Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.mft
File: a5I-FqLEzb3ZUkCJCL-COARlulE.mft (raw, json)
Hash identifier: A8/7HuRmYslJesQm3QWj/dXS1lw6FM2beTyroWb+3so=
Subject key identifier: 3F:AD:B4:A2:40:F6:94:B3:21:F7:05:95:E1:E5:62:26:6F:7F:24:24
Authority key identifier: 6B:92:3E:16:A2:C4:CD:BD:D9:52:40:89:08:BF:82:38:04:65:BA:51
Certificate issuer: /CN=6b923e16a2c4cdbdd952408908bf82380465ba51
Certificate serial: 0198D66045FCA57FFD5404513C0E2F4D2F73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5I-FqLEzb3ZUkCJCL-COARlulE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 10:01:30 +0000
Manifest this update: Sat 23 Aug 2025 10:01:30 +0000
Manifest next update: Sun 24 Aug 2025 10:01:30 +0000
Files and hashes: 1: MdpNEvAqweEeBxvHQjNduxcNC5o.roa (hash: 3CFotLoSJook5su+0dIfaMzyVX/dwZvzE8G3t1ZME68=)
2: a5I-FqLEzb3ZUkCJCL-COARlulE.crl (hash: 1Q5oAw385SLmMiKPQwvHlvt/Ghkugdiz6cDYLQGrFEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5I-FqLEzb3ZUkCJCL-COARlulE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:45:fc:a5:7f:fd:54:04:51:3c:0e:2f:4d:2f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b923e16a2c4cdbdd952408908bf82380465ba51
Validity
Not Before: Aug 23 10:01:30 2025 GMT
Not After : Aug 24 10:01:30 2025 GMT
Subject: CN=3fadb4a240f694b321f70595e1e562266f7f2424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e0:b0:4f:7d:3e:17:91:c8:c8:c4:de:a6:e8:
ca:10:46:e6:d0:98:ea:08:f2:13:80:4e:fd:d9:eb:
6b:4d:6d:f6:97:20:31:e5:58:ff:45:a6:9f:bf:7e:
f6:2c:e5:f2:28:c9:e3:51:98:75:dd:59:b0:58:05:
5f:50:12:ac:49:7f:80:ec:d4:95:45:28:e4:88:7a:
c2:e6:8c:6c:77:e4:f4:2d:9f:e7:3e:e8:bd:72:10:
54:1e:5c:38:0a:53:4e:19:48:bc:51:ec:e1:60:32:
d1:18:b2:5e:c9:37:87:37:12:cc:a3:9d:bf:7d:d2:
58:cb:8c:be:96:70:f8:5e:21:15:92:f5:17:b7:be:
00:b2:3d:b8:f5:85:60:be:d9:5a:c9:5a:4d:6a:5a:
0d:b2:7b:1e:a3:d6:6a:80:04:1a:0e:5c:a8:f6:c4:
65:a6:d6:6f:67:24:18:30:6d:c6:4e:da:35:25:7f:
3d:0f:0d:31:0b:cd:91:5c:12:16:bd:d5:aa:2b:35:
54:bf:d5:0c:cd:f7:f1:67:50:62:5d:58:ec:d9:d9:
10:19:f6:5c:ef:10:ce:5b:29:5f:07:cd:a6:2d:0e:
87:a8:21:cf:ba:46:ab:9d:20:33:22:ec:4e:c2:95:
fe:41:25:06:c0:38:50:37:25:de:a5:39:dc:19:e7:
88:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AD:B4:A2:40:F6:94:B3:21:F7:05:95:E1:E5:62:26:6F:7F:24:24
X509v3 Authority Key Identifier:
keyid:6B:92:3E:16:A2:C4:CD:BD:D9:52:40:89:08:BF:82:38:04:65:BA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5I-FqLEzb3ZUkCJCL-COARlulE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/b17ec3-4d2e-4b49-a3a7-407e9f38907e/1/a5I-FqLEzb3ZUkCJCL-COARlulE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:fe:61:b1:6d:76:3b:5d:a0:d7:7f:1a:c7:ca:bd:80:76:63:
c6:b0:68:32:0c:61:4f:5b:9d:49:24:fe:0a:3e:b9:02:2d:bd:
76:b1:e5:34:9a:f3:d8:61:ae:c9:e1:2a:06:95:f5:cc:56:ca:
3c:1d:4e:3e:e3:f9:33:24:0d:fa:21:34:86:62:ac:6e:9d:a4:
a8:ab:cd:6b:d0:f8:fb:2f:bf:5c:92:5d:4c:29:8b:6c:ff:4a:
cf:38:93:b1:c8:a2:d1:24:09:f2:7c:1b:d4:59:07:f5:0c:d4:
6f:38:31:bb:d8:bc:24:96:88:07:19:e8:8b:97:00:07:46:43:
25:82:c7:32:0c:ad:36:4b:70:c5:77:09:48:11:8d:f1:32:84:
e4:fb:9e:ec:a4:4b:35:48:27:60:2f:29:63:d6:16:ca:2a:d4:
c9:7f:75:35:9b:43:c1:8b:07:22:48:8a:d6:d2:b4:5a:48:14:
bb:e2:4d:4b:9a:ea:c3:e5:b0:e7:83:8e:63:18:07:86:e0:b3:
75:f5:be:0f:05:7a:b6:21:66:a9:9a:37:46:0c:33:16:34:4e:
96:a7:1c:2b:44:c2:8e:ad:48:b8:11:c9:77:df:5f:b1:56:25:
88:7a:37:0d:fa:fa:8a:16:bf:47:95:e6:9f:94:32:15:1e:8b:
f4:9f:f6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:16:40 2025 by rpki-client