Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
File: 1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft (raw, json)
Hash identifier: 3cPsWDQFAi9M1MbqwigrPvoyHG10l8y2q2GXtHiKSts=
Subject key identifier: 5E:B6:C3:BB:EB:22:A0:F5:6B:7F:35:A4:91:C7:5D:67:FE:06:BC:55
Authority key identifier: F9:AA:8A:3E:A9:91:33:33:93:F3:EF:2A:18:22:45:11:23:D3:EE:C7
Certificate issuer: /CN=f9aa8a3ea991333393f3ef2a1822451123d3eec7
Certificate serial: 0198D5F1823185BAE2DEB1A59FF151B7A651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 08:00:31 +0000
Manifest this update: Sat 23 Aug 2025 08:00:31 +0000
Manifest next update: Sun 24 Aug 2025 08:00:31 +0000
Files and hashes: 1: 1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl (hash: I0YxXsw7x5WvG+m40bzRnAMNzd1SiWa+cAM0FRk8bmg=)
2: mxOutmmSzZNxuKpcgLVVZu-l64M.roa (hash: 9XVkgMijFdMAyjZxhpANyJaDNj4FdVCkkG/qmNyFekA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:82:31:85:ba:e2:de:b1:a5:9f:f1:51:b7:a6:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9aa8a3ea991333393f3ef2a1822451123d3eec7
Validity
Not Before: Aug 23 08:00:31 2025 GMT
Not After : Aug 24 08:00:31 2025 GMT
Subject: CN=5eb6c3bbeb22a0f56b7f35a491c75d67fe06bc55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d5:74:cd:a4:d3:8c:f5:67:8a:d6:e7:d7:d5:
aa:e1:ca:c7:29:e8:c0:9b:f8:fd:bf:92:a7:5f:11:
12:91:40:97:78:22:06:03:d1:7c:2b:e4:69:03:db:
e3:b3:87:e2:f3:ac:e2:38:55:91:4e:7b:a6:08:13:
ae:2b:42:62:2a:57:70:d1:5b:45:4d:0b:b2:b8:08:
a9:b5:84:55:a9:47:f8:7f:a2:e9:45:a9:a7:df:11:
c4:e4:85:48:19:f7:6e:78:7f:08:51:62:49:88:fb:
21:e6:7b:3e:c3:e0:97:7d:01:44:a7:00:aa:fa:25:
14:4a:07:89:24:43:d0:52:23:cb:be:d0:77:82:49:
46:2e:8c:8f:42:e6:df:c8:3d:39:7f:20:58:e9:55:
f8:d2:44:2e:75:ac:46:f1:95:2c:5e:88:ac:0e:07:
19:cb:60:49:95:7c:45:8c:48:c1:1c:a2:77:e2:37:
d5:98:37:b6:b4:54:7d:5d:47:f2:0f:72:a0:93:41:
85:3b:4d:e3:e8:a3:9f:8f:5b:36:17:94:50:d6:2d:
50:6a:fd:36:dc:93:28:44:15:f4:ea:a5:16:54:a6:
12:b3:89:1e:85:24:b9:d6:46:93:8a:8f:14:7d:9a:
d6:d9:d2:d9:84:6b:43:85:15:40:e3:0d:21:a5:d6:
df:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B6:C3:BB:EB:22:A0:F5:6B:7F:35:A4:91:C7:5D:67:FE:06:BC:55
X509v3 Authority Key Identifier:
keyid:F9:AA:8A:3E:A9:91:33:33:93:F3:EF:2A:18:22:45:11:23:D3:EE:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:3c:e0:24:47:5d:49:2f:f7:90:2a:81:66:b6:c3:eb:70:fb:
c1:98:f6:6b:00:9c:a1:e9:64:a6:bb:06:3e:25:eb:02:af:2c:
8c:dc:a5:4a:ca:ea:ea:4c:66:43:c1:5c:32:e8:38:33:17:2c:
a1:43:cb:e0:4a:8f:ad:8b:ba:f8:76:ad:ab:f0:49:5e:62:af:
6c:0a:6f:31:59:98:9c:1d:58:81:2f:b9:5a:8e:10:85:ed:d8:
3a:84:d8:da:e9:bf:d4:ff:67:ad:6d:cf:35:16:c1:26:44:e2:
99:8f:81:82:8c:89:75:62:57:88:b1:6a:53:b8:d9:e0:16:69:
e7:69:f6:77:fa:c8:e4:f4:44:34:6e:d6:13:67:01:d3:53:63:
8a:8b:90:ed:ba:b7:54:4e:43:7f:d7:11:e1:2b:fb:be:86:53:
a2:7c:9e:78:35:27:a0:9c:39:d3:5e:fe:11:77:3c:fa:a0:50:
91:ec:66:a7:67:c0:78:3d:5c:01:ce:20:b5:7a:5a:21:34:b4:
4c:d9:ef:be:4e:46:de:b2:d0:4d:d0:af:27:d7:5e:48:9a:d1:
fd:82:11:e9:92:8a:56:c1:2b:48:55:22:a1:b2:d5:0d:4e:23:
f2:89:ef:83:dd:e4:bb:c9:04:ed:eb:15:ee:d1:14:b7:1e:84:
12:ad:02:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:25 2025 by rpki-client