Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
File: 1-q6U9bfurTpdhIMHiAmi7_ooOA.mft (raw, json)
Hash identifier: /M99mlAexs3RLio5AMUfQCxQ+eCzZE/JNyBTq2lvQl8=
Subject key identifier: 11:D9:9A:1E:14:1E:B5:BB:DF:8D:94:77:ED:CA:D6:A3:1E:84:F9:BE
Authority key identifier: D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0
Certificate issuer: /CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
Certificate serial: 0198D6CE0606B535739E998333AEC97A986A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
Manifest number: 1388
Signing time: Sat 23 Aug 2025 12:01:22 +0000
Manifest this update: Sat 23 Aug 2025 12:01:22 +0000
Manifest next update: Sun 24 Aug 2025 12:01:22 +0000
Files and hashes: 1: 1-NNWhK-5UZlX86GIvBS3F5KFXGM.roa (hash: ZnHYmG2JFMVQIt7lMjIb53DbqPPrkNie9D30hGqcWLQ=)
2: 1-q6U9bfurTpdhIMHiAmi7_ooOA.crl (hash: UcH30mtwG8esw/pw1Alzp42ayqeQosa5J5H3oOpiJ0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:ce:06:06:b5:35:73:9e:99:83:33:ae:c9:7a:98:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
Validity
Not Before: Aug 23 12:01:22 2025 GMT
Not After : Aug 24 12:01:22 2025 GMT
Subject: CN=11d99a1e141eb5bbdf8d9477edcad6a31e84f9be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8a:c3:af:74:34:1d:60:67:ae:b8:f4:13:54:
ee:f3:41:7e:36:42:c6:1d:c2:28:01:ad:28:f0:c8:
48:85:3a:91:b0:3f:d0:c5:3d:4a:a1:0f:e0:c3:50:
c3:d0:a6:b6:2d:e2:9c:39:93:75:68:a1:77:1f:37:
bf:8d:93:cc:ac:b9:4e:07:94:ac:34:5d:81:18:3c:
c7:bb:00:58:84:e4:d9:9c:b7:8e:81:a6:4f:bc:17:
7e:3f:6e:dd:f8:7d:a4:73:5e:58:9b:da:7f:e8:29:
97:b5:b6:ac:f2:ca:c4:0d:82:76:67:29:47:79:5d:
b2:3c:57:14:b4:50:5e:ec:bb:85:3e:98:d6:fc:cd:
6b:5e:d6:25:1e:6a:63:f7:6d:1d:fa:28:64:05:cd:
88:00:e5:4c:9e:5b:aa:3d:b5:bb:e9:c7:a0:ab:bd:
b6:c1:de:99:50:d2:25:dc:00:9c:42:7f:ec:25:9c:
9b:0d:88:80:29:6b:68:3b:91:8a:1a:02:b3:86:1a:
9a:a5:bc:07:88:77:24:e9:a2:3b:f2:a1:e6:ca:9c:
bf:0c:4d:f6:1d:db:ba:03:a3:c0:08:65:18:d1:3e:
62:3d:b6:9c:09:13:c8:37:ea:34:fd:c8:f8:7a:72:
04:12:b8:f9:b9:01:35:dd:a4:b1:64:b8:f2:3c:51:
14:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D9:9A:1E:14:1E:B5:BB:DF:8D:94:77:ED:CA:D6:A3:1E:84:F9:BE
X509v3 Authority Key Identifier:
keyid:D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a9:61:c3:15:4a:44:3a:b6:d5:ac:31:16:ce:75:8e:15:ea:
c2:2b:13:5b:ad:c7:07:e6:c1:7b:ba:e1:ab:82:8c:2f:f7:32:
ad:96:60:85:70:3c:7c:b1:06:68:93:cd:71:45:c6:8c:7e:82:
9c:6c:d3:12:72:43:5d:b3:c2:83:37:ca:cf:17:2e:60:51:a8:
21:87:09:40:f5:be:a5:df:1d:5a:30:d9:85:b7:49:47:d7:35:
7a:64:33:96:8a:f2:38:9b:ae:d2:fb:56:a3:b3:14:f0:d4:a6:
00:2d:1a:da:3b:eb:b9:7b:bb:8e:5c:2b:bc:d4:0a:d0:5f:1d:
7b:0f:87:a0:9c:0d:c0:1a:90:2f:05:8a:38:c6:b7:ec:4b:2b:
60:14:64:ee:0f:95:59:60:38:c9:72:2d:83:9e:9a:69:7d:a1:
22:25:e2:da:b4:62:41:ac:70:cf:25:72:22:f8:48:86:18:8c:
d9:49:6c:e1:b0:81:90:91:1d:70:16:d2:d6:7c:c0:fb:ec:d3:
c0:29:14:5e:a4:e8:ad:4a:ff:d1:82:7f:c2:84:06:b3:e3:96:
d5:01:9a:0f:4d:36:2a:03:70:8e:45:59:5a:1e:1e:df:4e:8f:
6c:6d:e3:4e:a8:05:5c:c0:20:ba:04:0a:14:81:17:a8:36:2f:
62:ea:a0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:28:41 2025 by rpki-client