53:71:db:ae:c4:c4:1c:e5:6b:fb:01:98:b2:0b:b7:5c:
d2:6d:fb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:11:15 2025 by rpki-client