Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
File: 1QibzgjFXapXtPOjyQcPs5GFPM8.mft (raw, json)
Hash identifier: u7EM0OFyvx4n1AdHkZaBQID48hNpvslmQ9FEE/AaxKg=
Subject key identifier: 22:59:C6:EE:30:12:A8:80:E7:49:30:51:D6:5B:96:95:FF:92:04:80
Authority key identifier: D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF
Certificate issuer: /CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf
Certificate serial: 0199FCFD5A9F40F655EB0DD2E7E32ACB7C13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
Manifest number: 0BB7
Signing time: Sun 19 Oct 2025 15:01:26 +0000
Manifest this update: Sun 19 Oct 2025 15:01:26 +0000
Manifest next update: Mon 20 Oct 2025 15:01:26 +0000
Files and hashes: 1: 1QibzgjFXapXtPOjyQcPs5GFPM8.crl (hash: eyNKsBYYbWHwvfCvqAil4LDLuelF7pjRTQkdI+ifrA0=)
2: Vf8IRTOjd5EHRik_XU5SL231JR0.roa (hash: pdMIDPOwO8DUN6tctG8DJMO1R37Vl0PhbVyMv6IZEJE=)
3: x75CgHaNcNlIrskWea67UxRrM1c.roa (hash: xJt3cVolGlaYguNEQZsOwCLANVkSIZwIfqNsviXM16Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:5a:9f:40:f6:55:eb:0d:d2:e7:e3:2a:cb:7c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf
Validity
Not Before: Oct 19 15:01:26 2025 GMT
Not After : Oct 20 15:01:26 2025 GMT
Subject: CN=2259c6ee3012a880e7493051d65b9695ff920480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:34:53:ed:56:ba:97:df:f8:c9:29:56:a9:05:
f8:03:e5:78:7a:41:39:27:a0:df:8a:76:14:50:c8:
d4:5a:63:32:fa:4c:59:9e:bf:33:40:24:f8:de:aa:
78:21:2b:8b:cb:e1:d8:39:68:d7:bf:e3:56:37:cd:
e9:64:7e:3c:fd:f5:b4:8c:76:77:de:4a:87:0c:63:
c3:1e:17:16:ae:b9:d6:46:5b:af:d7:80:34:4b:2c:
f5:6e:65:07:3e:c8:b0:63:65:c2:1d:ad:96:c3:87:
ed:7a:53:97:27:86:ac:e9:58:60:28:a3:fb:c2:7f:
92:2f:29:9d:dc:2d:42:52:fc:65:94:e3:b2:60:5d:
04:d6:fc:15:43:bc:23:92:03:c8:75:df:4b:e7:2a:
93:5f:26:4d:de:3f:2f:f5:96:52:10:89:f4:3b:25:
0b:d7:0b:67:ba:24:8e:59:98:da:05:39:ac:df:cf:
6a:5b:be:06:65:dd:b0:c1:79:bf:db:bd:f4:61:f3:
6c:34:89:76:a5:83:6c:c7:5c:1f:a7:83:69:5f:91:
86:cc:0b:77:64:e3:3c:b4:91:ea:0e:50:3a:74:7d:
a3:cd:b0:2d:6e:3b:b7:79:38:3b:7e:21:81:63:80:
b8:80:e2:99:87:8f:44:42:f0:33:95:40:e8:19:48:
98:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:59:C6:EE:30:12:A8:80:E7:49:30:51:D6:5B:96:95:FF:92:04:80
X509v3 Authority Key Identifier:
keyid:D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c3:7b:8b:b7:c7:04:aa:9a:00:d8:6b:6d:0a:1b:1c:8c:5a:
b6:80:10:2e:5f:27:ea:dc:b8:06:e9:f1:7e:39:c8:a7:d5:fd:
e1:1d:f1:45:72:39:52:e6:42:81:1f:41:8d:60:79:51:d0:11:
1e:f5:aa:20:6a:d9:78:e6:22:54:a3:6f:5f:4b:aa:51:d4:43:
79:2f:75:d6:39:10:95:83:ae:a8:96:4b:bb:49:21:7c:28:94:
d2:40:4a:5d:a4:54:f0:5e:d4:90:02:8a:1e:0a:9b:19:05:52:
66:e1:0d:07:5f:ca:02:8e:bd:cd:62:69:24:91:4e:62:82:49:
52:59:4d:4b:78:f9:bb:11:86:95:65:66:71:1d:61:e5:07:fd:
7c:b7:e4:93:54:eb:79:41:9e:8b:fa:c2:eb:28:9d:91:59:96:
e1:ee:95:e7:bd:a3:96:ad:03:4b:98:d2:52:bc:8a:e9:ea:24:
d0:90:62:52:1f:a3:f9:eb:7a:ea:27:0d:3f:20:9d:d3:b1:6b:
6b:ce:d2:34:7c:91:39:e3:85:c2:18:bf:98:8b:20:a7:2b:75:
24:8e:b1:9a:af:8c:69:2c:c8:27:ad:07:6f:1f:8f:31:ea:35:
0b:7a:61:39:6c:e9:c3:8a:4a:fb:83:d9:2b:78:7f:11:6d:2d:
96:28:02:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:51:33 2025 by rpki-client