Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
File: 1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft (raw, json)
Hash identifier: E4QunEt0FVfGL/ucJkKXYwdRaJ3uRlMUAKZslb3Ikss=
Subject key identifier: A6:54:AD:32:44:3F:E9:BC:FB:DE:47:A4:7F:B2:DE:5E:EC:18:6D:75
Authority key identifier: FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54
Certificate issuer: /CN=faa61e29c166bf0635c8cefe8da82104a783b454
Certificate serial: 01974DE9A8C6D5D3D0F344E8A62B4BB76DE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
Manifest number: 157D
Signing time: Sun 08 Jun 2025 05:00:48 +0000
Manifest this update: Sun 08 Jun 2025 05:00:48 +0000
Manifest next update: Mon 09 Jun 2025 05:00:48 +0000
Files and hashes: 1: 1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl (hash: ijy8D2dD2HXFzJRaBO1vfWBUmxgkdStTpMG+kZEX5pE=)
2: Cw8lON9cQpyLxWLsB7DBvYnd2Bo.roa (hash: c1sm3zXHf/J5zcMO21JKPte22JewQndWNsFvlD4ZQmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:a8:c6:d5:d3:d0:f3:44:e8:a6:2b:4b:b7:6d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa61e29c166bf0635c8cefe8da82104a783b454
Validity
Not Before: Jun 8 05:00:48 2025 GMT
Not After : Jun 9 05:00:48 2025 GMT
Subject: CN=a654ad32443fe9bcfbde47a47fb2de5eec186d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:44:50:a1:d2:0a:23:dc:1f:f3:c4:60:a6:a2:
b5:29:fc:9a:9f:52:0b:93:c4:e7:03:a4:7e:52:49:
5f:70:72:3a:4d:73:f6:04:3d:76:89:8c:99:47:87:
60:6e:93:ac:bf:08:b8:5d:b6:df:1e:0f:bf:ac:a0:
3a:e9:63:64:65:f0:29:ea:c3:32:98:81:8d:0f:2d:
bf:df:88:f2:54:3a:0a:f3:82:e4:75:47:a3:ad:6e:
13:66:2a:63:b3:d0:c6:94:41:5a:68:34:63:1a:d9:
46:06:b2:19:4d:d7:ae:09:d1:77:90:d6:0d:24:70:
74:13:5c:26:8c:a7:7a:34:25:e6:61:0f:83:dd:5c:
63:f1:dc:b7:75:b4:f3:fc:d2:cd:94:14:b1:18:40:
8c:a5:51:fa:2a:a9:93:44:af:37:51:97:78:b4:b4:
aa:6d:bd:66:14:ba:99:84:c8:fe:46:d9:e4:28:57:
79:16:c2:9b:54:77:fe:1e:b4:17:68:3b:8c:80:c6:
53:28:87:6d:83:0c:0c:22:68:2b:ae:46:39:c9:18:
4a:46:cf:e2:24:65:4b:cb:51:70:55:45:33:bb:20:
a7:c0:85:5e:b5:71:dc:8c:c5:c4:c0:da:d1:be:43:
21:9d:2c:01:03:ea:92:05:06:ef:e0:08:63:0c:77:
6d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:54:AD:32:44:3F:E9:BC:FB:DE:47:A4:7F:B2:DE:5E:EC:18:6D:75
X509v3 Authority Key Identifier:
keyid:FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d9:be:a4:2d:d6:f2:9c:6a:fc:60:16:83:41:92:02:2e:42:
4a:1e:73:af:e4:b6:b5:69:4e:df:c7:b9:fd:05:5c:a1:4e:1f:
b8:86:7f:95:dc:14:a3:5a:1f:44:1c:6e:a9:e5:2d:35:06:10:
c9:0d:cc:f0:6f:28:bf:31:a6:d8:26:ce:9a:66:9a:9d:76:18:
a7:ff:21:a0:5f:8c:6f:13:8d:4a:55:ed:32:ce:37:a8:7e:f1:
42:f3:84:f8:84:ce:c1:fb:6e:85:26:0b:6d:f7:e5:f4:ee:b0:
8b:d7:b8:c1:e9:27:de:37:e0:c5:aa:3b:73:d4:da:70:a9:57:
83:24:98:07:ae:04:9f:72:93:44:2f:ee:12:77:f1:60:66:79:
29:55:53:f8:83:dc:5e:09:0b:85:69:52:bc:b8:99:ea:bf:b7:
9c:a7:42:0c:48:9b:3d:40:66:fb:3c:78:71:de:1a:6a:1b:b9:
7a:a8:33:6f:4b:3f:df:c0:f7:c5:b2:6c:d0:a6:14:14:79:f1:
99:fd:34:7b:7b:f4:94:86:3c:7d:b4:e9:47:3f:0f:85:a4:12:
e5:bb:96:93:c6:b8:ad:4a:5a:df:6c:5c:ca:3a:ea:46:38:1a:
ed:de:c1:4f:da:6f:10:73:cd:67:03:f9:ea:02:8f:64:19:55:
a5:0f:a7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:14:17 2025 by rpki-client