Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
File: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft (raw, json)
Hash identifier: ZHp8atMfsiSXv5evlt9UVi7XhTYgShn3Y4eEHm9Kl/g=
Subject key identifier: BD:56:0F:54:42:89:D9:6D:71:29:9F:87:31:B3:98:50:9B:95:B1:CA
Authority key identifier: FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E
Certificate issuer: /CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
Certificate serial: 0197B745686257971B6D5C657798B1D213F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
Manifest number: 1357
Signing time: Sat 28 Jun 2025 16:01:08 +0000
Manifest this update: Sat 28 Jun 2025 16:01:08 +0000
Manifest next update: Sun 29 Jun 2025 16:01:08 +0000
Files and hashes: 1: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl (hash: BcSUlh9yhQOgFlNBd7tNqTjaXp9OZUL9R3YfYQPcCVE=)
2: uamuqQFO1RITJ5dk81fUrUR6XPQ.roa (hash: 1C1t+rXqVF/ZLbA2JmjtUkNNdPmBmSQrsPid9bwQzME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:68:62:57:97:1b:6d:5c:65:77:98:b1:d2:13:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
Validity
Not Before: Jun 28 16:01:08 2025 GMT
Not After : Jun 29 16:01:08 2025 GMT
Subject: CN=bd560f544289d96d71299f8731b398509b95b1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4f:2a:a6:84:d4:d7:a7:ae:e9:b5:ba:2c:de:
d8:eb:ff:5b:c1:d6:b1:08:76:94:c9:55:dc:a5:2f:
be:f5:87:f9:85:60:c9:f8:d8:9c:2b:02:86:86:67:
ef:3e:0c:8b:35:72:5f:63:9d:9a:4b:79:a3:ce:ab:
09:16:8b:28:90:a0:90:37:0b:e9:77:dc:52:34:8b:
1b:be:2d:09:ec:c3:21:4c:df:7d:0f:46:e5:b9:8f:
91:4e:6b:92:e9:04:7d:db:e8:25:c7:06:6a:48:82:
10:b3:b2:43:df:18:65:5c:70:70:c0:e0:a2:30:33:
f7:fe:c7:f1:f3:d9:13:6d:d8:b4:33:12:72:83:e7:
04:d0:6b:b2:45:a9:e6:45:52:98:53:90:c6:88:25:
b6:61:63:4d:a4:66:7b:a3:85:0d:83:a2:58:be:97:
a3:d9:e2:43:ec:ff:7f:67:99:37:a0:cc:c1:de:67:
33:d7:c9:0b:cf:99:24:67:f7:2d:0e:83:15:d3:52:
16:15:f8:20:4e:ea:92:d5:58:f3:dc:53:90:b3:bd:
16:b7:52:71:d2:09:3d:25:ae:fa:7e:25:31:00:ce:
8d:36:37:c0:da:ca:e8:fc:55:1a:a2:65:42:7f:10:
e7:48:c7:fd:9e:9d:5f:ba:24:ac:2f:47:b9:bf:88:
88:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:56:0F:54:42:89:D9:6D:71:29:9F:87:31:B3:98:50:9B:95:B1:CA
X509v3 Authority Key Identifier:
keyid:FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:4c:09:49:68:8b:a1:52:82:cc:68:06:78:f5:3f:8a:93:c1:
07:c4:0d:ea:39:27:f6:2d:93:e9:4c:28:aa:5a:a5:99:7e:f6:
71:11:a7:98:c1:e9:0d:6a:6d:5b:5f:3a:e1:fd:e2:d6:5c:2e:
d9:84:77:de:d0:97:a8:94:ff:7b:ef:97:f5:6d:c8:ca:c3:5e:
6b:5a:4a:0a:a9:6f:26:8f:41:0b:20:73:32:10:6c:85:fc:7e:
92:a5:4d:d2:bf:e8:9d:d7:a0:0d:eb:c0:2d:f0:0a:00:aa:15:
75:a5:54:fb:f7:b1:e7:9d:b6:1e:ca:b6:41:98:39:d7:ef:24:
ac:2f:77:ac:46:c5:87:8a:f4:27:8d:95:77:cc:4c:13:ac:bb:
f5:cd:91:6e:f7:c1:db:a4:5d:57:ee:2f:29:36:6e:91:56:9f:
fc:d9:b6:5b:48:53:c5:c7:b5:f0:0a:2f:a9:4a:e1:67:b3:c3:
db:95:57:7a:e6:a6:e2:b0:4d:2e:31:60:02:d7:c1:c0:45:d1:
8b:94:4b:42:a0:e5:fc:b3:42:da:bd:b6:8d:74:76:0d:d3:40:
a2:42:36:b7:11:eb:04:e0:f7:bf:05:48:79:a9:59:6a:8b:c6:
a7:f8:c4:71:64:f5:f0:43:ec:e6:c0:d1:e4:28:53:11:33:40:
90:72:86:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:04:36 2025 by rpki-client