Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
File: 1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft (raw, json)
Hash identifier: V/pUgaXmk3noaWNXgCgo56hGlL00GR4VsR/pLMJnOpw=
Subject key identifier: B2:4E:F7:14:9D:79:D4:9C:B4:E0:9C:98:F0:B7:EB:7C:71:D9:BE:3B
Authority key identifier: F9:AA:8A:3E:A9:91:33:33:93:F3:EF:2A:18:22:45:11:23:D3:EE:C7
Certificate issuer: /CN=f9aa8a3ea991333393f3ef2a1822451123d3eec7
Certificate serial: 01974BFB87B0FC4B0128A64CD51E3BCDAD0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 20:01:04 +0000
Manifest this update: Sat 07 Jun 2025 20:01:04 +0000
Manifest next update: Sun 08 Jun 2025 20:01:04 +0000
Files and hashes: 1: 1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl (hash: X/Itp11beGyUwbm38nAGOqS8/j1DjTIzog3Q5uTEIPU=)
2: mxOutmmSzZNxuKpcgLVVZu-l64M.roa (hash: 9XVkgMijFdMAyjZxhpANyJaDNj4FdVCkkG/qmNyFekA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:87:b0:fc:4b:01:28:a6:4c:d5:1e:3b:cd:ad:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9aa8a3ea991333393f3ef2a1822451123d3eec7
Validity
Not Before: Jun 7 20:01:04 2025 GMT
Not After : Jun 8 20:01:04 2025 GMT
Subject: CN=b24ef7149d79d49cb4e09c98f0b7eb7c71d9be3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:d6:79:36:00:b6:28:67:77:ae:73:e3:e5:
8d:30:85:9c:b7:4a:08:66:30:91:ab:4c:55:1b:20:
bd:29:a7:44:aa:39:cb:26:ac:13:17:9d:73:3c:6b:
7e:7e:c8:e9:6e:d5:9a:b2:1e:b3:b3:6b:1e:fc:e3:
e5:87:85:e1:c5:75:6a:7d:04:5f:b1:0a:7e:55:08:
13:34:5b:16:26:02:91:f1:e6:b0:30:97:e6:31:2f:
6c:1c:4d:6f:ad:81:7b:9b:74:9f:15:5a:b8:27:9c:
22:6e:f4:bd:09:8d:90:b3:d4:30:c3:3c:b1:54:d2:
21:e3:7b:46:b8:50:30:93:04:da:a1:5e:e9:20:43:
03:1a:fc:ea:da:b6:48:d1:9f:90:a6:12:39:1d:13:
8f:0c:45:00:2f:28:cb:3d:30:c7:f6:e9:dd:ac:72:
7f:62:70:b4:51:4c:a8:00:18:b2:4a:87:34:10:c2:
a6:b5:b2:94:f8:06:4a:18:4f:ee:5a:96:dd:77:ae:
7e:8e:46:03:84:e1:07:f5:c5:37:e2:60:d2:b1:15:
cf:15:af:83:1e:ff:36:0e:fa:77:71:14:6a:10:c8:
11:bb:3d:53:80:c9:a6:73:2c:46:a8:68:14:b8:ad:
45:1e:b8:f5:99:74:6f:17:f8:92:2f:e0:88:f3:5c:
84:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4E:F7:14:9D:79:D4:9C:B4:E0:9C:98:F0:B7:EB:7C:71:D9:BE:3B
X509v3 Authority Key Identifier:
keyid:F9:AA:8A:3E:A9:91:33:33:93:F3:EF:2A:18:22:45:11:23:D3:EE:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:0c:a6:85:6e:e8:d2:c0:23:96:85:52:b7:4a:91:d5:ae:49:
e8:77:a5:15:92:9a:bf:0d:ad:27:06:4b:af:c7:18:b3:79:cc:
7d:2c:0b:59:4a:e6:06:63:29:5a:e7:e3:a6:55:83:c1:95:f8:
5e:2a:0d:7a:5d:03:57:48:12:d7:cc:b6:28:86:9f:36:6b:27:
6b:b5:e9:34:fb:54:8e:70:6c:fc:bb:86:91:c4:f2:8d:cb:92:
23:f9:8e:7e:8e:a7:cb:27:49:60:38:05:99:48:e4:7b:6b:82:
e5:49:09:36:c0:6f:3a:52:17:c3:ea:73:84:5f:5a:cf:05:89:
a3:23:03:fa:c6:01:34:c2:92:8f:66:a4:d0:0e:6c:0d:34:af:
f7:82:0c:a2:44:b0:ed:00:4f:9d:f5:fb:b7:71:ed:60:a9:8d:
34:73:0b:6b:8e:38:e7:1f:8c:10:3a:f6:3e:c6:48:70:3a:34:
37:a8:04:b3:cf:80:25:27:35:04:2e:ca:fb:8d:08:a6:38:bf:
5b:a5:f6:21:8d:03:58:a1:fd:74:52:f8:ab:59:61:60:11:2b:
c3:07:52:93:07:b3:57:7a:10:08:19:4b:c9:7a:05:ac:25:8c:
34:8f:df:39:09:d7:db:d6:af:81:00:8d:09:20:09:fe:82:ee:
5a:33:2f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:21:54 2025 by rpki-client