Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
File: 0Q1bMLRse5ey28RYnOo2Iq11YVY.mft (raw, json)
Hash identifier: TrzD+ECsPO1663dKQ/s8yDA5+VMVtftfNSgTkIXWiP0=
Subject key identifier: 9F:55:26:E4:03:55:31:F2:DA:E8:06:09:B4:9E:AA:82:DE:73:97:85
Authority key identifier: D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
Certificate issuer: /CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Certificate serial: 01984966ABDA38578B4CDC8C9A146665799A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 01:02:02 +0000
Manifest this update: Sun 27 Jul 2025 01:02:02 +0000
Manifest next update: Mon 28 Jul 2025 01:02:02 +0000
Files and hashes: 1: 0Q1bMLRse5ey28RYnOo2Iq11YVY.crl (hash: 70mnXGT/ZgD46ONRIKJ0qwTt/MGvhsXiwqg8rP0w9eQ=)
2: U_YkWvIbAgSV60H8mUEYqY805XM.roa (hash: rIv2yHmGWREBYz1rPgWWMboLSc3Q207kM2zjs8JlUoo=)
3: muAVUu1aPnEHmAc-r1xMJMX_xwE.roa (hash: t/IG40S9IeJr1JmuDkCemhTExv33uEsQ8ntTYx4HhXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:ab:da:38:57:8b:4c:dc:8c:9a:14:66:65:79:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Validity
Not Before: Jul 27 01:02:02 2025 GMT
Not After : Jul 28 01:02:02 2025 GMT
Subject: CN=9f5526e4035531f2dae80609b49eaa82de739785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b2:ce:55:52:a8:46:d6:2b:cd:dd:ea:0a:53:
e2:08:e1:15:9f:7c:b1:c2:86:91:09:7e:30:43:c9:
97:6c:00:a0:be:6b:db:50:41:a7:26:d1:01:fd:bf:
97:86:67:e5:a1:46:9b:52:c9:5d:78:91:27:c4:3d:
fc:02:6e:44:f9:62:b3:50:4e:b1:5c:10:18:c4:75:
e1:f0:09:83:fe:98:7d:05:c7:d8:ba:d0:c5:73:8e:
8d:50:9d:23:4f:43:c2:3f:cf:ed:0d:35:4c:c2:28:
3a:a6:bd:63:e9:bd:b8:64:4b:20:9e:88:40:d2:be:
8d:55:2a:ea:95:1a:2f:7c:24:0b:2a:26:da:12:b3:
1d:75:2e:33:07:70:ee:5d:d5:02:b8:ef:cb:82:dd:
f8:84:fd:bc:40:2d:ed:3f:28:69:c4:37:64:35:f0:
47:97:20:b4:0c:68:31:dd:82:74:2f:b2:a3:23:f5:
cc:b3:84:45:90:6a:96:36:c5:b5:8c:ba:4f:39:65:
39:80:4a:6d:b8:07:c4:cf:60:34:72:68:73:ce:ed:
1d:a6:47:3f:66:52:5e:1c:ed:9d:89:0a:a4:42:53:
03:2e:11:39:33:b3:68:74:96:a4:db:d5:fa:29:54:
8d:e2:68:29:a5:a2:e1:79:64:bf:4e:57:c0:f4:d3:
c6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:55:26:E4:03:55:31:F2:DA:E8:06:09:B4:9E:AA:82:DE:73:97:85
X509v3 Authority Key Identifier:
keyid:D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:98:f1:e8:39:1b:02:4c:58:7d:c8:ec:fd:82:e5:60:03:01:
25:b6:02:5a:84:ba:cc:c8:94:18:14:62:dc:3d:f3:b4:be:7b:
35:2e:a5:df:7a:29:eb:72:0c:3b:1a:3e:0a:b9:e3:4f:da:83:
ac:f8:44:7c:b2:26:6f:a1:74:88:3d:dc:f5:bb:d4:26:cb:c6:
6a:15:2f:ae:79:2b:c5:1d:b0:ec:32:ca:d9:b9:9a:cc:7c:4c:
9a:82:b5:38:b7:18:2a:93:24:b3:ec:fb:eb:47:0c:c6:20:4f:
69:04:dd:0d:1f:83:58:1d:5f:0d:27:e1:f6:d4:02:a4:94:92:
fc:38:50:42:73:25:81:39:0f:d4:27:35:8a:f0:68:77:e9:16:
e6:94:20:a8:17:b1:00:f2:c1:9e:98:a3:97:ef:b2:b3:8a:0f:
3e:67:0d:0c:99:de:2c:5c:3f:d4:2a:8f:88:b3:d7:7a:1e:fc:
71:55:47:9c:74:e3:06:c0:b6:4d:43:99:1e:26:53:d7:94:60:
83:df:6f:41:f9:56:79:cb:00:77:b2:22:d2:dd:bd:31:af:80:
c8:42:42:bb:da:64:a5:1d:f4:0b:f3:7d:4b:e2:a1:11:af:f1:
80:2d:82:d9:09:91:35:e7:d2:7c:54:e1:39:d8:a7:60:02:d5:
ff:1b:7f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:41:02 2025 by rpki-client