Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
File: 1QYosB6kR3GDy_-S23oMWBRRlaQ.mft (raw, json)
Hash identifier: LYA0tzsnVS/o6sBNUAe6f91hXZxc6i2WweoszZtN9Jk=
Subject key identifier: 23:5B:92:E6:12:D7:D5:5A:1E:1C:62:D8:8B:B5:13:FC:35:E9:5C:B5
Authority key identifier: D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4
Certificate issuer: /CN=d50628b01ea4477183cbff92db7a0c58145195a4
Certificate serial: 01974EC5E5CE36656F1203AF15EA9F92B442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
Manifest number: 0A25
Signing time: Sun 08 Jun 2025 09:01:21 +0000
Manifest this update: Sun 08 Jun 2025 09:01:21 +0000
Manifest next update: Mon 09 Jun 2025 09:01:21 +0000
Files and hashes: 1: 1QYosB6kR3GDy_-S23oMWBRRlaQ.crl (hash: CCUU+sEs54qPYHJpQxoAzVGE9Ii5nkFcA+ugdud9T1g=)
2: _pIpWC2mISR6dq-6G_9xF8Tberk.roa (hash: AVYabGQyAC/dt95JDDKLIXfkPwJWf47FBbAQTadMiJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:e5:ce:36:65:6f:12:03:af:15:ea:9f:92:b4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50628b01ea4477183cbff92db7a0c58145195a4
Validity
Not Before: Jun 8 09:01:21 2025 GMT
Not After : Jun 9 09:01:21 2025 GMT
Subject: CN=235b92e612d7d55a1e1c62d88bb513fc35e95cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0a:63:7c:20:17:44:ae:73:33:d4:02:6e:c0:
08:64:eb:6c:46:df:95:d2:76:fb:26:93:9f:b5:28:
b1:66:43:6f:5d:17:d6:e2:dd:6c:cc:e7:0e:b0:4a:
03:2c:13:5b:fe:78:7d:a0:b8:93:25:b5:5e:87:b1:
77:6f:5e:48:3a:aa:55:53:99:1a:94:55:d1:c8:eb:
e9:c2:d7:8d:5c:93:ec:d8:35:1b:f1:f3:96:e8:3d:
31:f2:21:8c:89:8b:56:c5:45:15:39:0d:fa:6b:fd:
e4:18:f7:db:68:71:f2:ce:13:d6:bf:29:18:a3:ac:
59:a1:b9:2d:aa:bc:85:26:13:3c:f6:7c:88:ca:9a:
e0:9d:95:42:6b:49:d6:b0:e9:e5:07:85:f5:ab:46:
52:eb:d3:5c:0b:51:51:d3:11:79:cf:d0:fa:69:7b:
5d:a3:08:ec:d2:2c:16:48:00:f7:73:0b:fc:fb:9d:
fb:e1:00:aa:90:dc:cb:d8:31:db:a9:ba:19:46:10:
e5:54:5f:1b:24:ab:aa:ed:1e:4a:b3:44:fb:74:3d:
b2:d7:28:e1:ba:a1:13:5e:04:5f:d6:27:02:51:70:
3d:dc:f5:cc:3b:81:31:0d:a3:26:a4:aa:cd:1e:04:
f5:07:68:27:ab:b1:21:15:c6:e8:81:e3:74:28:bf:
82:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5B:92:E6:12:D7:D5:5A:1E:1C:62:D8:8B:B5:13:FC:35:E9:5C:B5
X509v3 Authority Key Identifier:
keyid:D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:00:17:7d:86:e4:b2:54:65:c3:2d:16:67:71:83:51:a5:41:
0f:49:00:a0:ae:84:fb:f1:bd:e2:0c:cb:e9:94:55:e4:89:95:
32:55:b4:e5:72:bb:4f:7b:44:5d:7b:70:63:9b:d3:95:81:95:
c5:10:9b:d6:c2:39:d3:14:e7:8d:04:dc:60:9c:9f:c1:b6:69:
a0:0d:35:49:9c:45:ab:d9:98:55:be:1b:b7:1d:79:ac:74:29:
05:35:a2:47:37:4d:b5:34:2e:6a:cd:d0:98:f9:25:b0:a6:04:
a1:a2:e6:3c:5e:75:90:6f:cc:3b:d9:d5:66:59:2f:dd:05:6c:
ff:74:1e:1a:93:9b:93:74:8a:c2:fe:75:30:3d:c7:3f:b0:7a:
2a:8d:fd:f8:8f:91:5d:2d:5e:bd:1d:06:eb:a5:c5:ab:4d:12:
85:53:4b:52:43:e6:4b:a0:19:0a:87:36:e1:81:d9:f0:ca:64:
e1:c1:84:b6:a6:86:d1:b1:a9:7e:2f:bb:e0:c1:fb:52:03:47:
28:a3:e7:f0:f2:e1:5d:b2:46:1e:b1:dd:36:0f:2a:48:f2:07:
4c:a5:20:1f:08:9d:b6:b1:d7:d3:1b:5f:1b:ce:73:3d:60:bf:
2a:7f:66:07:cd:cb:74:7d:f0:59:fe:12:aa:e6:23:ae:f1:73:
fc:51:6d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:58:38 2025 by rpki-client