Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
File: 1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft (raw, json)
Hash identifier: CXqEF/H70cinxmSV8GSP09TZ0mwo6oiOL/NRdmurxUk=
Subject key identifier: E3:69:72:31:95:7F:01:BB:A4:1B:32:85:A1:62:41:17:B7:FA:42:CB
Authority key identifier: F9:AA:8A:3E:A9:91:33:33:93:F3:EF:2A:18:22:45:11:23:D3:EE:C7
Certificate issuer: /CN=f9aa8a3ea991333393f3ef2a1822451123d3eec7
Certificate serial: 0197BA0F8ECB115BDCCA45D3D5FC7D8EB112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
Manifest number: 15B3
Signing time: Sun 29 Jun 2025 05:01:11 +0000
Manifest this update: Sun 29 Jun 2025 05:01:11 +0000
Manifest next update: Mon 30 Jun 2025 05:01:11 +0000
Files and hashes: 1: 1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl (hash: 75fkFUmiwwvaVKehVSDbxJPFKaHXYdY3qR4VLtVgxS8=)
2: mxOutmmSzZNxuKpcgLVVZu-l64M.roa (hash: 9XVkgMijFdMAyjZxhpANyJaDNj4FdVCkkG/qmNyFekA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:8e:cb:11:5b:dc:ca:45:d3:d5:fc:7d:8e:b1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9aa8a3ea991333393f3ef2a1822451123d3eec7
Validity
Not Before: Jun 29 05:01:11 2025 GMT
Not After : Jun 30 05:01:11 2025 GMT
Subject: CN=e3697231957f01bba41b3285a1624117b7fa42cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f2:9e:62:d7:23:15:a4:d1:03:d3:fb:11:8f:
f3:c9:7f:7b:ca:ad:92:1e:d7:dd:9e:34:c7:72:3f:
47:65:42:bc:6f:a7:47:b2:33:5a:3a:d8:33:b6:0a:
67:11:9e:d1:00:6c:d5:63:e1:42:52:6d:f4:63:7e:
49:c4:31:fb:37:69:cc:99:7c:e4:7a:fc:52:ca:7b:
0f:7b:72:d2:4e:87:7d:e6:01:94:5f:bd:e1:48:1b:
ef:ac:5c:dd:2e:24:7c:4c:80:b1:43:ab:de:3c:d5:
f9:1b:7b:28:f0:c9:d2:67:83:cc:8a:03:8b:52:10:
97:0f:9e:ef:13:60:81:97:72:71:c9:40:83:f5:13:
a5:33:b2:3b:71:f3:47:d3:e2:43:af:f9:72:9f:90:
33:aa:d5:d8:6b:74:f0:9b:f7:d1:5f:0d:b4:b4:58:
b6:45:0d:c4:5e:c9:22:d4:2f:5b:3a:f3:ba:45:39:
01:56:16:1d:0e:6a:e9:65:a9:43:5f:15:69:d6:80:
0d:d3:83:f7:00:a7:d4:16:ba:a6:08:14:e0:5f:e6:
0f:35:b0:73:9f:5b:2d:ef:30:7b:5f:96:3f:83:7b:
7f:c3:66:65:5f:18:1d:fc:cb:bd:f2:22:ce:be:3a:
1e:0f:e6:f1:f5:11:3a:c1:47:29:67:32:1a:e4:e7:
5e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:69:72:31:95:7F:01:BB:A4:1B:32:85:A1:62:41:17:B7:FA:42:CB
X509v3 Authority Key Identifier:
keyid:F9:AA:8A:3E:A9:91:33:33:93:F3:EF:2A:18:22:45:11:23:D3:EE:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a2:83:e9:17:f2:cb:0f:fe:3c:14:b8:8e:72:df:94:9c:60:
32:21:2d:9e:af:84:59:2f:f8:17:f0:17:11:f1:e7:f0:ca:2c:
f3:11:91:52:4e:0b:32:69:d7:82:1d:a6:72:ee:9d:f9:cd:ff:
60:1d:21:a8:05:0e:f5:3a:28:3f:4e:a8:03:cf:7e:1c:1b:06:
28:dd:3d:5d:40:4e:f4:c9:4a:a5:33:bf:c3:25:f4:57:1b:7d:
98:f5:70:de:74:42:71:db:e4:f1:bb:ce:b4:12:ee:b7:b0:17:
47:f8:af:74:e5:a9:4b:6c:5f:6f:17:c3:4f:99:76:e5:69:f9:
43:b9:f5:c3:1c:bc:21:3f:65:69:74:ab:ee:72:61:e9:ad:05:
27:2a:87:9b:3b:d6:8d:29:fa:90:43:53:be:ae:a0:e6:b6:f9:
64:ca:19:4e:da:7b:76:10:a0:c9:99:cd:1a:1e:6c:6b:06:c9:
04:92:ce:22:c5:77:74:da:52:97:5c:6e:61:74:64:a1:d5:51:
51:0d:58:e5:c3:d3:60:4b:88:c2:3a:f8:41:2a:e6:5f:7b:19:
29:14:a7:aa:cc:57:18:6b:61:2e:4d:f9:9d:b9:6b:8b:a2:29:
4b:e6:56:0a:8b:40:d6:af:29:05:73:31:31:85:90:90:cd:2a:
12:d2:62:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:56:31 2025 by rpki-client