Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
File: 1QliA1xelRATygZwylaeefjWPBU.mft (raw, json)
Hash identifier: lIT6OBzR/aIR7ry58CbravqCv4XxOIAUJp/MOIN5XjQ=
Subject key identifier: 70:F5:29:56:66:3F:95:65:C2:87:58:E7:9B:65:7B:FB:69:1F:30:FE
Authority key identifier: D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15
Certificate issuer: /CN=d50962035c5e951013ca0670ca569e79f8d63c15
Certificate serial: 01984BF836AB95F16FC5B6083A194E5FE57A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
Manifest number: 10CE
Signing time: Sun 27 Jul 2025 13:00:14 +0000
Manifest this update: Sun 27 Jul 2025 13:00:14 +0000
Manifest next update: Mon 28 Jul 2025 13:00:14 +0000
Files and hashes: 1: 1QliA1xelRATygZwylaeefjWPBU.crl (hash: jhz+Q5oXvFL73Ut6PFYq/zwYAJGpiA4l5sbEbnTAb24=)
2: QgExJsLM6ckB_bwe9qRnk4o5HhA.roa (hash: P6xf+cz+/i4pkIjOYnliYy5pmyQWXuehaFAXXoyCR5k=)
3: fD4OezRM4UrasrKKJ10uGn5_Qug.roa (hash: +HiHjgUZa5Xei+THiDncnTXYzPCxqbbX0ahPYM7QsZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 13:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:f8:36:ab:95:f1:6f:c5:b6:08:3a:19:4e:5f:e5:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50962035c5e951013ca0670ca569e79f8d63c15
Validity
Not Before: Jul 27 13:00:14 2025 GMT
Not After : Jul 28 13:00:14 2025 GMT
Subject: CN=70f52956663f9565c28758e79b657bfb691f30fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:81:73:e7:7a:5e:69:91:80:7f:ca:28:9d:6b:
44:be:44:05:8d:0a:0e:f7:98:57:82:01:c9:30:57:
88:ea:b3:fe:3e:d1:07:26:89:76:f8:b2:7b:72:b3:
80:b4:4f:57:43:98:ec:74:8a:55:57:ac:2e:7a:07:
a1:b8:e5:12:fe:99:ff:ef:fb:49:8a:e3:6d:2b:6a:
38:14:98:62:ee:e6:e5:ae:f7:42:71:07:a7:ea:2d:
22:7e:27:87:99:fe:82:b0:71:c8:87:72:8d:2c:b8:
24:8c:94:78:ee:11:ea:e6:7d:dc:a8:40:b9:66:0b:
8d:98:38:08:dd:2b:fb:9c:ea:cd:b8:3a:1c:58:c1:
25:8b:7b:26:6a:52:33:55:d7:5b:72:98:85:3d:a7:
71:42:db:eb:e6:71:66:23:ff:9e:b1:7e:45:8e:28:
41:b7:dd:87:bf:8d:3a:78:6f:99:0d:91:39:7a:eb:
0d:6b:db:00:61:bc:43:82:03:8d:56:dd:4f:05:0e:
45:77:6b:93:3a:66:ab:77:ca:4a:69:27:0d:c5:aa:
1a:3f:49:d3:5c:62:03:88:18:a9:ff:cc:86:85:1f:
52:64:54:ce:5c:e8:25:66:73:5f:5c:b8:30:12:b4:
73:d7:83:95:49:ca:01:51:69:fc:c7:22:a5:fd:9c:
67:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F5:29:56:66:3F:95:65:C2:87:58:E7:9B:65:7B:FB:69:1F:30:FE
X509v3 Authority Key Identifier:
keyid:D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c2:a4:94:fb:a1:b2:fd:33:26:57:0d:d6:52:2c:5c:34:02:
58:11:e7:66:82:5b:f4:f0:c5:1a:2c:60:42:d2:66:43:1f:66:
c5:45:03:c4:d2:3e:74:e2:36:69:b3:70:d7:56:ac:53:41:e7:
60:07:25:c3:ac:46:31:73:56:ac:07:ec:fe:43:95:4d:a2:ca:
02:07:9f:88:28:fa:3e:00:4c:73:e9:4b:9a:8d:79:19:38:28:
1b:1c:cb:3b:58:cb:f8:8d:5e:b8:95:80:c9:ad:bf:28:14:73:
02:4e:29:9b:b2:51:a0:0a:b5:87:27:67:6e:51:be:1e:25:5c:
21:c9:2c:b5:b3:07:a3:b8:e9:16:53:14:c7:ce:23:c5:62:7f:
24:53:9d:2a:50:77:64:fb:66:ae:25:f7:f9:32:d7:84:30:33:
5a:15:d5:84:39:cb:af:56:7a:60:9a:11:b0:9d:a4:b0:c7:94:
f8:26:b3:eb:17:1c:1f:88:68:56:e1:31:c2:a2:c7:3c:85:9f:
cc:7f:e3:9f:dd:57:dd:c6:fa:99:09:ab:1d:f6:1d:db:76:e1:
ce:08:52:11:b9:06:ae:75:16:03:bd:b0:bf:4c:10:40:83:85:
c5:0a:fa:02:98:f3:06:cf:1d:f6:44:7e:35:0a:b6:09:c8:b5:
29:c2:3e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 19:24:49 2025 by rpki-client