Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft
File: 1-6eRi79aqA8USTetGWXqA_Alwi4.mft (raw, json)
Hash identifier: mHlnd06G8sMwE6Unrvj5sfU7xmtKKTat3DccbZF9QPI=
Subject key identifier: 65:EE:15:A7:75:1E:EB:1B:E2:48:6E:70:CF:D9:9E:7C:01:19:A2:41
Authority key identifier: FB:A7:91:8B:BF:5A:A8:0F:14:49:37:AD:19:65:EA:03:F0:25:C2:2E
Certificate issuer: /CN=fba7918bbf5aa80f144937ad1965ea03f025c22e
Certificate serial: 0198D77333020F54B3FC85869398CBCC6245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft
Manifest number: 2D
Signing time: Sat 23 Aug 2025 15:01:47 +0000
Manifest this update: Sat 23 Aug 2025 15:01:47 +0000
Manifest next update: Sun 24 Aug 2025 15:01:47 +0000
Files and hashes: 1: 1-6eRi79aqA8USTetGWXqA_Alwi4.crl (hash: WgkpxnB9bC9wu/MbtHU06EKr9hUgFjSel3IXFfbdXUY=)
2: qoiIuGZpsZyjR8YLAPW0kfgioQM.roa (hash: Bdnsy6A3scDmTAkeEHQfOrfRTQ0txD1RF6hmP7OF1Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:33:02:0f:54:b3:fc:85:86:93:98:cb:cc:62:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba7918bbf5aa80f144937ad1965ea03f025c22e
Validity
Not Before: Aug 23 15:01:47 2025 GMT
Not After : Aug 24 15:01:47 2025 GMT
Subject: CN=65ee15a7751eeb1be2486e70cfd99e7c0119a241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7d:ad:a8:ba:b4:bf:e7:2e:b6:a5:b9:dd:df:
81:95:93:c1:18:8f:cc:16:3c:a8:f2:10:f8:a7:04:
d3:70:59:f0:62:ee:8e:85:46:75:25:6e:40:8d:b4:
b9:59:eb:16:03:3b:65:ab:1d:ff:29:f9:d0:f2:9c:
1d:8b:8a:03:4b:17:67:7c:2b:e3:54:21:f7:e9:44:
04:c8:19:17:a6:71:e4:08:12:e0:0c:92:85:00:95:
e0:f8:ab:36:b3:2f:71:e9:56:c2:d2:f2:60:a8:69:
a8:83:21:50:de:3f:7b:8f:1d:e3:81:ba:e2:ea:04:
ba:13:6f:a0:99:dc:19:15:6f:cb:24:e9:e9:21:ce:
a2:af:7f:f6:f3:28:f3:19:48:b0:5e:b8:f4:92:19:
94:17:39:45:d3:ff:7b:69:19:fd:83:a4:0c:4a:30:
05:41:57:fd:60:06:13:94:e3:f8:65:c8:57:4b:e6:
c2:8d:1f:cb:c8:ee:d7:e7:0e:4d:5a:59:ea:a8:58:
6b:22:80:98:bf:70:3c:de:b5:b5:85:17:3e:ae:0e:
59:1c:c4:5c:fc:f3:ba:ce:b4:ef:09:4a:45:50:30:
5a:c9:ec:35:e0:41:84:9f:ec:73:2d:12:c5:31:ee:
25:70:e3:f1:48:fb:a7:81:39:ee:f9:71:1f:91:21:
09:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:EE:15:A7:75:1E:EB:1B:E2:48:6E:70:CF:D9:9E:7C:01:19:A2:41
X509v3 Authority Key Identifier:
keyid:FB:A7:91:8B:BF:5A:A8:0F:14:49:37:AD:19:65:EA:03:F0:25:C2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:25:37:eb:0e:7c:6d:cd:6f:46:77:b2:2b:dd:96:be:ff:f3:
98:67:c0:c2:de:ac:36:ee:dc:bf:a9:80:ca:46:c6:67:de:89:
56:ed:ec:80:49:7f:72:c7:6e:f1:81:30:d6:e0:56:e6:75:1b:
04:65:e6:0e:42:f8:3f:2c:ad:83:f2:1e:6c:98:26:02:b2:88:
95:e4:b6:34:45:a0:10:7f:bc:d6:77:9d:c8:23:94:62:45:e9:
1c:13:0c:5a:8f:ee:a8:37:de:27:ab:27:f4:f6:67:be:96:20:
d5:2d:da:44:30:79:2b:c8:2c:6c:37:01:cf:b9:50:33:73:03:
e7:69:71:96:59:de:b8:77:8c:92:af:88:5d:81:95:dd:02:cc:
b9:86:70:42:20:d2:52:11:66:18:8f:4d:fc:e1:7f:fd:7d:8b:
42:49:71:70:53:53:8d:7b:a2:e5:bd:ae:ce:b5:19:3a:41:45:
ba:f8:f3:64:34:cc:09:05:47:f0:a3:37:d4:76:32:2a:be:3e:
64:d8:1b:dd:9a:46:17:2f:2e:59:52:fd:36:3b:3a:ca:37:fb:
20:38:68:aa:04:b7:40:b2:2b:e0:2f:24:a8:15:e6:c3:7b:c6:
b3:10:cf:3a:c0:05:d6:f0:91:24:e1:54:06:e6:57:06:bf:44:
ca:76:f4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:24:11 2025 by rpki-client