Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
File: 1QibzgjFXapXtPOjyQcPs5GFPM8.mft (raw, json)
Hash identifier: IKrTeoEA07qUcATJs7AhB9HmLiwREMEEkyMOO9uAe+E=
Subject key identifier: 34:74:90:CF:4B:81:E1:7F:8F:5D:48:69:C6:98:C1:4E:36:8B:23:18
Authority key identifier: D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF
Certificate issuer: /CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf
Certificate serial: 0197BB901CFF951F5F3C1FEFEE43F8F9FE91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
Manifest number: 0A8C
Signing time: Sun 29 Jun 2025 12:01:13 +0000
Manifest this update: Sun 29 Jun 2025 12:01:13 +0000
Manifest next update: Mon 30 Jun 2025 12:01:13 +0000
Files and hashes: 1: 1QibzgjFXapXtPOjyQcPs5GFPM8.crl (hash: CwCWFeaFCfbgXuZW5eYzehLZ6oMXN+5Kx4teDK6y/6U=)
2: Vf8IRTOjd5EHRik_XU5SL231JR0.roa (hash: pdMIDPOwO8DUN6tctG8DJMO1R37Vl0PhbVyMv6IZEJE=)
3: x75CgHaNcNlIrskWea67UxRrM1c.roa (hash: xJt3cVolGlaYguNEQZsOwCLANVkSIZwIfqNsviXM16Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:90:1c:ff:95:1f:5f:3c:1f:ef:ee:43:f8:f9:fe:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf
Validity
Not Before: Jun 29 12:01:13 2025 GMT
Not After : Jun 30 12:01:13 2025 GMT
Subject: CN=347490cf4b81e17f8f5d4869c698c14e368b2318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d6:a4:60:99:2e:33:f3:70:37:5d:69:a9:a8:
cb:47:ce:11:c8:43:84:bd:51:9c:35:de:fb:53:81:
4e:76:c5:a0:ad:f1:64:db:d4:0d:06:8b:f7:fc:8b:
d6:fa:4b:41:0f:17:15:63:bf:ba:9e:af:d5:08:c7:
4b:36:c6:01:55:f1:2e:d8:fa:27:81:2f:72:34:e6:
de:e7:00:83:78:91:14:7b:16:23:d5:07:9e:e2:be:
6d:14:c4:8b:24:e0:43:61:15:8d:f0:94:8c:14:60:
2e:de:8b:e6:83:15:60:36:e0:d8:25:65:38:23:de:
ea:2d:81:95:b8:33:83:0f:de:34:e9:c7:96:b4:56:
89:65:56:08:68:08:50:7d:4b:8b:8f:20:c2:41:9c:
6e:d4:48:45:a5:91:0b:47:0c:6a:4e:c3:87:04:f1:
18:20:dc:9b:de:51:02:61:e5:13:1a:94:d9:10:57:
79:d4:c5:6d:53:fc:04:ab:d7:34:f3:c7:7c:ce:c7:
c6:41:65:b4:c7:eb:e1:ef:cb:a0:8c:88:33:be:a1:
0f:64:4a:9e:4c:76:8c:57:41:ef:38:f4:7c:54:f2:
ab:3a:ce:ed:00:36:50:a1:d9:ab:c3:e0:ae:91:b5:
25:f6:2a:98:9a:34:31:7e:ca:39:80:e7:6a:c7:09:
1f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:74:90:CF:4B:81:E1:7F:8F:5D:48:69:C6:98:C1:4E:36:8B:23:18
X509v3 Authority Key Identifier:
keyid:D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b2:b3:e6:9f:ff:d6:d8:a2:5b:09:92:d5:bf:4e:4d:13:25:
45:89:f3:e5:ad:74:b7:ee:37:7a:52:70:ab:d7:7a:b9:ac:62:
e1:2f:cc:12:d0:82:77:31:28:84:42:4f:fc:9c:0c:03:29:df:
2c:d5:2f:7d:55:01:27:5d:78:99:8b:35:1a:12:9d:4c:87:e4:
be:a8:e1:61:32:54:02:fb:e9:11:a6:71:39:56:fa:3a:e0:5a:
a9:ea:49:8a:ec:e5:63:a2:71:c7:c7:3b:48:71:3a:a2:5d:92:
33:91:b9:97:a6:58:46:c5:82:de:25:bf:d8:e1:77:c7:9d:a2:
c8:99:a5:e3:e1:18:99:ba:e5:eb:7c:78:7a:72:d6:5a:2f:cd:
61:6c:93:0f:2e:d1:4b:b2:49:a1:fc:e7:ad:87:b8:60:91:f4:
ba:4f:1c:94:0b:84:70:72:98:65:c1:7b:67:e1:7e:a6:17:4c:
d1:e3:7e:76:ce:ce:11:74:aa:4d:71:c5:60:5c:76:01:a8:7b:
83:30:2d:35:f1:7f:52:6c:31:1a:db:ef:bc:72:b6:a3:2f:1f:
e6:65:ad:a0:33:bb:9a:30:25:77:af:f0:81:5e:fe:99:04:9c:
20:3a:88:26:7d:d5:0f:93:c9:fc:cb:52:47:61:5e:4b:f2:d4:
b4:15:9c:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe7kBz/lR9fPB/v7kP4+f6RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MDg5YmNlMDhjNTVkYWE1N2I0ZjNhM2M5MDcwZmIzOTE4
NTNjY2YwHhcNMjUwNjI5MTIwMTEzWhcNMjUwNjMwMTIwMTEzWjAzMTEwLwYDVQQD
EygzNDc0OTBjZjRiODFlMTdmOGY1ZDQ4NjljNjk4YzE0ZTM2OGIyMzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNakYJkuM/NwN11pqajLR84RyEOE
vVGcNd77U4FOdsWgrfFk29QNBov3/IvW+ktBDxcVY7+6nq/VCMdLNsYBVfEu2Pon
gS9yNObe5wCDeJEUexYj1Qee4r5tFMSLJOBDYRWN8JSMFGAu3ovmgxVgNuDYJWU4
I97qLYGVuDODD9406ceWtFaJZVYIaAhQfUuLjyDCQZxu1EhFpZELRwxqTsOHBPEY
INyb3lECYeUTGpTZEFd51MVtU/wEq9c088d8zsfGQWW0x+vh78ugjIgzvqEPZEqe
THaMV0HvOPR8VPKrOs7tADZQodmrw+CukbUl9iqYmjQxfso5gOdqxwkfmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDR0kM9LgeF/j11IacaYwU42iyMYMB8GA1UdIwQY
MBaAFNUIm84IxV2qV7Tzo8kHD7ORhTzPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVFpYnpnakZYYXBYdFBPanlRY1BzNUdGUE04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8wMmZkZTctZDMyNi00M2RlLTg1MjAt
NmQ3MWZlMTNkNjFkLzEvMVFpYnpnakZYYXBYdFBPanlRY1BzNUdGUE04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8wMmZkZTctZDMyNi00M2RlLTg1MjAtNmQ3MWZlMTNkNjFk
LzEvMVFpYnpnakZYYXBYdFBPanlRY1BzNUdGUE04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbLKz5p//
1tiiWwmS1b9OTRMlRYnz5a10t+43elJwq9d6uaxi4S/MEtCCdzEohEJP/JwMAynf
LNUvfVUBJ114mYs1GhKdTIfkvqjhYTJUAvvpEaZxOVb6OuBaqepJiuzlY6Jxx8c7
SHE6ol2SM5G5l6ZYRsWC3iW/2OF3x52iyJml4+EYmbrl63x4enLWWi/NYWyTDy7R
S7JJofznrYe4YJH0uk8clAuEcHKYZcF7Z+F+phdM0eN+ds7OEXSqTXHFYFx2Aah7
gzAtNfF/UmwxGtvvvHK2oy8f5mWtoDO7mjAld6/wgV7+mQScIDqIJn3VD5PJ/MtS
R2FeS/LUtBWctA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 17:44:45 2025 by rpki-client