Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
File: 1-0q-E5QqvkIPINwUn9xX30BFwUM.mft (raw, json)
Hash identifier: E+BXNl9B+LR4T2eD5wUh6xgUn8BF0T/SI+/2jHYVACM=
Subject key identifier: 0B:01:A1:97:83:34:17:39:42:E2:7E:FD:2B:EB:82:4C:DB:8C:77:49
Authority key identifier: FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43
Certificate issuer: /CN=fb4abe13942abe420f20dc149fdc57df4045c143
Certificate serial: 0199247B62F97A11A321A2B2CDD4E5AF3598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
Manifest number: 0A81
Signing time: Sun 07 Sep 2025 14:01:30 +0000
Manifest this update: Sun 07 Sep 2025 14:01:30 +0000
Manifest next update: Mon 08 Sep 2025 14:01:30 +0000
Files and hashes: 1: 1-0q-E5QqvkIPINwUn9xX30BFwUM.crl (hash: zZ7UyCO8vt3BnC6ZQHubYqPTE1FN5LwdSyFtP/Rw/mQ=)
2: Y_oNEiPJWS2zLwFvLL35UCRFKWA.roa (hash: q2i0iB2Ep81QHqaDB0CnMDZLGuww93ap90YlQXqqvaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:7b:62:f9:7a:11:a3:21:a2:b2:cd:d4:e5:af:35:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb4abe13942abe420f20dc149fdc57df4045c143
Validity
Not Before: Sep 7 14:01:30 2025 GMT
Not After : Sep 8 14:01:30 2025 GMT
Subject: CN=0b01a1978334173942e27efd2beb824cdb8c7749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ed:04:3c:07:73:40:01:87:48:b0:a7:ca:5a:
f3:8e:1f:65:d9:7c:bb:1d:43:5e:2c:cc:d1:c1:f1:
e6:1e:b6:a1:39:26:63:6e:71:c6:5c:ec:d1:5b:93:
34:56:b3:26:57:30:f9:66:d2:f3:86:90:c0:10:53:
eb:ae:ff:2f:5f:d6:04:43:58:60:90:57:eb:7a:44:
54:9c:96:91:d1:d9:01:74:db:a7:50:dd:cd:03:65:
e3:14:67:85:7e:e6:ef:6c:45:4a:12:90:3c:01:62:
14:92:98:99:e4:e6:de:44:4f:3f:f8:fd:5f:79:d2:
e5:38:97:f1:99:31:67:a2:e1:e9:e4:e6:11:d3:b0:
fb:15:ad:69:91:65:6d:51:b5:5d:1f:de:a7:9c:e5:
18:63:d7:b8:fa:71:30:45:f6:70:bb:e7:2e:08:04:
f1:da:91:b7:65:9a:9b:3b:47:3c:ab:e9:71:50:bd:
48:51:e2:94:91:81:ec:38:ec:0c:83:f2:aa:6d:9d:
16:8d:2d:0f:a3:d7:d8:da:d4:76:fb:32:34:7d:0f:
2c:76:a8:46:50:2c:e1:97:7e:85:6f:9e:d9:24:8a:
fb:65:fe:ae:07:82:1e:ba:ea:56:0b:02:60:66:ad:
0b:f9:dc:4a:d8:65:b8:9e:23:a3:17:77:25:dc:60:
20:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:01:A1:97:83:34:17:39:42:E2:7E:FD:2B:EB:82:4C:DB:8C:77:49
X509v3 Authority Key Identifier:
keyid:FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:3f:c5:25:49:f1:a9:16:ea:c3:f3:6a:64:31:8e:a7:f6:3d:
a1:7c:66:89:a9:5c:66:36:cc:2c:f0:1b:db:96:60:a0:e2:10:
8d:49:57:5f:84:f4:a5:e5:f6:3c:12:04:24:9c:a4:97:63:6d:
49:12:6b:ba:66:57:9d:75:38:79:37:17:f1:15:f3:84:ea:1f:
de:5c:b8:48:62:02:1c:a3:dd:93:35:7c:9a:a1:ba:f1:83:08:
69:2b:01:e0:5c:33:b9:2c:15:81:63:a1:b1:54:b2:34:68:9c:
a5:09:80:2a:19:cd:b7:b1:0c:41:81:19:b0:4b:68:9a:14:11:
f1:85:d3:5e:e6:99:ea:0e:9d:d3:7a:d1:fe:2d:50:cc:ad:67:
bf:ef:0b:23:5a:c7:41:03:6e:89:18:ad:0a:a5:89:7d:94:ee:
e7:20:bd:41:0c:c9:7c:68:7a:2a:f6:5a:09:29:27:1b:57:fa:
4f:bc:25:44:29:8d:bc:98:96:e3:ed:51:6b:1f:95:44:6d:5b:
17:ce:ce:e0:5d:f7:88:b1:1a:eb:46:ee:dd:63:be:c6:e6:40:
b0:bd:38:00:55:cc:b8:ff:4b:68:f9:66:25:ed:3e:00:94:89:
02:98:98:c5:7b:df:b1:c2:5c:ba:e2:f1:3a:9c:8e:85:02:e8:
fa:f5:f9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 15:24:24 2025 by rpki-client