Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
File: 1-qTuqG-fPm54gbS42hmh0nJehxA.mft (raw, json)
Hash identifier: N6WG4oftid8psAiiR/LfL6q6lQmgB/ddjzE7mvViHbg=
Subject key identifier: B0:4C:E0:B8:AF:96:EF:AD:13:82:C6:73:1B:E2:81:75:9C:91:45:7B
Authority key identifier: FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10
Certificate issuer: /CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710
Certificate serial: 0199239FBEB245FC3DB26A157E11947D55A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 10:01:35 +0000
Manifest this update: Sun 07 Sep 2025 10:01:35 +0000
Manifest next update: Mon 08 Sep 2025 10:01:35 +0000
Files and hashes: 1: 1-qTuqG-fPm54gbS42hmh0nJehxA.crl (hash: jwSGkCSw4MiyVBGIPvuKfOXpLo1E9RcfXoSaOKXn+xU=)
2: jnyTmD1DxoXGsX8QKO4GFLyk0hU.roa (hash: VHKaN5/CfBmdBMdYUm6aa5suZnMbN/eE/uaYAJ9tsUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:be:b2:45:fc:3d:b2:6a:15:7e:11:94:7d:55:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710
Validity
Not Before: Sep 7 10:01:35 2025 GMT
Not After : Sep 8 10:01:35 2025 GMT
Subject: CN=b04ce0b8af96efad1382c6731be281759c91457b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f9:bb:cf:36:11:27:48:96:67:dc:dc:1a:a7:
d8:04:ff:8d:fd:39:e0:76:d2:dd:ab:66:b6:fc:57:
0f:ab:ff:ef:88:5d:0b:48:33:81:c1:e3:8e:b5:3d:
23:95:a9:8e:23:c6:4c:a7:d6:b1:f1:dc:ba:cc:99:
72:be:db:2e:d2:90:f9:db:75:d9:bc:cf:ec:98:c2:
50:f9:be:03:1b:e2:5b:f2:70:ea:4e:05:71:b2:34:
89:aa:27:b3:65:96:61:1a:fe:ea:99:5c:b6:24:a6:
2b:d2:d6:32:81:6f:54:09:1e:bc:cb:72:a6:1a:72:
f5:da:4b:a3:ad:3d:7e:c5:3f:4c:4a:f4:9e:c5:9f:
d7:17:16:69:5a:26:6f:c3:88:19:3d:81:c9:e9:49:
21:e2:4a:54:74:dd:1d:d5:0d:53:3e:5f:83:0b:0e:
87:5e:7e:e8:6b:b8:16:f3:05:7e:56:39:bf:f4:76:
2f:59:cd:8c:35:4a:f9:47:71:5b:81:27:88:89:85:
f0:3b:0a:b9:53:aa:ab:f8:40:52:70:fd:72:3d:c0:
1e:bb:33:01:f8:c8:0b:9f:23:45:9d:d7:7d:5b:03:
25:9d:8f:04:37:9c:3f:26:c9:31:7a:45:2e:d1:ca:
aa:81:b0:d7:f1:11:7e:16:b6:02:cb:e0:a4:a8:dd:
7f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4C:E0:B8:AF:96:EF:AD:13:82:C6:73:1B:E2:81:75:9C:91:45:7B
X509v3 Authority Key Identifier:
keyid:FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:99:12:bd:1f:a9:34:d3:c2:0a:a8:6d:1d:61:df:e7:18:48:
91:dc:a3:89:ae:df:a8:77:55:45:23:b0:51:b9:ab:0e:fd:bb:
cb:c3:b5:f5:62:b2:6e:7e:51:11:68:c8:47:32:1d:82:83:18:
7f:17:39:bf:db:2a:a0:15:43:ec:5c:ea:64:b1:e3:0f:c1:c3:
f2:e0:4a:92:93:bc:0e:6d:e8:8a:4c:91:a2:b6:f2:5e:40:e9:
03:d7:a4:eb:53:d2:28:08:97:9c:3b:75:8e:ef:a3:23:7f:d3:
ce:6f:97:ce:0e:48:c3:3c:ab:73:c6:19:fa:8b:32:cd:20:9c:
a8:de:45:75:a4:60:d9:12:02:fd:af:90:31:9f:66:34:60:14:
04:e6:0a:a3:7c:1f:03:b9:b5:9c:b3:8c:42:0b:cc:5e:c2:74:
3a:94:18:2a:db:a3:08:cc:40:6c:9a:2e:66:21:07:74:c6:6b:
9e:99:b0:13:86:fb:b5:a5:ef:54:49:c9:35:aa:ca:d9:e9:5c:
27:e9:b1:c4:76:44:ae:dd:35:da:39:80:73:90:b1:2d:00:16:
89:99:ed:1b:ae:8d:f3:e0:e6:ce:a9:c1:b1:2e:ce:40:d7:7b:
d5:1e:87:a0:8b:02:6d:93:de:44:e8:b6:0a:37:55:e0:a7:d4:
4f:72:1a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:42:03 2025 by rpki-client