Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
File: n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft (raw, json)
Hash identifier: Cr9fYRBNSG6dcx5cdttLA7CwZKJC/9O0C805IT0582I=
Subject key identifier: 1F:4A:AE:78:D2:6D:BA:D1:64:98:95:46:FD:3D:2D:5A:97:24:A3:BA
Authority key identifier: 9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87
Certificate issuer: /CN=9ff1503210fe06ed35490b0231dbdb5967e12987
Certificate serial: 0197B7B2E1ED15AB6A5A649A7EFA2AA126D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
Manifest number: 106E
Signing time: Sat 28 Jun 2025 18:00:43 +0000
Manifest this update: Sat 28 Jun 2025 18:00:43 +0000
Manifest next update: Sun 29 Jun 2025 18:00:43 +0000
Files and hashes: 1: 1-SvxvqtngGHpYm4Mb_K72J1J0SU.roa (hash: fltwqIioPSuzKLuXGtdMjJVRWOd9cnpy/Vmxbwnrchg=)
2: AgU0XBmsv6hrvw1_FhFtRPIvIVA.roa (hash: yuLOgd4MMg3W+BuujF35ssU+fj+q8gIALwBMEgUaqi0=)
3: HjZYRM1GY8NwIlqa0kEmRhdDg7o.roa (hash: k83Jec9pog7vuk6fuX8SfpctGFX9GXrAU6iLBU2zk9g=)
4: dWB5v_50s28dCnQL8B8bFn58q18.roa (hash: pyj99aGAlWW7KJ5ZJq2AB9ncbyLG79M0Bh7ShdPddh0=)
5: n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl (hash: +5eZ2jtZCkJdKUx9xynMDgfw+y8+R7Yfr1OE8NAYpyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:e1:ed:15:ab:6a:5a:64:9a:7e:fa:2a:a1:26:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff1503210fe06ed35490b0231dbdb5967e12987
Validity
Not Before: Jun 28 18:00:43 2025 GMT
Not After : Jun 29 18:00:43 2025 GMT
Subject: CN=1f4aae78d26dbad164989546fd3d2d5a9724a3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:26:38:51:be:de:bb:99:6d:e1:df:d6:93:4d:
d0:26:99:72:2c:48:73:65:cb:70:7e:92:1b:9e:db:
28:a1:3e:33:54:e7:fb:bd:4a:6a:5a:6f:32:6b:9b:
6d:86:17:f1:26:ac:e2:5e:c8:a0:51:95:90:c0:87:
63:9b:d9:18:bf:8e:4a:8a:b6:26:c8:14:c4:23:b6:
43:0e:59:06:a1:0d:61:0f:17:10:bd:f9:f0:4f:6a:
d8:6f:b4:ac:cf:31:9c:c6:ac:c2:5f:5c:ba:da:f2:
f3:2d:b5:0d:49:0c:93:d8:47:8e:4e:20:24:9e:99:
a5:71:72:fa:e0:87:09:b7:e6:ed:7d:0a:ed:71:cb:
96:b3:ee:f4:47:65:bd:3f:72:6d:03:0e:8e:38:0c:
5a:5f:80:c3:8d:a7:e9:8f:d3:6e:f0:c1:1c:08:7c:
0d:19:a2:2d:5c:ba:68:6e:37:dd:36:d3:b1:f3:eb:
4a:90:43:64:15:f2:03:e4:1d:75:a4:44:5e:5d:37:
ca:f7:ca:58:88:de:41:8c:d3:4f:c7:9e:3c:90:52:
59:b6:ca:12:4d:4c:b5:9a:cd:46:79:c3:ac:03:29:
db:01:24:c6:ee:9b:8d:1d:ae:fd:0c:ee:90:20:fa:
e7:3f:4c:37:76:cb:3b:69:70:67:52:e5:b5:db:26:
65:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4A:AE:78:D2:6D:BA:D1:64:98:95:46:FD:3D:2D:5A:97:24:A3:BA
X509v3 Authority Key Identifier:
keyid:9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:71:e7:04:95:83:5c:06:b9:86:8b:42:16:99:ad:7d:ad:b3:
08:48:ca:7e:f9:22:76:e0:4b:18:26:bb:6c:29:a9:2a:30:bf:
52:16:93:47:f3:3b:44:6d:df:e3:4f:2d:b0:23:75:81:3a:57:
94:3e:6d:97:db:79:55:cc:56:e3:1b:f6:81:87:e7:fe:67:6a:
ec:20:50:66:5f:11:bc:c5:72:22:11:d0:eb:12:2b:93:57:d1:
fe:1b:ca:85:f0:cd:5d:8b:94:b2:62:4b:4b:aa:7e:10:ca:50:
8e:9a:e7:86:4c:f3:fe:90:98:9f:cd:61:51:fc:06:35:ef:b6:
27:b6:d0:c8:ff:a6:1a:24:31:96:5b:a0:12:9e:f7:3c:50:4e:
48:51:6d:8f:75:6a:53:c4:c0:3a:10:8d:83:da:4b:2e:39:57:
74:5f:18:07:57:24:f0:8f:0b:72:46:85:ae:7e:d8:2d:b2:a4:
62:c2:84:2f:75:35:bc:b0:bb:b7:7a:9c:71:aa:48:a6:93:2e:
ed:c4:00:66:57:e2:55:8b:17:d5:3e:45:31:93:68:12:44:6a:
3c:eb:b9:74:b9:a3:62:cb:95:77:fe:fe:5b:c6:e8:3e:f4:23:
46:5d:ab:c0:09:eb:bd:b9:64:62:88:8b:15:74:16:83:76:b0:
a0:a0:d1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:35:36 2025 by rpki-client