Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
File: 1QTmQeVaSK7gFB4sDSYicQLKptQ.mft (raw, json)
Hash identifier: ATLYypPVdG/bEdW66RdYZEW69S6RO/k9TuO7QCnRN10=
Subject key identifier: E1:8B:EC:42:E1:E9:28:7C:FF:0E:C4:DB:1F:54:5C:8C:16:B1:B5:C0
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial: 0198D4E05EF6E1B310C924F60A7068E348A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
Manifest number: 0FFB
Signing time: Sat 23 Aug 2025 03:02:10 +0000
Manifest this update: Sat 23 Aug 2025 03:02:10 +0000
Manifest next update: Sun 24 Aug 2025 03:02:10 +0000
Files and hashes: 1: 1QTmQeVaSK7gFB4sDSYicQLKptQ.crl (hash: bUXqAZ40r6sPq6kwnMsRGolV4YNFYXP/CRd7h7EtOdI=)
2: 8394MOfnLh_yAjC5oBzFaMKHm6g.roa (hash: LERfhqf0k5zIruV7b50StKNQsMWe2Ikf9jCbw9DjSV0=)
3: EeJuZ6ZuYMeP-N4AAq72eBlOcpM.roa (hash: oERKMEQ/M129kNgVvoyFhR9aTD1YFXrhdgiUJ9nGJ/4=)
4: FAqlGSimYu0iYfDKBVjHX-VLzKc.roa (hash: WfUufO4W+prwwNDD5ADTi0DPEPfB9t599hV9voFifsQ=)
5: Hl87tUhseJrx8ua_eZqEp-JXnL8.roa (hash: jm0/ddSHPme/VSGWBnMHo4jZkNs2MFEBOqNEBiv6awA=)
6: mS4C21ztnhJ1CQEhvl6HMt_DrKI.roa (hash: +AZpnsUJfoswiZ8L8H5vFWzIYnjuMk5tWnCTTVqTzgU=)
7: wPc7v-r8HN2WgTXXGZ1otoniuZk.roa (hash: 25D1eRRGlzWdsvEgZ+vInaKAYQi119NABCdy4hawamc=)
8: zqQPqsNghrHDurnrcYBnEoZLmxo.roa (hash: X61i/t72QEVUDPoVAXxvJ+YmKuAemlBmWuMndAD4GQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:5e:f6:e1:b3:10:c9:24:f6:0a:70:68:e3:48:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Validity
Not Before: Aug 23 03:02:10 2025 GMT
Not After : Aug 24 03:02:10 2025 GMT
Subject: CN=e18bec42e1e9287cff0ec4db1f545c8c16b1b5c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dd:6d:c5:bf:bd:9a:35:c8:52:03:3d:df:59:
bb:2f:81:b5:c3:b0:b4:3a:5b:4f:f0:b3:44:71:72:
34:84:b2:5a:9e:5f:03:7e:1c:1b:1c:ff:8e:49:f1:
40:85:0c:05:a7:12:27:90:7e:23:09:84:8b:7b:23:
be:ac:33:8d:34:2b:6a:39:4b:15:a3:5f:89:a2:c8:
1b:0f:78:62:9e:10:9e:56:38:ed:a4:69:86:fb:5e:
32:17:07:2e:96:e6:62:1c:46:19:f1:1f:01:06:11:
df:dd:9a:41:eb:b1:92:ac:11:5e:b0:a7:1a:e1:eb:
fa:7a:99:eb:82:f5:03:5d:17:a4:67:cc:21:0f:73:
01:47:68:b2:7e:60:91:d2:4a:96:31:ea:26:5a:7e:
7d:c0:7c:a7:8c:57:8f:47:88:5b:3f:dd:d1:ac:ae:
f9:6c:c3:61:83:9c:98:6e:bc:4d:4a:d2:08:fa:f8:
8f:72:38:fa:ae:28:23:0d:d8:e8:51:d8:c0:70:35:
c0:aa:74:af:6c:01:c2:5f:2c:07:92:29:b0:f2:93:
e4:78:ce:62:1d:ec:93:03:45:72:9f:dd:58:e3:54:
34:dc:6c:00:e0:8b:5c:9c:42:cb:00:96:29:ff:1c:
b9:60:66:aa:ef:00:ac:ac:4c:0a:5a:bc:61:ba:08:
a7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:8B:EC:42:E1:E9:28:7C:FF:0E:C4:DB:1F:54:5C:8C:16:B1:B5:C0
X509v3 Authority Key Identifier:
keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:27:96:45:59:73:82:0d:c7:6b:87:9d:61:da:9f:49:23:f8:
6f:c3:48:7e:f1:bf:07:91:6b:14:df:a1:40:1f:90:dd:a6:bc:
0e:c5:b8:37:78:62:b0:c8:9d:9d:9d:85:ef:dd:f3:5b:d0:8e:
e1:22:5f:27:3a:c3:07:6c:1d:44:1d:ce:ca:9c:a8:8c:21:8a:
e7:1a:59:c9:96:f3:c1:8d:14:44:f7:1b:ce:65:9b:f5:13:b2:
8a:f0:7c:8a:cc:ec:ad:aa:80:46:17:88:05:7d:5e:13:62:91:
b1:7d:06:9d:88:d5:50:de:22:56:cf:27:7b:50:bf:1f:0f:a1:
32:85:fa:8a:1d:d5:b7:d5:61:0d:a2:95:f8:da:a0:78:21:62:
86:75:21:a4:69:a7:d7:11:70:76:b3:0e:d7:62:cf:9c:9b:05:
af:e0:4b:dd:23:09:47:48:aa:48:dc:2a:6b:4f:fd:9b:c0:57:
06:50:dd:42:33:75:ea:4c:87:75:9d:14:ac:c5:24:0d:a6:44:
f2:32:d9:b5:25:97:ed:b3:69:69:cf:32:53:aa:62:73:89:4b:
3f:4c:c5:bf:b0:32:ea:09:01:8a:ef:ae:dd:1d:1d:92:38:9b:
e8:0a:d5:20:57:c6:66:b3:65:8b:89:85:2b:f0:ae:06:ff:52:
36:84:66:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:39 2025 by rpki-client