Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
File: 01kqrEiVItXbGP1jkeA1qXeOo7E.mft (raw, json)
Hash identifier: +XRgneF+cCtOg5pk1PMzItZ0Id4RM8EVzH/VeZBF9+s=
Subject key identifier: 86:05:F0:AB:71:FE:E2:F3:2B:0D:42:6C:DF:38:47:8E:F6:EC:8C:8C
Authority key identifier: D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
Certificate issuer: /CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Certificate serial: 0197B632D554E1EDA29B99C33A5C6035CBF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
Manifest number: 12FA
Signing time: Sat 28 Jun 2025 11:01:14 +0000
Manifest this update: Sat 28 Jun 2025 11:01:14 +0000
Manifest next update: Sun 29 Jun 2025 11:01:14 +0000
Files and hashes: 1: 01kqrEiVItXbGP1jkeA1qXeOo7E.crl (hash: ecG0Ssi3PeGvE+Eb3v9l8buR9zKWnaZoM/lx4IH+Kng=)
2: Qhw2m_H5wgy1bU1_w7tg_sEon00.roa (hash: OI2KiRz3XriFCi8yNAm0vl8e78xAWnDgkIja/W4YfWk=)
3: ss1gihVVToicSpjIll9T_OSx9gU.roa (hash: FhBaaNRK7eLkeLLuE6sWEDb9sN1AQ9CWDHvMeiUHSs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:d5:54:e1:ed:a2:9b:99:c3:3a:5c:60:35:cb:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Validity
Not Before: Jun 28 11:01:14 2025 GMT
Not After : Jun 29 11:01:14 2025 GMT
Subject: CN=8605f0ab71fee2f32b0d426cdf38478ef6ec8c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:09:7f:d7:41:fd:5a:74:af:93:77:be:96:65:
59:af:93:66:ea:18:94:ad:81:f5:88:8a:a5:1f:e2:
b4:3a:89:9c:66:15:50:b6:d2:44:cd:9a:87:4d:0b:
ed:49:f9:61:b7:5f:10:84:27:bc:b4:40:4a:91:1a:
d4:5e:68:d1:9a:5d:b8:de:c3:ce:e0:88:9a:ae:29:
40:69:06:e5:bb:98:4e:37:ae:54:71:77:f8:ca:db:
51:26:d0:bf:7b:64:24:b7:fd:3a:7d:71:1d:4d:94:
c4:66:c0:6a:ae:29:db:d1:61:c4:3c:41:c7:5c:5f:
e4:bf:af:4d:11:5e:0d:c0:f0:61:ed:33:22:1e:e8:
4d:94:e5:6d:7f:7c:b0:40:30:79:9d:4e:fb:84:5a:
9c:90:c1:1c:63:15:bc:a5:76:df:4e:01:52:c1:b6:
c0:0b:7c:38:62:2e:09:6d:ba:4c:14:b1:77:1e:6c:
4d:48:87:02:1d:a9:cf:2f:16:7f:4d:1b:2e:8e:12:
97:7a:eb:f0:b3:b5:fb:b4:4e:5b:c9:b9:a9:91:e8:
a3:45:c5:6e:14:a4:d7:c0:a0:fc:70:08:d2:5c:13:
69:e5:9e:ae:6c:46:86:2e:27:a1:8c:78:fb:5d:fc:
ac:9a:f8:bc:aa:83:5a:9e:30:d6:ab:91:80:67:23:
22:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:05:F0:AB:71:FE:E2:F3:2B:0D:42:6C:DF:38:47:8E:F6:EC:8C:8C
X509v3 Authority Key Identifier:
keyid:D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:51:dc:8f:12:b9:dc:50:a4:50:2b:36:ee:d6:00:b4:28:c2:
57:97:56:79:3e:00:5d:1f:cc:a0:2a:6b:95:47:a3:77:30:f1:
2a:a2:56:65:cb:34:a5:0e:4e:22:c1:63:f4:36:c3:46:7d:92:
7a:be:56:51:3b:9e:f0:40:41:de:c8:ee:79:45:ad:f3:90:a5:
20:2e:6b:fa:b9:3b:ef:ff:bc:62:f9:fd:c9:5f:d1:0d:9d:ad:
00:e9:5c:f6:88:30:af:f2:65:a9:97:3e:dc:c0:b3:03:2c:1c:
c5:ba:5f:2b:cf:a5:5f:e0:f9:ac:f9:14:69:75:be:9c:e6:7d:
a6:aa:2d:41:9f:7b:4c:90:c6:43:20:74:71:49:46:b5:ff:28:
3d:54:6a:2f:4a:e8:76:68:43:ca:f9:04:31:a3:e5:00:14:e7:
ce:d2:c6:29:73:0a:c7:db:ea:70:d7:96:db:d9:9c:4f:02:2e:
1c:8f:5c:82:42:ac:e0:bb:af:02:b9:8a:79:8f:97:6e:d1:84:
62:cf:db:22:bf:c7:2d:fa:7d:e4:9f:84:7b:6e:df:c8:80:df:
d8:04:8b:37:e8:70:53:5a:7b:3b:4a:3c:98:2e:38:ae:c5:19:
2e:78:19:52:6c:bb:d8:12:0d:0a:01:1d:77:82:c1:de:e1:85:
ea:44:d1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:20 2025 by rpki-client