Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
File: 0Q1bMLRse5ey28RYnOo2Iq11YVY.mft (raw, json)
Hash identifier: LKrsA0lhdlTunPhKtK65zZNTHS+Akelx/sMA7FmlfoM=
Subject key identifier: 59:8E:24:C7:A3:38:E9:49:29:12:1E:62:A2:D8:08:B9:38:52:71:C9
Authority key identifier: D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
Certificate issuer: /CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Certificate serial: 0197B6A22E33F2EEB7A57229C4EFC3DFC554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:02:51 +0000
Manifest this update: Sat 28 Jun 2025 13:02:51 +0000
Manifest next update: Sun 29 Jun 2025 13:02:51 +0000
Files and hashes: 1: 0Q1bMLRse5ey28RYnOo2Iq11YVY.crl (hash: l5WrhR+Zm01228YWgXKgctZa2iUStB5dhZEcUITIk7s=)
2: U_YkWvIbAgSV60H8mUEYqY805XM.roa (hash: rIv2yHmGWREBYz1rPgWWMboLSc3Q207kM2zjs8JlUoo=)
3: muAVUu1aPnEHmAc-r1xMJMX_xwE.roa (hash: t/IG40S9IeJr1JmuDkCemhTExv33uEsQ8ntTYx4HhXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:2e:33:f2:ee:b7:a5:72:29:c4:ef:c3:df:c5:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Validity
Not Before: Jun 28 13:02:51 2025 GMT
Not After : Jun 29 13:02:51 2025 GMT
Subject: CN=598e24c7a338e94929121e62a2d808b9385271c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7d:c6:fa:3e:9a:42:76:2a:11:c2:ec:de:cf:
cd:49:eb:b5:8c:cb:60:fd:57:35:ea:4a:8f:f8:81:
1a:94:a1:86:85:09:0c:6f:c3:3d:22:de:3b:3a:ff:
8a:31:1d:12:dc:21:db:ce:1d:69:9a:bb:1d:85:3f:
3a:8a:40:1d:cd:d8:f1:eb:4e:2c:04:d0:ab:56:0b:
74:3f:6d:93:e7:66:40:ce:6b:f1:3a:95:0a:62:1a:
4c:19:71:48:ab:72:68:37:74:70:ef:d6:2e:13:ce:
77:fa:d5:17:36:54:e9:78:70:ce:6f:ae:02:6e:b5:
47:53:8f:a7:38:2b:30:28:bf:9b:56:60:01:27:25:
65:aa:9a:81:06:4c:fc:3c:53:2f:a6:f0:ad:a3:12:
aa:04:e1:29:db:3f:8d:90:cd:ce:7e:35:56:95:b8:
5b:36:85:42:1b:e3:5a:61:a1:47:dd:7a:a9:86:5c:
f5:67:66:bd:22:74:8e:6b:61:a4:91:ef:9c:ef:aa:
f3:d6:ae:16:9f:c8:a0:cf:98:3c:ad:01:87:63:70:
b2:72:2b:e2:3c:95:2c:56:8f:82:d9:2a:a4:b2:20:
9d:dd:ae:a2:be:14:4a:20:88:0d:bc:e7:c6:15:00:
0a:09:c8:21:13:74:34:f1:1b:dc:28:97:18:dd:4f:
b5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8E:24:C7:A3:38:E9:49:29:12:1E:62:A2:D8:08:B9:38:52:71:C9
X509v3 Authority Key Identifier:
keyid:D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:94:80:01:e8:23:17:52:60:dd:77:4a:d4:72:7a:ea:90:12:
cd:4b:d8:02:57:0d:63:b0:70:5d:a2:c1:d8:22:71:06:15:4d:
ca:f9:c4:8d:63:63:95:52:f5:fe:14:db:9d:a3:ce:1c:c6:71:
09:9e:fa:fe:38:d7:04:99:81:b7:66:83:d8:d2:21:34:11:81:
c7:c4:45:96:3d:2a:3d:f7:52:2e:0e:61:e4:7c:3e:34:27:f8:
af:41:e3:6b:02:a0:43:a8:3f:02:36:a7:09:23:24:57:42:ac:
56:1e:77:f1:8c:e5:90:12:86:c3:a9:f2:80:1f:39:15:bc:4e:
5c:2f:2e:0f:64:95:02:94:e0:de:7f:1f:30:30:dd:69:97:60:
5c:3f:d1:7a:d9:2d:bf:db:41:6f:5b:3a:62:8e:59:ba:94:a8:
26:2f:56:30:1a:11:56:16:a2:fb:33:b2:7c:90:34:e5:31:a9:
65:77:1b:8b:64:55:f3:38:2e:6f:c5:9e:c2:d1:ee:72:08:01:
b9:3a:fb:d1:03:79:03:e0:67:86:18:45:f8:e4:f9:a1:eb:f4:
25:6f:db:f8:9f:38:2a:25:16:6d:c5:2d:8e:a4:cd:d5:e2:74:
27:d6:b6:11:61:61:b8:e5:20:e5:4b:24:11:12:fd:c4:cf:fc:
d1:4b:e1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:33 2025 by rpki-client