Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
File: 1QibzgjFXapXtPOjyQcPs5GFPM8.mft (raw, json)
Hash identifier: gen6+Vag025tbe1ALHU6KyL7ZhX3jjA9Ug8PGg0x58Q=
Subject key identifier: F3:DE:14:D3:33:79:84:4E:85:83:2F:5F:FF:ED:E4:33:45:6D:1C:A0
Authority key identifier: D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF
Certificate issuer: /CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf
Certificate serial: 0198D58341BC0701AB3142C2C9386654EA10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
Manifest number: 0B1E
Signing time: Sat 23 Aug 2025 06:00:05 +0000
Manifest this update: Sat 23 Aug 2025 06:00:05 +0000
Manifest next update: Sun 24 Aug 2025 06:00:05 +0000
Files and hashes: 1: 1QibzgjFXapXtPOjyQcPs5GFPM8.crl (hash: 9Y4jpxsTDMh0GOgN4k7ZNn/zMA7XJnNRuXStJONZ3Sc=)
2: Vf8IRTOjd5EHRik_XU5SL231JR0.roa (hash: pdMIDPOwO8DUN6tctG8DJMO1R37Vl0PhbVyMv6IZEJE=)
3: x75CgHaNcNlIrskWea67UxRrM1c.roa (hash: xJt3cVolGlaYguNEQZsOwCLANVkSIZwIfqNsviXM16Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:41:bc:07:01:ab:31:42:c2:c9:38:66:54:ea:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf
Validity
Not Before: Aug 23 06:00:05 2025 GMT
Not After : Aug 24 06:00:05 2025 GMT
Subject: CN=f3de14d33379844e85832f5fffede433456d1ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ac:5f:09:33:69:20:bf:8b:2d:f7:56:a9:62:
3c:73:c0:a4:bc:39:a1:a6:fd:d8:4f:41:21:06:ad:
dd:81:64:35:db:a2:9b:27:cf:76:ab:90:a7:d2:62:
a3:da:bd:f5:32:ef:82:07:d3:89:a2:4a:1d:64:71:
1d:e1:b2:f1:19:85:c0:2c:20:66:8e:8e:f1:2c:aa:
46:03:52:79:0e:34:ea:9d:b7:da:b9:db:50:a8:99:
23:4f:4a:dc:17:ec:00:93:4f:9b:47:e8:03:40:10:
54:22:9f:4b:24:c0:97:6f:9d:4a:11:36:81:e2:91:
a8:fb:53:8f:66:04:be:ef:88:02:b7:2a:0c:5c:c0:
c1:dc:d8:91:eb:df:6e:ae:7a:96:eb:15:b5:8f:d4:
43:54:2e:e4:e1:fa:a7:d0:c4:cd:2b:1a:45:d9:51:
52:d0:8c:29:1d:88:4c:61:5b:0e:6f:10:ab:8c:2f:
f9:64:4e:a2:95:f3:57:ab:ab:78:a1:25:e3:61:00:
b6:aa:04:ab:e1:26:b5:12:d6:f6:f9:44:9b:87:e6:
d9:50:e2:d5:2b:20:27:e0:43:b2:9b:4e:c7:6a:3c:
61:df:1e:55:f7:d9:03:ce:cc:7e:67:a5:1a:05:9a:
15:84:31:63:9a:0b:5e:d5:62:2d:4b:cb:50:55:1c:
9a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DE:14:D3:33:79:84:4E:85:83:2F:5F:FF:ED:E4:33:45:6D:1C:A0
X509v3 Authority Key Identifier:
keyid:D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:54:dc:f3:32:cc:53:11:57:29:a7:ee:a2:5f:59:c5:58:cb:
1e:ac:1b:ad:c0:6d:e9:10:25:08:81:a5:9c:46:37:94:0c:74:
db:e8:f6:d9:4f:da:24:11:6c:d6:e2:71:bc:31:64:64:86:3c:
2f:0d:ae:32:06:a8:ba:8c:1b:94:e2:f1:3d:0f:15:6d:53:37:
ad:14:36:bc:93:9b:08:b2:e8:a6:4c:a5:a5:7c:63:98:0c:45:
dd:0d:a1:95:7d:9e:c1:a3:b5:28:31:e3:49:b3:5f:9e:89:66:
cc:8d:0d:d5:3e:c8:d2:cb:f4:7e:a2:aa:93:29:a0:3c:a1:48:
b1:ab:0f:05:55:8e:eb:99:2e:78:b1:6a:8d:41:91:16:05:ce:
a3:42:01:2c:41:82:ab:b4:f0:22:65:05:5a:ea:bb:80:6e:e3:
48:9c:c2:e9:ff:37:5c:1d:7a:b9:20:ca:d9:14:73:35:82:cb:
42:48:a6:a0:bc:58:62:9c:6f:27:83:aa:4e:48:54:d6:08:73:
e3:28:17:2a:1c:15:b6:c3:13:43:99:aa:57:99:7f:35:11:3a:
78:ba:85:44:00:30:89:83:af:0e:f1:b2:de:f5:1c:b8:36:4d:
be:f5:0c:3f:53:0a:cf:8e:49:ba:76:6c:32:d1:f9:02:1f:5a:
f0:9c:82:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:47:50 2025 by rpki-client