Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
File: 0Q1bMLRse5ey28RYnOo2Iq11YVY.mft (raw, json)
Hash identifier: bWm7tQknDpPFSBBW7UukDTZMjQbxue9qbE07o7/S6mM=
Subject key identifier: D5:4D:FE:AA:0A:F6:AB:5A:69:4F:5F:9E:A4:41:B6:65:45:D6:10:0D
Authority key identifier: D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
Certificate issuer: /CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Certificate serial: 0197469EA075748E880D15B143E2BA67E47C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
Manifest number: 157A
Signing time: Fri 06 Jun 2025 19:01:30 +0000
Manifest this update: Fri 06 Jun 2025 19:01:30 +0000
Manifest next update: Sat 07 Jun 2025 19:01:30 +0000
Files and hashes: 1: 0Q1bMLRse5ey28RYnOo2Iq11YVY.crl (hash: QLZC9HgVthXCmaTdd4y6bw15DdgqN0lyD5PxA/G+JzQ=)
2: U_YkWvIbAgSV60H8mUEYqY805XM.roa (hash: rIv2yHmGWREBYz1rPgWWMboLSc3Q207kM2zjs8JlUoo=)
3: muAVUu1aPnEHmAc-r1xMJMX_xwE.roa (hash: t/IG40S9IeJr1JmuDkCemhTExv33uEsQ8ntTYx4HhXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:a0:75:74:8e:88:0d:15:b1:43:e2:ba:67:e4:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Validity
Not Before: Jun 6 19:01:30 2025 GMT
Not After : Jun 7 19:01:30 2025 GMT
Subject: CN=d54dfeaa0af6ab5a694f5f9ea441b66545d6100d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2f:9b:a3:94:81:c7:8c:3a:c1:ab:b7:0f:9d:
a0:4b:c2:85:b4:f4:62:31:98:2c:9e:a2:ea:25:68:
0d:15:6b:f6:60:5d:5a:14:2b:37:80:21:94:bc:98:
49:a3:ce:df:26:86:15:dc:5d:44:37:91:bd:37:fb:
51:94:36:d6:d1:bf:99:d9:fa:87:6a:b0:76:37:67:
5b:75:36:7c:cf:72:f2:52:b8:95:57:b3:ac:6e:7a:
59:84:6f:0a:f9:99:d8:88:a6:c2:49:4e:89:f8:e3:
5b:09:d5:4e:d8:0b:a8:ac:d3:fc:93:25:76:02:9a:
f0:4f:ee:6c:c1:d3:3a:ab:a5:ff:d8:d6:b3:8a:65:
ca:02:fd:3b:8c:17:32:3e:c5:e2:e6:53:a6:9c:a6:
4e:1e:6a:a5:91:e4:46:41:1d:05:b9:7b:f1:7b:ca:
c4:f9:31:1c:23:64:71:1c:4a:24:e0:34:62:ea:e5:
d4:e0:e1:7a:76:79:0d:27:50:41:9d:0b:d4:6d:4d:
5b:5d:cd:93:b1:d0:7c:5f:2c:60:fa:8c:0d:9b:26:
a7:69:11:d8:37:72:81:2c:04:ad:22:4d:9a:e1:db:
c9:31:ae:76:58:7e:f5:e2:a6:31:70:68:cb:7e:52:
f3:55:38:5d:80:ac:ff:ea:94:4b:0b:d5:43:a1:6d:
ef:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4D:FE:AA:0A:F6:AB:5A:69:4F:5F:9E:A4:41:B6:65:45:D6:10:0D
X509v3 Authority Key Identifier:
keyid:D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:43:81:81:18:28:76:47:b2:5f:63:fd:65:c3:f5:c8:b4:c3:
2b:a8:1a:c1:95:ed:fd:b2:11:dd:5b:57:6a:a3:f2:44:15:9a:
75:71:55:d0:57:8b:4e:55:ae:db:9d:fa:ff:26:0d:0b:43:dd:
fe:97:10:a9:d8:f6:e8:f6:eb:5a:39:3f:d7:ec:9a:1e:92:b9:
3e:12:5c:42:11:f3:2e:07:a9:4f:0f:12:3e:98:72:ea:37:e8:
97:e3:3e:fb:18:f7:83:e0:ca:6c:a8:19:bf:d0:d2:09:1c:1c:
95:f4:31:f5:ae:38:56:03:d9:1c:1d:dc:5b:b6:93:37:09:b7:
77:fc:23:ac:f8:50:7c:2c:51:3e:03:a1:52:1f:9d:0f:16:41:
03:93:2e:9e:bd:1b:a9:96:ab:c9:bb:e2:04:32:4a:46:c1:0e:
00:bd:ec:21:ec:b9:68:ac:9b:52:d7:9e:22:bb:cb:e1:ad:5e:
ca:9f:02:06:09:ee:de:30:fe:6e:f5:e8:0a:42:c6:3e:31:37:
aa:fd:04:a5:f6:9c:dc:2c:b6:ee:89:1b:59:88:8d:91:93:d5:
9c:eb:40:d1:db:c9:73:7a:56:c4:b0:4d:f7:b8:b1:3d:d8:c1:
19:e1:d1:16:a2:41:99:92:3c:8c:4d:44:12:cb:44:11:d8:01:
7e:5b:ab:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:11:56 2025 by rpki-client