Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
File: 1-q6U9bfurTpdhIMHiAmi7_ooOA.mft (raw, json)
Hash identifier: fCy4BjPImA9GjSUIQhleVykc5wHSC8aHpaue1SxjB9Q=
Subject key identifier: B6:33:24:8D:D3:E0:B2:4D:B3:06:B1:75:DE:6E:A6:A1:39:69:B6:48
Authority key identifier: D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0
Certificate issuer: /CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
Certificate serial: 0197B70EAC9F78083EC8300A5581E4182460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
Manifest number: 12F3
Signing time: Sat 28 Jun 2025 15:01:21 +0000
Manifest this update: Sat 28 Jun 2025 15:01:21 +0000
Manifest next update: Sun 29 Jun 2025 15:01:21 +0000
Files and hashes: 1: 1-NNWhK-5UZlX86GIvBS3F5KFXGM.roa (hash: ZnHYmG2JFMVQIt7lMjIb53DbqPPrkNie9D30hGqcWLQ=)
2: 1-q6U9bfurTpdhIMHiAmi7_ooOA.crl (hash: dZ+wHDgiTqCH4/KZM+AqeCbxodvK22NaGW+ClsrV6p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ac:9f:78:08:3e:c8:30:0a:55:81:e4:18:24:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
Validity
Not Before: Jun 28 15:01:21 2025 GMT
Not After : Jun 29 15:01:21 2025 GMT
Subject: CN=b633248dd3e0b24db306b175de6ea6a13969b648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4d:c0:9b:36:76:ae:8c:30:3e:75:7f:b0:06:
f2:07:fe:e4:b4:14:5d:20:73:f9:4b:3c:e4:ea:26:
f3:9b:df:36:06:2e:42:94:68:0f:02:a7:34:53:51:
79:f2:07:f9:82:45:45:30:65:cb:f0:5b:ad:ca:17:
c1:b3:8f:56:a3:b4:43:11:da:12:87:ec:0f:94:6c:
50:0d:ee:18:2e:a5:27:13:71:a0:cb:3a:c0:eb:a4:
68:c8:f0:da:03:3d:65:a0:be:77:f1:5b:c1:6d:be:
72:c3:f1:83:fe:0c:cb:69:a8:ac:f3:ff:aa:9d:a7:
e6:ab:e3:de:1d:b5:c9:bc:15:c7:53:51:72:22:50:
db:1e:9b:33:32:28:93:22:03:04:4f:cc:ca:b2:1a:
48:ba:32:37:d3:40:ed:85:67:89:75:15:cd:92:5a:
8d:f8:86:ef:78:6d:d4:34:7e:f7:e4:34:38:62:47:
5a:9f:e5:cd:18:4a:38:d3:62:af:31:eb:3a:aa:ac:
89:96:d3:84:c2:0d:89:aa:50:9e:49:73:75:db:a5:
93:be:37:4b:cc:34:3a:de:7a:6a:6e:61:3d:d8:f9:
f4:72:ea:0e:ec:d0:65:b5:d5:2f:b1:4c:1a:8d:cb:
a7:58:d1:90:b9:64:7c:0a:2c:0c:ff:eb:1b:3f:50:
ed:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:33:24:8D:D3:E0:B2:4D:B3:06:B1:75:DE:6E:A6:A1:39:69:B6:48
X509v3 Authority Key Identifier:
keyid:D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d7:c1:73:33:26:86:ac:a2:0c:96:30:a4:4b:ae:de:00:c2:
a1:be:a2:e1:ba:c2:e3:24:0e:d3:44:cf:e8:a3:03:e1:15:4c:
76:34:b7:f9:95:ac:fe:3c:05:12:a0:56:5f:c5:61:82:9b:eb:
4f:09:a0:26:19:10:85:c8:22:0b:4e:84:45:22:6d:91:b1:b0:
e1:09:3b:d3:10:52:31:fa:34:2c:b4:db:e3:1f:f4:4b:f0:3f:
9f:f6:d5:53:1d:fb:eb:85:89:f7:c4:55:cc:35:57:61:31:cd:
4c:d0:cb:94:0f:eb:23:16:83:dd:bc:ba:bd:69:9f:e4:c6:a3:
ff:d2:9d:6f:8a:bc:af:fe:18:b0:4a:7f:36:82:e3:e9:7f:f4:
97:9f:54:57:bb:ba:a5:ed:9d:ba:22:be:d6:67:b2:5a:3d:56:
a3:74:14:e2:c6:ce:b4:d8:62:6e:36:40:08:f5:ce:4c:7c:f1:
43:39:fd:95:68:2f:6c:53:cf:99:81:56:75:5e:93:54:07:58:
b3:ac:3a:a7:e8:cc:1c:51:81:30:c6:a7:30:35:ab:08:e4:f4:
c6:b7:9d:e6:65:44:e4:56:c0:de:c5:61:1e:80:17:76:e7:94:
fb:e8:ba:51:bc:54:31:c1:65:ca:00:27:44:20:9d:10:ce:b5:
06:bc:52:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:48:11 2025 by rpki-client