Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
File: 1-cuQlMt82hOL0BABPrnswzGQMEE.mft (raw, json)
Hash identifier: G5Rokm6YUnTRv+HIz8tnOe9u5MF0y/hAo/j8PyhAeIM=
Subject key identifier: 51:9A:E4:4B:50:46:EC:17:E8:3A:10:FC:63:BF:9A:06:3E:45:88:35
Authority key identifier: F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
Certificate issuer: /CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Certificate serial: 0198D73BCBE81FFD8BA4811BFF86EE5D5069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 14:01:16 +0000
Manifest this update: Sat 23 Aug 2025 14:01:16 +0000
Manifest next update: Sun 24 Aug 2025 14:01:16 +0000
Files and hashes: 1: 1-cuQlMt82hOL0BABPrnswzGQMEE.crl (hash: f9bP2G9l0EdqaSb6KOFuTFapfzy8KzAJtOOF2cDdc+w=)
2: YHDrFWwxkrS_T2zm-XD8OnCCk3I.roa (hash: ats4DX7q3HbDaXBiSmUVMOKuQb0H1KPc5eA6NgFMmhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:cb:e8:1f:fd:8b:a4:81:1b:ff:86:ee:5d:50:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Validity
Not Before: Aug 23 14:01:16 2025 GMT
Not After : Aug 24 14:01:16 2025 GMT
Subject: CN=519ae44b5046ec17e83a10fc63bf9a063e458835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a5:a6:41:b5:1d:d7:dc:c1:37:20:79:ba:37:
c2:dc:7b:fd:a5:3e:c0:ea:b1:9f:2a:2a:23:05:f1:
74:5e:2a:aa:be:4e:11:ce:6e:90:b7:60:84:cb:ee:
2e:5d:c0:9c:9f:02:ae:dc:8d:39:77:10:56:a1:ee:
90:79:f5:64:d6:15:e9:7d:b7:e1:11:44:1e:e0:f4:
33:8d:c3:18:7e:3d:48:24:b1:f1:3a:a6:09:bd:45:
20:bc:ad:45:c5:a6:ff:4d:31:b8:14:2e:c3:ce:4a:
d0:8e:2a:5b:e7:2f:ca:e5:34:a6:bc:d5:07:d4:a4:
9a:e9:5d:82:ac:bf:35:1d:50:4a:8a:4f:51:22:f2:
32:0e:00:d2:3d:e7:79:5c:d7:27:eb:a3:07:95:f6:
d8:8a:98:d2:d5:70:8e:f1:63:ca:14:d1:7c:72:09:
e0:b0:d8:71:66:54:50:d9:e8:6e:e8:5b:d0:79:50:
d8:ae:a7:69:3d:fe:ce:89:c5:36:bb:b3:24:73:5c:
ca:a6:b8:9b:d4:c5:6a:0e:4a:42:94:37:4a:cd:4f:
cf:86:0d:80:b7:e5:11:10:e1:96:50:49:77:81:dd:
d7:ca:c6:bd:3e:f3:d0:3c:5a:b5:be:45:df:cb:44:
83:13:61:e7:27:6e:45:01:ef:4f:5c:37:99:4c:5c:
7a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:9A:E4:4B:50:46:EC:17:E8:3A:10:FC:63:BF:9A:06:3E:45:88:35
X509v3 Authority Key Identifier:
keyid:F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6b:49:7f:e5:31:db:9b:7d:17:2a:ec:71:e7:64:be:a2:26:
93:d5:71:dc:36:90:70:f3:dd:c8:dd:b1:1e:81:ef:14:17:be:
20:84:af:d0:04:25:9c:54:d1:89:2e:11:85:25:63:d8:26:cb:
c7:60:d0:c7:d9:5c:a0:83:48:2c:06:8f:92:3b:b4:65:a5:6a:
80:56:6b:d4:5d:96:fd:20:06:a8:11:a5:a4:fd:d5:71:15:68:
79:fe:9c:be:84:cb:66:9b:26:24:66:03:21:d9:c2:1b:19:c9:
02:48:61:99:e4:49:0d:4b:4c:76:ce:ff:71:dc:c7:ba:32:15:
24:e8:07:02:1e:0c:fc:c7:de:b9:85:ef:45:43:c2:a3:1f:b4:
c6:5d:d1:59:92:8a:35:09:8c:eb:ae:7e:8b:e7:2f:cf:94:2f:
b0:ad:7b:22:fd:b6:46:44:79:9d:d2:96:53:92:14:60:07:11:
e9:8f:d3:10:65:c8:74:8f:e9:57:0d:6a:8e:21:11:fa:12:6b:
34:93:35:76:25:5c:75:91:a8:be:1c:b7:f5:93:1c:a7:80:09:
c2:e1:4c:17:36:ec:cc:27:3f:86:95:73:e9:3c:bf:78:1b:88:
7c:90:4a:89:d4:e5:a2:56:84:ff:64:c5:41:03:ba:fa:cc:23:
6d:91:93:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:14:38 2025 by rpki-client