Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
File: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft (raw, json)
Hash identifier: UVL2QkTsytARwrPA5zz7rZBx0aSB4/NqTtJQDbB3XdM=
Subject key identifier: 0F:F5:ED:27:17:C2:95:68:A8:0B:7F:AF:DA:79:9A:A0:71:81:4B:60
Authority key identifier: FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
Certificate issuer: /CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Certificate serial: 0197B7EA83CE18F28EC468C1D6ADA4106C16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
Manifest number: 0A0E
Signing time: Sat 28 Jun 2025 19:01:28 +0000
Manifest this update: Sat 28 Jun 2025 19:01:28 +0000
Manifest next update: Sun 29 Jun 2025 19:01:28 +0000
Files and hashes: 1: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl (hash: 8SXyaMtS1ZqpD4BJT9QLC3mmBx2O0o9pWXGzWSxIpzc=)
2: pkEvxsg0lyUz8ua6CoCuzxPGvFc.roa (hash: EcykeL8rqJYAw+Ypkvc2gvotxsw/oc8iK0wUO0U4PaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:83:ce:18:f2:8e:c4:68:c1:d6:ad:a4:10:6c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Validity
Not Before: Jun 28 19:01:28 2025 GMT
Not After : Jun 29 19:01:28 2025 GMT
Subject: CN=0ff5ed2717c29568a80b7fafda799aa071814b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:2d:67:9c:97:c0:c3:dd:44:f1:28:14:1b:
92:28:ef:6f:ac:eb:d9:65:1f:ed:af:05:fd:83:40:
b4:41:42:61:38:cc:38:f3:99:e6:49:a6:cb:e0:68:
68:df:2e:f5:01:be:37:59:29:0d:4c:25:60:c4:54:
31:f8:b5:80:1c:c8:81:6c:09:f6:32:b8:75:76:32:
49:75:b8:13:3b:0d:0b:5c:b3:04:f0:c4:67:4a:60:
1b:7f:f6:71:29:d9:65:8f:6a:41:22:74:9c:e0:3c:
2a:58:d5:29:59:e6:de:dd:84:1c:73:2c:13:af:43:
1a:41:68:2f:d1:60:e1:14:8d:ca:44:b1:e8:6f:99:
5a:fb:be:1c:4e:74:cc:ae:a1:6b:cb:65:a1:05:db:
81:05:02:26:6e:b5:00:dd:07:28:2e:27:03:13:4d:
09:3e:e2:0d:d4:08:53:7f:e7:b4:b7:a6:f7:39:cc:
58:78:6c:d7:32:17:30:eb:9a:2b:59:d6:18:90:32:
80:46:1a:27:95:64:a4:47:ec:50:0e:59:75:e1:0b:
04:97:3c:f6:40:56:03:0f:7c:66:ff:83:c9:f0:56:
b6:4f:24:18:3c:c6:7f:62:bd:a9:c9:37:c2:f3:eb:
75:34:83:f1:4c:25:f9:c7:56:24:51:92:10:ef:b1:
8c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F5:ED:27:17:C2:95:68:A8:0B:7F:AF:DA:79:9A:A0:71:81:4B:60
X509v3 Authority Key Identifier:
keyid:FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:22:d3:bc:8b:2e:e7:1b:f1:7b:ad:4c:bd:72:93:17:40:8b:
26:22:36:42:04:80:48:a0:b9:21:e6:71:77:2a:d3:3f:73:47:
08:94:04:14:fe:00:24:e9:1a:25:58:dd:e8:a8:e9:f8:48:fb:
f7:11:9f:45:cd:4e:d2:15:8e:fb:74:59:96:42:51:4c:fc:ce:
5f:7a:2d:13:1b:d0:2b:6b:1f:7c:05:66:6c:56:56:73:d8:d9:
c0:14:48:9e:9d:0b:c3:8d:f4:10:00:da:67:de:52:45:29:f5:
35:3b:cc:95:6f:f7:9c:8b:8b:ee:42:70:00:f1:80:65:d6:fa:
fe:76:9b:2d:c1:7f:fa:51:a9:be:b1:18:04:58:2a:8d:3d:8f:
9c:58:72:37:5d:0d:ba:d6:cc:aa:8c:f6:8a:48:a8:a3:f7:21:
58:ea:c6:82:96:13:78:0f:2f:e7:97:ca:ca:a8:a9:27:0b:23:
b0:56:24:30:b6:5f:bd:0b:55:33:ce:47:0a:eb:c1:b7:97:9d:
f4:86:9d:6b:e1:bb:66:28:4f:81:d9:4f:0f:8b:f1:08:26:a8:
7b:7d:ff:62:2e:6e:fb:c7:a2:17:32:db:0a:ad:3f:96:37:23:
22:be:d7:0a:9c:b7:d9:6a:f9:7d:5c:af:29:90:69:8b:e9:40:
96:5e:c5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:25:45 2025 by rpki-client