Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
File: 1-TVqludOotcrZUXIfHnSEtcqe94.mft (raw, json)
Hash identifier: gOLJM95WDt3ilSdm7i5MgrSwauwzet5C6I60mvjq13E=
Subject key identifier: 7C:4D:38:84:61:97:CF:62:6B:8D:BD:10:50:47:06:C3:4D:05:A7:BC
Authority key identifier: F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE
Certificate issuer: /CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
Certificate serial: 0198D583CE8AD5D006C31773A1D64F376AD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
Manifest number: 151C
Signing time: Sat 23 Aug 2025 06:00:41 +0000
Manifest this update: Sat 23 Aug 2025 06:00:41 +0000
Manifest next update: Sun 24 Aug 2025 06:00:41 +0000
Files and hashes: 1: 1-TVqludOotcrZUXIfHnSEtcqe94.crl (hash: gCME7HoDsWuzyn8uQTtxaSGlm0i770unRs4vm4ZZsAs=)
2: 40BuKq_ENsetJ0coeTja2uim-XM.roa (hash: jFKs1Nj/rGuvWwuXC1CAsi/+KiI87gmidC/b6O4pmJ4=)
3: Ozsn4JoKAsG2v5UbV7B2BGsrTbM.roa (hash: 3pxKTq3sMKN1NqkN5QM+NnGuUJMn7eGHWu6Nl0xki4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:ce:8a:d5:d0:06:c3:17:73:a1:d6:4f:37:6a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
Validity
Not Before: Aug 23 06:00:41 2025 GMT
Not After : Aug 24 06:00:41 2025 GMT
Subject: CN=7c4d38846197cf626b8dbd10504706c34d05a7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7f:e5:b9:c5:a7:1c:55:d7:79:3b:12:28:fa:
38:ee:26:7c:f8:ef:ba:d5:99:48:d4:79:b2:08:b0:
ac:19:77:78:56:a5:65:6e:0d:7a:80:6c:1d:76:e2:
16:91:0e:c4:3e:21:72:35:da:c8:2e:cb:6a:6e:f4:
61:3f:59:3c:8d:de:47:23:85:79:ec:15:13:dc:ae:
02:28:85:3c:65:2c:5a:38:04:01:33:74:25:46:88:
05:14:17:47:ff:3e:65:8a:80:4c:cf:2e:36:5d:02:
6d:7d:40:92:4e:42:b7:c6:11:c2:19:a0:49:d7:05:
bb:70:bb:b3:24:03:67:fa:b6:e0:9f:22:b7:26:3c:
72:4f:92:01:76:24:45:73:28:5f:c7:79:d8:4e:8d:
d8:53:5d:f0:cf:2e:e7:91:f3:51:ce:e2:9f:4c:1a:
4b:43:89:5d:ca:5a:e4:a2:89:e5:b1:b0:ae:07:84:
21:de:d8:ad:2e:08:ca:d4:0b:af:54:f2:79:38:aa:
83:9d:60:68:69:d4:45:bd:04:77:38:6e:85:a9:67:
44:71:f1:7f:e0:69:34:65:b0:2f:81:d6:38:30:7b:
25:7f:44:46:38:47:6c:57:a3:04:14:bb:71:25:a0:
9e:e5:84:e3:56:cb:63:76:68:9c:1e:1e:76:69:4b:
ed:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4D:38:84:61:97:CF:62:6B:8D:BD:10:50:47:06:C3:4D:05:A7:BC
X509v3 Authority Key Identifier:
keyid:F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:ae:71:f3:c8:74:07:6e:c8:65:39:d0:1e:52:ca:8b:68:d1:
08:44:ea:07:ee:00:e0:1f:e3:9b:78:bd:3d:6f:f1:61:2a:85:
74:bc:bc:ca:05:d6:be:db:71:1f:87:f7:4f:cc:b9:66:9e:ff:
3f:3d:f6:9c:1f:76:b7:51:7d:1f:53:80:01:b6:ae:da:7e:51:
f1:f4:1e:8f:a0:b3:05:69:ef:83:6f:5b:7b:5d:2f:8f:ca:aa:
6f:da:9d:75:ab:28:d1:8b:21:f0:03:63:9a:7f:04:f4:1b:ed:
4d:8f:a3:d1:22:d1:f3:5b:50:c1:45:4a:c2:8e:21:11:ec:76:
53:b2:35:23:48:0e:9b:28:0e:27:c0:70:ca:b3:e8:d8:d3:87:
d7:cf:e0:7e:49:da:0c:e0:f7:73:12:5b:b5:02:94:fb:06:cb:
0d:2a:f9:c3:69:b5:46:75:16:1d:86:e8:4e:85:5a:06:7b:99:
9f:c9:14:e5:e8:15:f8:51:f6:9f:bb:36:c5:31:c2:3f:57:47:
a1:05:36:4a:c5:0a:3e:de:09:a1:0e:4c:59:8c:94:43:f8:94:
d6:cd:25:b2:94:53:78:b3:55:1e:26:2e:21:20:bf:8d:fe:e2:
c5:be:86:97:39:d9:23:21:e0:64:81:b6:4b:d7:4a:f3:9e:4e:
61:5b:72:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:13:33 2025 by rpki-client