Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
File: 1-qTuqG-fPm54gbS42hmh0nJehxA.mft (raw, json)
Hash identifier: P6s/ORc53el8ZQXppOJ3uS8yDG6js/wGiWYxGSc8wVM=
Subject key identifier: E9:6E:E9:4B:9B:54:DB:B3:61:51:B5:AC:E7:49:A9:F2:31:6D:74:19
Authority key identifier: FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10
Certificate issuer: /CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710
Certificate serial: 0198D4731A7EE231A8921DA0CB8EC4477627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 01:02:49 +0000
Manifest this update: Sat 23 Aug 2025 01:02:49 +0000
Manifest next update: Sun 24 Aug 2025 01:02:49 +0000
Files and hashes: 1: 1-qTuqG-fPm54gbS42hmh0nJehxA.crl (hash: oXH9I9AaX4NFuWbQWMbHTX9los0ycqy7H5ym8IzhDCw=)
2: jnyTmD1DxoXGsX8QKO4GFLyk0hU.roa (hash: VHKaN5/CfBmdBMdYUm6aa5suZnMbN/eE/uaYAJ9tsUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:1a:7e:e2:31:a8:92:1d:a0:cb:8e:c4:47:76:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710
Validity
Not Before: Aug 23 01:02:49 2025 GMT
Not After : Aug 24 01:02:49 2025 GMT
Subject: CN=e96ee94b9b54dbb36151b5ace749a9f2316d7419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c4:a1:52:6f:07:7d:c3:67:19:7c:5d:b3:94:
9f:57:09:60:48:5f:93:be:42:5e:12:6e:a5:93:88:
04:f3:87:5f:c8:8b:d0:01:55:33:a0:6f:8b:0a:34:
16:54:c3:0b:38:4d:53:85:36:1e:f9:0c:6a:b6:4d:
e4:0d:24:d4:d4:ba:1d:f4:a6:02:dd:4c:70:da:2d:
6f:4a:36:b7:10:90:66:60:95:3b:bb:64:8a:6b:a5:
9a:6b:d5:eb:41:3d:25:df:25:47:43:34:8d:bb:fa:
0e:7e:ef:b0:46:28:96:68:2b:53:c6:f6:4f:6b:bd:
13:ae:9c:4a:5c:fd:0a:5a:e1:5d:50:70:e4:d3:65:
74:16:1b:04:6a:63:c9:62:63:9d:ab:02:b4:4b:b7:
fb:5d:1c:51:5d:a4:ac:da:d5:eb:27:22:22:47:9c:
24:14:9e:7f:ae:e5:33:e8:50:0e:c5:7d:be:45:bf:
7f:65:84:c7:d4:34:14:40:bf:34:68:ed:c1:77:60:
e6:88:72:46:8a:3b:66:ad:d5:9f:f8:13:c4:95:82:
b9:d3:5d:51:77:1b:bf:32:60:af:bd:ce:9e:30:68:
9a:54:c4:c8:03:80:b7:f7:0a:a6:ad:b3:9c:45:a2:
44:3e:a3:1c:8f:dd:9c:35:ad:03:48:9f:c7:eb:fc:
b6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6E:E9:4B:9B:54:DB:B3:61:51:B5:AC:E7:49:A9:F2:31:6D:74:19
X509v3 Authority Key Identifier:
keyid:FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:88:9d:ad:c9:6f:fb:8c:b0:44:e7:1c:c7:1e:9f:79:3c:1e:
61:e1:ac:aa:e7:21:44:a1:1c:39:7b:3d:7c:f0:cb:79:d6:a7:
ad:b9:89:75:e8:9c:14:d7:b1:24:7a:e3:8c:36:26:22:2d:d7:
96:fd:c9:3d:e2:3b:12:6c:14:4f:7b:28:b7:39:35:0d:fc:13:
12:ca:fc:a9:f4:6f:41:78:41:53:4c:f2:46:01:33:2a:f0:e1:
15:45:9c:b8:fb:20:33:46:a3:ed:c2:71:c9:e3:82:8b:86:70:
54:01:f2:8c:12:cb:18:c4:e0:fe:83:55:66:83:93:4b:78:d0:
52:74:94:2f:b1:bc:a8:86:5d:52:2e:67:2a:b5:aa:c9:9c:04:
27:1d:be:6e:68:d3:8e:38:a4:db:b3:ca:21:9c:02:30:f9:6c:
ee:f1:2c:4f:27:b4:3b:02:b8:5a:7c:64:4e:3a:b7:bb:06:67:
fd:02:81:57:5e:60:69:2c:ec:19:a0:54:16:75:08:fc:da:01:
6d:17:1e:ce:83:a2:76:b8:2d:7a:35:ee:4a:7e:d0:1d:44:ad:
f2:b0:11:6a:cd:be:19:42:64:b3:fd:77:85:3c:56:d4:90:43:
a0:82:85:40:25:90:85:58:b3:8b:c2:70:9f:74:36:1e:04:5e:
fc:3b:82:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:32 2025 by rpki-client