Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
File: 1-qWsXSKtkHinLhNplihyR-nx4TE.mft (raw, json)
Hash identifier: ep/qQqsTfeTmaBMo+bhvT24ksfxptMdOvg24OurpUBc=
Subject key identifier: 98:CD:D9:EE:10:3C:8D:65:5C:EE:BB:C5:00:2C:83:3D:C4:9E:61:D5
Authority key identifier: FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31
Certificate issuer: /CN=faa5ac5d22ad9078a72e136996287247e9f1e131
Certificate serial: 0197B820D22E1F997517A88033ACDA19F3AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
Manifest number: 10E3
Signing time: Sat 28 Jun 2025 20:00:48 +0000
Manifest this update: Sat 28 Jun 2025 20:00:48 +0000
Manifest next update: Sun 29 Jun 2025 20:00:48 +0000
Files and hashes: 1: 1-qWsXSKtkHinLhNplihyR-nx4TE.crl (hash: nDkd/vnxCBgp8oFlKiyYjilP9OMvbP0l8geHjkonXj8=)
2: NhnMYjAslLVa-AUlcKz__rn95zo.roa (hash: tZEX0EAU3kMvQjAQCJnIAbh87GSUNy8524Ozv2q7nvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:d2:2e:1f:99:75:17:a8:80:33:ac:da:19:f3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa5ac5d22ad9078a72e136996287247e9f1e131
Validity
Not Before: Jun 28 20:00:48 2025 GMT
Not After : Jun 29 20:00:48 2025 GMT
Subject: CN=98cdd9ee103c8d655ceebbc5002c833dc49e61d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8e:01:0d:ff:4d:6d:70:46:ed:9f:a1:22:07:
75:8a:51:ee:ed:80:ea:d6:82:23:ec:c8:07:94:4f:
34:88:30:59:59:1e:81:91:4f:9b:4c:42:62:d3:41:
1b:fd:b4:01:df:b7:45:26:9a:c8:07:01:12:e8:7b:
c4:38:db:47:e0:76:bc:1c:af:34:c8:c5:9a:21:e6:
85:71:72:a1:a7:70:98:3b:b4:a2:57:86:24:56:58:
f7:7f:36:64:67:75:b2:7d:6c:a7:b2:bd:89:65:48:
29:42:8d:8e:f5:a8:12:c5:3e:31:89:e6:47:c3:81:
a4:8a:09:3c:c7:2f:65:48:24:b7:ef:ff:76:df:a4:
9a:f4:08:b9:9d:8e:a3:59:58:2a:c5:ce:77:75:73:
30:d3:da:8e:80:7e:dc:ac:39:b6:3f:3b:cd:5d:d3:
2b:a3:e6:2e:fc:86:3e:8a:fb:57:8d:be:85:9b:c4:
47:bc:38:41:c1:83:cc:f5:fe:7c:6b:88:92:02:4c:
2c:7a:f9:41:ed:60:c6:8b:ac:02:86:82:e9:ac:9f:
d7:c0:1d:67:a2:b2:65:2a:5c:f7:07:25:00:08:db:
fb:6e:3b:c3:b7:9e:72:7c:72:a1:d9:1a:bf:2b:4e:
a1:45:72:fc:ee:e2:c3:68:5e:46:43:1c:b2:80:a1:
7d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CD:D9:EE:10:3C:8D:65:5C:EE:BB:C5:00:2C:83:3D:C4:9E:61:D5
X509v3 Authority Key Identifier:
keyid:FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:28:33:de:2c:d0:ea:6d:81:94:89:e7:e8:40:17:00:73:99:
1f:d2:88:98:ad:07:e7:73:a4:3e:0c:83:90:9c:63:e6:d7:05:
e9:91:3c:94:6e:4f:ea:39:db:ad:7e:b2:b7:24:95:5d:da:0c:
c9:79:98:0e:e8:ee:93:b7:62:e6:6b:2c:62:41:e0:f8:f5:92:
59:4b:ac:8e:fd:27:f9:1d:83:90:11:91:c3:49:eb:9d:c5:38:
67:72:22:0f:8c:1d:2a:65:ba:23:65:f2:23:e2:a1:96:e5:bb:
b8:8f:e0:0b:ce:f0:1c:f5:f6:f7:77:d0:09:a5:ae:4e:8c:00:
cb:f8:f4:fc:c3:ae:3f:98:ba:22:1d:e8:f1:bb:9d:0e:ae:bf:
64:cc:97:f2:31:e4:71:a7:c9:07:95:7b:65:75:6d:b1:fc:04:
be:16:c2:ca:6f:e1:40:cb:d3:3c:02:32:f1:cb:33:a3:6f:0e:
9c:56:f6:bf:29:30:82:c5:7a:c9:74:53:cb:17:a6:87:69:13:
07:f2:f2:5f:90:13:88:64:3b:f5:36:54:e6:a7:01:d2:b6:ba:
e4:ea:ba:66:06:a6:24:27:e7:58:47:e2:fb:73:d5:8b:eb:24:
65:2d:35:57:2c:1c:35:fc:01:bb:69:a7:94:e2:f6:89:2e:40:
9b:47:16:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:21:19 2025 by rpki-client