Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft
File: 1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft (raw, json)
Hash identifier: uzIqk2Ap2DykUu4Epq6sjOtUUL42HVSatJJAWkyR2ms=
Subject key identifier: 4A:64:7B:99:06:06:95:73:0E:DD:01:E4:51:25:E4:19:C9:5C:87:57
Authority key identifier: FA:64:6A:63:23:B3:D6:FC:34:AE:49:D8:BE:88:84:F7:29:2B:DB:F4
Certificate issuer: /CN=fa646a6323b3d6fc34ae49d8be8884f7292bdbf4
Certificate serial: 01984777F879F2B9A4DC534E090B1428BC36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft
Manifest number: 0204
Signing time: Sat 26 Jul 2025 16:01:41 +0000
Manifest this update: Sat 26 Jul 2025 16:01:41 +0000
Manifest next update: Sun 27 Jul 2025 16:01:41 +0000
Files and hashes: 1: 1-mRqYyOz1vw0rknYvoiE9ykr2_Q.crl (hash: IEcOyOYZEhbS0j8nWRxg6M8KZlulxA3/RxwFDNafd8A=)
2: bqDqPRBPFnQ0iuBvOTbQfn6LTaw.roa (hash: xUukexmvBcgVlPXbTsXO9o0sOZZdZlg/TOftt6SW0yE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:f8:79:f2:b9:a4:dc:53:4e:09:0b:14:28:bc:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa646a6323b3d6fc34ae49d8be8884f7292bdbf4
Validity
Not Before: Jul 26 16:01:41 2025 GMT
Not After : Jul 27 16:01:41 2025 GMT
Subject: CN=4a647b99060695730edd01e45125e419c95c8757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8c:7f:82:01:a3:5f:b9:db:0e:09:6d:bb:3e:
9d:50:3c:dd:eb:ab:f5:66:a1:12:75:a3:67:f3:f4:
fc:6c:a7:56:b0:99:32:9d:ed:01:3e:7f:c6:b6:ff:
7a:46:c6:a6:df:62:34:31:5c:6a:7f:0a:cc:b7:45:
cc:67:9c:db:7c:4f:05:c7:86:fe:e1:82:3c:12:1b:
d5:0a:02:25:74:e1:14:90:ea:4f:8b:c2:da:6a:9b:
cf:31:60:28:c6:1a:40:9b:15:ce:ef:2d:78:e6:7a:
19:d5:98:86:44:2a:9e:75:19:79:20:47:d7:9a:5c:
16:28:67:09:53:9b:04:a3:fe:5e:29:25:b9:e1:8a:
73:bf:7e:54:72:97:72:84:16:37:3e:cd:b4:14:f6:
9a:a2:54:32:3f:49:6a:75:24:ae:56:0e:18:bb:91:
eb:80:22:af:de:c9:5a:46:0b:4d:cc:36:da:07:25:
2a:dc:d3:d1:e7:79:c9:b4:92:43:04:a9:95:3b:44:
10:c7:45:d0:b5:27:3c:d8:cb:ae:95:07:49:cf:85:
b9:7c:df:b7:cb:0e:55:32:fb:17:1d:b1:25:da:b9:
c8:be:82:80:47:86:f9:35:b1:cd:8b:84:fa:14:fc:
71:91:c9:fa:23:b3:db:e6:a1:9b:13:24:d8:df:79:
56:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:64:7B:99:06:06:95:73:0E:DD:01:E4:51:25:E4:19:C9:5C:87:57
X509v3 Authority Key Identifier:
keyid:FA:64:6A:63:23:B3:D6:FC:34:AE:49:D8:BE:88:84:F7:29:2B:DB:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ad:29:4e:ff:52:6f:23:c4:5d:d4:98:a6:92:60:e4:c3:43:
3d:17:8a:61:78:af:0e:21:be:44:cc:68:fb:0e:a0:2d:68:5a:
ab:69:b0:ca:f5:14:a4:1e:79:c9:95:0f:ea:8b:53:dd:c1:23:
cc:91:8a:fd:29:96:2b:4b:fa:51:35:de:41:66:11:48:42:a0:
c2:f3:49:9a:de:a5:e5:a7:45:70:e4:11:3e:91:6b:68:d0:79:
d0:14:27:cb:73:0b:58:24:2f:10:2d:72:24:e4:5c:02:60:6b:
fe:f3:0b:05:fd:5c:73:60:bd:05:b3:65:e0:c6:5b:cf:65:f2:
dc:7d:f7:af:61:84:b7:01:d1:c0:44:8f:d8:de:00:e4:1b:83:
9e:c3:52:64:1e:de:87:95:74:cd:6b:28:50:84:83:0d:07:e5:
63:d5:04:ec:1c:92:00:42:a5:bd:07:4f:b0:0a:b7:21:63:cb:
8b:65:df:c1:e5:c1:67:2a:b8:b3:3d:70:53:20:d9:db:c3:a4:
56:47:db:44:69:98:4b:bc:e2:d0:d5:12:11:de:0e:b9:d8:1b:
a4:d8:c7:ac:05:09:a8:81:48:e2:5d:fa:f4:31:e2:a9:83:9d:
a2:5c:74:96:41:50:7e:c6:a2:16:86:4c:3e:38:9c:1c:d6:38:
d3:01:d7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:47:04 2025 by rpki-client