Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
File: 1Cq3jtp78B2VtZd07TRry_lqJoQ.mft (raw, json)
Hash identifier: WS0QN4Rd5xXV50pYbA8ahsjcOB03uDd9UBg5apH7Kxg=
Subject key identifier: 3E:C6:D7:8A:E6:33:EF:F5:74:5A:F4:8B:C5:61:DE:BB:55:D7:2D:39
Authority key identifier: D4:2A:B7:8E:DA:7B:F0:1D:95:B5:97:74:ED:34:6B:CB:F9:6A:26:84
Certificate issuer: /CN=d42ab78eda7bf01d95b59774ed346bcbf96a2684
Certificate serial: 0198D473A476B7F7C9070AA4F10B5C3494E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
Manifest number: 0697
Signing time: Sat 23 Aug 2025 01:03:25 +0000
Manifest this update: Sat 23 Aug 2025 01:03:25 +0000
Manifest next update: Sun 24 Aug 2025 01:03:25 +0000
Files and hashes: 1: 1Cq3jtp78B2VtZd07TRry_lqJoQ.crl (hash: YfozTPOOKpzXVWDUBWAJ3OB0KaMPt2UV6Y6XlfRy52o=)
2: veEHXuiIgvjqTG6WTLvj8TN1Y9c.roa (hash: zCX9I5DqbiV1NyDUSWL69SaWgCwLBmNnvgRIApALMN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:a4:76:b7:f7:c9:07:0a:a4:f1:0b:5c:34:94:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d42ab78eda7bf01d95b59774ed346bcbf96a2684
Validity
Not Before: Aug 23 01:03:25 2025 GMT
Not After : Aug 24 01:03:25 2025 GMT
Subject: CN=3ec6d78ae633eff5745af48bc561debb55d72d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:30:97:90:60:c3:26:ba:9c:00:e1:9c:ab:ad:
d5:3c:05:a7:5f:5d:31:f0:22:0b:1b:7a:1f:16:e9:
33:fc:9f:98:ee:53:f9:0d:8c:25:e7:d3:4a:9b:19:
06:5f:86:c1:1f:7d:2b:23:f2:6e:41:43:09:b8:99:
27:fd:d9:35:5d:dd:80:47:39:e4:e3:fd:36:2a:a0:
41:c3:a7:9c:c8:e3:9f:ea:2e:3c:42:e4:f2:60:03:
57:1f:6b:35:43:8d:fe:09:2e:9e:93:1c:34:33:b8:
bd:fe:61:0a:74:19:4a:47:7a:94:80:85:e6:73:36:
47:03:f2:3f:49:54:e0:4b:19:c3:08:fc:e5:f6:0f:
c0:5b:8a:7d:f9:c2:ff:70:b3:e7:ec:90:db:c0:5a:
bd:51:45:4f:16:cc:5a:c3:61:8f:94:5d:1e:84:0f:
b0:8f:75:00:56:66:49:50:e9:18:24:eb:dc:15:4c:
92:1b:fb:1b:12:b3:ca:c9:7a:79:7d:fa:3a:8f:e0:
75:01:54:1e:89:ed:ab:35:00:b0:87:9b:24:bb:67:
20:de:e8:0c:c6:66:f5:db:9c:11:d9:7e:41:fd:ef:
39:77:d0:2b:97:31:73:87:ec:c2:b4:b5:a5:de:38:
b7:26:bd:78:fa:ff:a0:e5:b5:76:21:3a:29:68:9a:
ae:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C6:D7:8A:E6:33:EF:F5:74:5A:F4:8B:C5:61:DE:BB:55:D7:2D:39
X509v3 Authority Key Identifier:
keyid:D4:2A:B7:8E:DA:7B:F0:1D:95:B5:97:74:ED:34:6B:CB:F9:6A:26:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:8a:0f:ac:5c:db:b3:86:d6:ca:96:30:18:95:83:12:bb:46:
c2:ae:9c:fc:aa:12:1f:1d:1c:ac:45:5c:07:c6:8c:35:86:ea:
34:1e:13:06:98:50:66:0a:7e:b5:b7:ed:7a:bc:60:64:32:3e:
49:98:08:a4:23:db:97:4f:f0:28:e1:5e:e2:10:36:a4:9e:93:
05:21:9b:22:95:57:bd:ec:8b:9d:fa:6e:e2:12:a2:55:5c:78:
4a:90:d7:a1:ea:5b:7c:0c:f3:4a:96:48:c6:d8:3c:f9:a0:71:
a3:eb:cd:0e:bb:39:3d:43:c5:48:ab:1e:1a:a0:70:69:d5:59:
3e:fc:73:cd:71:b7:1d:1c:a1:87:01:8f:7d:a4:c1:83:ec:9c:
d1:25:49:74:8a:cf:39:75:20:36:c4:d7:16:87:8a:55:34:57:
49:bb:43:b7:83:a3:ec:1a:6a:be:43:25:a0:d5:14:ee:9b:70:
24:47:a9:76:b6:b2:84:d0:9e:3e:9d:2a:c5:41:7e:90:64:26:
de:e8:78:d9:93:a4:2d:6d:43:a0:8f:8f:cf:bf:4e:21:74:ea:
91:e9:a7:16:2b:b0:39:0f:6f:c8:d8:88:73:08:bf:98:44:08:
74:fd:a1:4b:cb:42:ee:0f:65:21:48:53:fb:72:e6:58:40:d5:
14:87:18:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:45:52 2025 by rpki-client