Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
File: 0QENo1diQjJM77LIHBM5psDjtAM.mft (raw, json)
Hash identifier: 7E31YU27HuUQwjeUeliSAjmF3tqDmf1ieN42JEVmqH0=
Subject key identifier: 0D:03:E4:B8:C8:79:88:DF:1D:A5:62:10:E9:98:F0:F8:A3:18:87:CB
Authority key identifier: D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03
Certificate issuer: /CN=d1010da3576242324cefb2c81c1339a6c0e3b403
Certificate serial: 019847E489875A87BE7CD8E1AE6B120E3DBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
Manifest number: 1604
Signing time: Sat 26 Jul 2025 18:00:16 +0000
Manifest this update: Sat 26 Jul 2025 18:00:16 +0000
Manifest next update: Sun 27 Jul 2025 18:00:16 +0000
Files and hashes: 1: 0QENo1diQjJM77LIHBM5psDjtAM.crl (hash: HaUCh1YiutlLgXgtSIcUKz9j+ho3EK/hBf7gVqMD3Dc=)
2: axw8eTRN4luwNfUppGZPJDLFRnk.roa (hash: 941/E7Pt0vnLLqpxlWNVKlBSpW2P0hox/ZuN05lIlOE=)
3: qL1excp8Az_0o7x1vHRMJ6uUBq8.roa (hash: etXW7FKK/vCX8HY/wRSJVfpHZyWVeKG9hX8M0M6D1Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:89:87:5a:87:be:7c:d8:e1:ae:6b:12:0e:3d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1010da3576242324cefb2c81c1339a6c0e3b403
Validity
Not Before: Jul 26 18:00:16 2025 GMT
Not After : Jul 27 18:00:16 2025 GMT
Subject: CN=0d03e4b8c87988df1da56210e998f0f8a31887cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c6:7d:8a:a6:a5:27:af:78:03:1f:82:53:48:
19:42:0f:ea:e0:9a:f7:c3:0c:ba:8c:b4:89:e6:92:
99:68:6f:60:4a:ee:10:c7:e3:7d:06:bb:41:76:5d:
b1:af:7c:75:33:f1:11:4a:81:45:e3:a2:8b:99:4b:
df:e9:9b:7b:53:82:2a:82:42:18:4e:f9:3d:62:b6:
f7:bd:9f:a8:b6:a2:df:6c:be:9c:f6:a3:26:c3:81:
eb:a6:36:af:24:26:41:49:1b:87:ed:3c:2f:db:9b:
a9:72:a5:be:13:65:2b:a0:c1:4f:3e:72:d1:81:ae:
85:77:94:e7:fa:fe:a6:46:b8:00:06:39:44:21:ea:
33:75:fb:1c:f6:a3:4c:87:a3:cf:1c:69:da:ae:29:
88:ea:76:59:91:68:81:5d:75:cd:d7:48:7a:67:16:
b4:be:b3:d6:42:68:56:a2:bd:90:01:b1:c4:9a:1e:
30:69:92:d1:25:2c:b6:cd:43:8a:8a:75:d4:d6:6e:
20:cc:65:b6:75:46:1a:c2:2d:77:20:0d:fb:40:73:
0f:f6:f9:ef:c4:02:bf:4e:4f:10:c2:20:48:dc:0d:
0a:03:94:ef:f2:71:52:2d:46:50:7d:85:c5:60:68:
25:45:f3:3b:96:71:85:6d:3b:3d:fd:9c:ba:f9:d5:
c2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:03:E4:B8:C8:79:88:DF:1D:A5:62:10:E9:98:F0:F8:A3:18:87:CB
X509v3 Authority Key Identifier:
keyid:D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:9a:e6:bf:89:a3:1e:f4:8d:0e:ac:86:88:67:d8:e0:78:4c:
bf:c2:8a:11:70:e9:21:d5:1e:ae:15:c7:a5:0a:9b:ec:05:8f:
7d:15:79:fb:88:15:13:0b:d4:36:d4:f9:91:85:c3:5f:1c:b3:
91:1d:db:05:a1:15:0c:04:7d:c7:90:e5:30:8f:19:d4:ee:43:
99:3d:71:12:7b:a8:41:56:7a:b9:7e:87:1c:4d:8b:6d:a1:1b:
7b:7a:7e:33:d9:3c:ac:ab:6d:4a:d9:c8:41:79:49:c3:ea:37:
8d:c8:55:25:60:97:87:bd:4d:e3:5a:6c:bf:b2:73:dc:e1:ed:
f3:bb:90:79:20:d5:b9:00:f7:89:3d:cd:be:53:be:eb:0b:09:
55:f6:41:d2:c7:9d:5f:d9:18:ca:24:81:df:f2:7f:86:9b:44:
d9:de:90:d9:20:9e:c2:71:6d:45:0f:16:ee:54:b2:5a:5d:fc:
a4:5a:7c:cc:97:13:17:41:a8:05:21:88:05:97:5d:6c:a1:a9:
0f:07:c1:df:79:7d:37:16:9a:79:24:d4:ee:2e:c8:4a:c9:3c:
b2:9b:19:8a:12:58:c4:f0:33:eb:0c:ba:2a:2a:d1:05:cb:ea:
26:e0:a0:24:66:dc:e8:1b:2d:4d:2f:4f:54:9f:94:72:f0:17:
61:a5:da:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:35:13 2025 by rpki-client