Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
File: 1QYosB6kR3GDy_-S23oMWBRRlaQ.mft (raw, json)
Hash identifier: 3WLR2UIP2B0bELsLNwg2YFG1uicndQAOSEag0Ighp/0=
Subject key identifier: 29:14:B9:4D:DF:21:79:6C:8C:8D:F6:39:F3:D8:07:D1:0C:8B:E2:7F
Authority key identifier: D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4
Certificate issuer: /CN=d50628b01ea4477183cbff92db7a0c58145195a4
Certificate serial: 019847E49249A9EE2FBC5A65B8D42B5DFAA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
Manifest number: 0AA6
Signing time: Sat 26 Jul 2025 18:00:18 +0000
Manifest this update: Sat 26 Jul 2025 18:00:18 +0000
Manifest next update: Sun 27 Jul 2025 18:00:18 +0000
Files and hashes: 1: 1QYosB6kR3GDy_-S23oMWBRRlaQ.crl (hash: 15+t42bmZYlETtzeQxgoCfBXeauwaCG8eEwVFplUol0=)
2: _pIpWC2mISR6dq-6G_9xF8Tberk.roa (hash: AVYabGQyAC/dt95JDDKLIXfkPwJWf47FBbAQTadMiJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:92:49:a9:ee:2f:bc:5a:65:b8:d4:2b:5d:fa:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50628b01ea4477183cbff92db7a0c58145195a4
Validity
Not Before: Jul 26 18:00:18 2025 GMT
Not After : Jul 27 18:00:18 2025 GMT
Subject: CN=2914b94ddf21796c8c8df639f3d807d10c8be27f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2e:e7:dd:41:8b:c2:82:ba:2f:6c:a3:b1:6c:
4e:a7:52:e5:c2:1b:43:fa:02:6e:5c:93:0b:dd:3e:
a2:b3:35:63:e2:dd:5b:bd:26:db:fa:6b:1e:29:44:
77:5c:bb:1e:43:50:0e:a3:44:fa:a9:67:1f:fb:d0:
42:ed:3d:73:e4:a0:dc:97:9b:9a:27:b2:4c:14:8c:
c0:ed:bb:84:ab:53:e9:4e:1c:c2:a3:af:b1:6f:2f:
d9:32:d0:0c:18:d7:88:48:18:8a:b2:e8:69:f8:5f:
9c:1d:58:36:db:eb:ed:fd:9d:90:e1:01:1a:27:f6:
c2:c8:8d:86:dd:aa:11:f2:61:ea:13:8e:94:45:8d:
be:bc:a5:1f:38:80:86:a0:a6:b5:30:46:46:fc:27:
53:bd:14:7a:68:7a:aa:86:13:a3:f2:e6:76:4e:86:
54:79:33:79:b9:cb:d3:d0:41:4e:a2:69:ad:05:55:
9d:29:57:ab:56:95:b9:cd:98:36:22:39:6d:fe:bf:
35:c0:2a:c5:5d:ed:27:46:25:2f:b7:c9:dc:45:be:
0e:3f:23:94:47:ce:21:71:27:93:61:3c:5b:bb:d8:
4f:84:c6:ca:02:49:cb:c0:97:1a:a4:6e:36:36:76:
aa:b3:91:6c:d6:ca:da:a3:1a:eb:04:1c:0d:68:3f:
17:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:14:B9:4D:DF:21:79:6C:8C:8D:F6:39:F3:D8:07:D1:0C:8B:E2:7F
X509v3 Authority Key Identifier:
keyid:D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:55:be:18:f4:94:ee:af:69:16:55:b9:10:3b:d7:65:8c:3e:
e7:88:a9:36:27:5f:f6:30:0a:2e:1f:65:2a:17:87:73:9b:64:
e5:86:c7:d2:32:35:e9:1e:0a:0d:d6:a4:38:b0:35:26:24:ff:
67:f7:59:5c:04:2c:e5:5f:2b:e6:b3:7e:81:18:e2:c5:ef:72:
36:98:68:d5:c1:1b:d8:07:0e:96:1e:6c:17:0b:c3:97:00:39:
ba:62:d6:6b:0a:a7:5b:7e:0d:ac:35:33:87:82:62:09:08:f3:
c3:d9:fd:55:5b:2e:e9:ed:2c:01:8f:3f:1c:3f:96:bb:47:63:
fc:e9:60:ca:14:41:a8:c0:72:db:e9:2a:09:12:c5:cc:03:e6:
99:f5:8d:31:26:06:6b:3a:25:84:4f:df:9e:de:d5:46:ba:26:
2b:58:13:67:72:30:db:7b:11:3a:b8:96:6a:e3:a1:9f:cc:6f:
98:9b:4b:92:8a:ac:dd:e1:3c:99:ab:c5:5e:3c:18:82:36:c4:
48:69:73:c6:72:c8:43:ad:97:ef:70:80:86:ac:e6:ab:e1:c1:
89:e7:52:34:c1:df:96:f2:d9:0c:76:07:86:89:e1:f4:2f:22:
4a:8d:37:61:73:c0:96:42:a2:58:e8:65:d3:42:2f:0d:35:65:
9a:59:fe:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:29:34 2025 by rpki-client