Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
File: 1QTmQeVaSK7gFB4sDSYicQLKptQ.mft (raw, json)
Hash identifier: /n5WapG+/FbtcoynXBSpqaSh5K+Ff1Ziq4BMEeFXXeM=
Subject key identifier: AC:79:28:E2:09:54:9A:A9:0C:BF:F6:6B:4C:0B:9B:A5:3D:46:89:F8
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial: 019845F6358C3B77F74521CB4C27663F275D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
Manifest number: 0FB1
Signing time: Sat 26 Jul 2025 09:00:20 +0000
Manifest this update: Sat 26 Jul 2025 09:00:20 +0000
Manifest next update: Sun 27 Jul 2025 09:00:20 +0000
Files and hashes: 1: 1QTmQeVaSK7gFB4sDSYicQLKptQ.crl (hash: N8s/BLFBqqcRbChJiaM9znSdnkkTh3RcySCH8TG7PGI=)
2: 8394MOfnLh_yAjC5oBzFaMKHm6g.roa (hash: LERfhqf0k5zIruV7b50StKNQsMWe2Ikf9jCbw9DjSV0=)
3: EeJuZ6ZuYMeP-N4AAq72eBlOcpM.roa (hash: oERKMEQ/M129kNgVvoyFhR9aTD1YFXrhdgiUJ9nGJ/4=)
4: FAqlGSimYu0iYfDKBVjHX-VLzKc.roa (hash: WfUufO4W+prwwNDD5ADTi0DPEPfB9t599hV9voFifsQ=)
5: Hl87tUhseJrx8ua_eZqEp-JXnL8.roa (hash: jm0/ddSHPme/VSGWBnMHo4jZkNs2MFEBOqNEBiv6awA=)
6: mS4C21ztnhJ1CQEhvl6HMt_DrKI.roa (hash: +AZpnsUJfoswiZ8L8H5vFWzIYnjuMk5tWnCTTVqTzgU=)
7: wPc7v-r8HN2WgTXXGZ1otoniuZk.roa (hash: 25D1eRRGlzWdsvEgZ+vInaKAYQi119NABCdy4hawamc=)
8: zqQPqsNghrHDurnrcYBnEoZLmxo.roa (hash: X61i/t72QEVUDPoVAXxvJ+YmKuAemlBmWuMndAD4GQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:35:8c:3b:77:f7:45:21:cb:4c:27:66:3f:27:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Validity
Not Before: Jul 26 09:00:20 2025 GMT
Not After : Jul 27 09:00:20 2025 GMT
Subject: CN=ac7928e209549aa90cbff66b4c0b9ba53d4689f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:59:a5:44:1f:1f:83:74:85:e9:db:b4:f1:45:
36:8f:60:2a:0a:e7:0a:d8:f4:23:78:ff:99:98:9f:
be:99:96:f9:c6:fa:de:b3:8f:c0:d0:09:61:7b:be:
81:a3:4a:e2:2f:d7:1d:62:9e:d2:3a:5c:68:2f:b9:
72:61:f7:9d:1e:a5:55:bd:b3:4e:c2:a8:3c:3b:8f:
5e:c6:02:d4:5d:58:5b:73:5c:0e:b4:40:0f:b4:fd:
c7:b5:c7:bb:96:d9:16:8a:4b:ec:3f:0b:c7:7f:36:
64:1c:52:0a:64:a0:9e:34:91:48:ef:9b:ce:bb:77:
c7:96:7b:e6:ac:90:57:8b:95:25:76:13:db:89:22:
7a:a8:e7:0a:9c:be:81:9d:9a:b2:09:7e:4f:d0:d3:
02:33:6b:8a:41:a1:2d:b7:a1:dd:7d:3b:b3:8c:25:
87:58:6e:dd:84:d7:40:8d:8b:b9:e8:1a:99:5b:b0:
b5:49:0c:d9:54:13:54:f3:78:39:a2:c7:c4:6b:8d:
f8:6a:52:10:d6:a8:68:67:de:c9:01:86:33:72:cd:
3c:7e:50:10:5a:f9:5b:fb:a2:23:1d:6b:7e:8e:75:
19:59:72:50:33:2f:c8:9b:29:bf:99:b2:b9:35:62:
97:1a:70:c0:8e:be:06:97:de:49:7b:8d:2c:00:61:
ff:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:79:28:E2:09:54:9A:A9:0C:BF:F6:6B:4C:0B:9B:A5:3D:46:89:F8
X509v3 Authority Key Identifier:
keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:91:72:9e:17:4a:74:f1:5a:31:9b:05:0a:64:f0:54:ee:76:
92:79:0e:09:8b:74:9e:a4:d7:cf:a4:4f:38:e5:b5:68:d6:73:
3a:b2:7e:46:70:6f:33:99:2a:11:fc:d7:a4:86:a7:52:93:80:
68:7d:25:f1:79:52:b2:e0:f9:b8:21:42:45:3f:78:7c:36:7d:
9e:04:8d:db:3a:bc:a5:ce:b8:b6:23:82:a7:1d:f9:af:7b:e4:
27:ed:99:8c:5f:9c:28:49:90:20:b5:fb:74:a5:2b:35:ae:74:
db:71:63:d6:18:5a:1f:9d:67:32:d2:0c:9f:d9:f3:e3:3a:7c:
90:c6:f6:85:04:e7:89:7f:e8:3b:b2:38:5f:b0:33:66:d6:cc:
a1:9e:26:32:f8:7c:a6:73:b3:74:30:b6:88:51:7f:5e:e2:93:
c1:aa:e3:6f:15:3c:37:74:ba:a2:cf:e5:36:9e:a4:61:0c:bf:
f8:99:08:0a:6f:7b:59:9a:9e:6c:2d:9b:19:55:6d:1e:d0:b5:
94:bd:0b:c1:01:59:ce:c2:b8:16:23:cf:5f:29:b6:fa:13:e3:
2c:fa:43:15:bb:b0:4b:14:c9:b2:36:5d:30:55:52:20:d3:80:
4e:32:44:ea:6e:1e:8a:11:ef:39:7d:5f:c9:09:a5:21:66:45:
09:83:6c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:40:14 2025 by rpki-client