Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
File: 1QBRYT08xrPrgdW7QArg1OJBLIA.mft (raw, json)
Hash identifier: ilgOiRGAT0wyBlmnhbnvZfV9R6XmsnPoUTcdFF8NTyc=
Subject key identifier: 85:E7:2F:E4:18:5B:51:47:E6:6A:52:1F:BF:1C:00:D8:0D:56:12:F4
Authority key identifier: D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80
Certificate issuer: /CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80
Certificate serial: 0197B6A17030CCBF8E26E018D9BC99E80295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
Manifest number: 09C2
Signing time: Sat 28 Jun 2025 13:02:02 +0000
Manifest this update: Sat 28 Jun 2025 13:02:02 +0000
Manifest next update: Sun 29 Jun 2025 13:02:02 +0000
Files and hashes: 1: 1QBRYT08xrPrgdW7QArg1OJBLIA.crl (hash: Gu/o82CNQ5TPQZlf55Zl+wVb5CPGCAJt1pHDLz+g5Bg=)
2: qBfFLLbMjDiXpHlclpBQm55p-Q8.roa (hash: X7f4s7PxbdY1OwsEitEQVcC4bC8kVzy8m2zO1xjTkLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:70:30:cc:bf:8e:26:e0:18:d9:bc:99:e8:02:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80
Validity
Not Before: Jun 28 13:02:02 2025 GMT
Not After : Jun 29 13:02:02 2025 GMT
Subject: CN=85e72fe4185b5147e66a521fbf1c00d80d5612f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9f:ee:4c:f4:38:44:e8:35:cf:83:d8:60:c3:
12:62:d0:a8:a1:7b:f4:34:14:01:47:78:6f:a2:26:
fb:22:7c:24:70:c6:b0:b6:cd:ee:c4:10:10:08:19:
03:c9:ec:5d:42:96:f6:5a:13:76:47:2f:59:7c:99:
94:d2:88:4f:11:b4:09:7e:26:72:cd:72:46:3a:d5:
ee:11:d9:0c:cc:95:80:29:2a:69:9a:e6:38:4e:14:
b4:48:3c:a2:b2:c7:85:17:25:ac:b3:72:1d:b5:94:
3b:43:bd:7a:60:14:6d:b7:3c:aa:39:6c:df:30:61:
4e:65:50:31:44:aa:d1:82:89:49:46:88:da:28:e4:
1c:c2:13:14:70:b5:60:8e:d6:c7:e2:1c:3e:4d:1c:
eb:1f:42:a4:b2:bb:04:ed:14:5d:54:1e:8f:8c:a8:
13:41:b8:b1:87:aa:4f:ac:a8:2b:88:c9:e0:50:98:
50:c1:f0:74:a1:06:df:09:d3:b1:a8:f3:70:e6:f7:
a8:92:18:db:67:65:f9:3b:ae:3a:00:4b:53:66:e0:
5e:e7:55:a9:70:e4:1c:52:cd:8d:76:d5:32:9c:e4:
57:6d:39:18:11:e4:56:52:e1:e1:a1:5b:f8:31:59:
be:e0:39:5e:4e:71:2e:7f:9c:5f:1c:26:17:83:97:
39:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E7:2F:E4:18:5B:51:47:E6:6A:52:1F:BF:1C:00:D8:0D:56:12:F4
X509v3 Authority Key Identifier:
keyid:D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:67:d8:4c:ab:00:bc:90:1f:2b:be:38:91:9e:28:46:68:42:
a0:c4:52:e6:0b:29:7b:97:8e:9b:6a:25:7e:0f:5b:a9:cb:f0:
0a:73:37:fc:ab:61:d2:b0:8e:64:55:d8:ea:09:18:71:c5:75:
06:18:73:8b:e1:69:7e:31:9b:bf:ad:9b:7e:d2:c2:71:29:2c:
8f:64:73:da:11:a8:a0:8f:f7:a0:de:f4:db:3a:30:7c:59:03:
68:77:28:de:87:b3:83:b1:7b:9c:73:75:3b:da:99:da:0f:d4:
e8:07:78:f5:d2:2b:17:90:d0:6a:96:e4:48:bb:ca:80:80:c1:
93:c8:18:95:c7:8d:28:26:fd:72:dc:b8:a1:fc:f1:f2:7d:56:
0e:47:20:2e:60:a5:cb:6b:15:20:3c:d9:42:15:e8:2d:25:ba:
10:7f:ae:bd:92:0b:02:dc:e1:63:49:94:6d:99:82:39:7c:4a:
5c:84:ca:38:e2:2f:a1:37:b8:27:f5:3f:3b:50:a1:0d:05:6b:
be:a1:9d:60:5c:8f:d3:a6:30:92:3a:b3:1b:49:0d:53:cb:0c:
71:19:14:eb:75:5a:68:58:51:c1:5d:83:58:80:42:10:53:cf:
06:85:32:f3:35:06:88:1f:07:00:8d:58:f6:1a:c1:97:c1:14:
a5:94:33:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:03 2025 by rpki-client