Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
File: 1qqJ97ciJ5wDKULc8khl9tctZQE.mft (raw, json)
Hash identifier: ORBWcqpGNi2wv4xmFuKwjsWyc63yFjaRIyE8ECwCXFo=
Subject key identifier: 1B:23:A5:D5:91:6D:33:7E:E6:73:F3:F5:CE:99:B5:F6:16:21:8E:27
Authority key identifier: D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01
Certificate issuer: /CN=d6aa89f7b722279c032942dcf24865f6d72d6501
Certificate serial: 0198D4E036D01836BA1C604CB4C18B970D8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
Manifest number: 113D
Signing time: Sat 23 Aug 2025 03:02:00 +0000
Manifest this update: Sat 23 Aug 2025 03:02:00 +0000
Manifest next update: Sun 24 Aug 2025 03:02:00 +0000
Files and hashes: 1: 1qqJ97ciJ5wDKULc8khl9tctZQE.crl (hash: xuKGswC9NpJ77BmWIz/W9N3rtxC3k4XXJR599j92+mo=)
2: AgasgsgRMARsZv6ZL1FMUAMH49o.roa (hash: rP0A/zCy7W2yRJEKVS59R2RHbWAgc1CTX30QoNq6GK4=)
3: kIQph00YRfR7VyoSJ5QKs9_47CM.roa (hash: T6/F9gO6dDf2HDaMUJjHPMQQkg1ian0JLCMBF3Ug9u4=)
4: qtgbnELTyW65aNCYZpJqV2m2-Jw.roa (hash: BZNYV9kq2qBJjfITSVC14VQZO/Cg3QnROE1UWyqLr8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:36:d0:18:36:ba:1c:60:4c:b4:c1:8b:97:0d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa89f7b722279c032942dcf24865f6d72d6501
Validity
Not Before: Aug 23 03:02:00 2025 GMT
Not After : Aug 24 03:02:00 2025 GMT
Subject: CN=1b23a5d5916d337ee673f3f5ce99b5f616218e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0b:11:7a:8f:1c:84:7c:fa:22:df:a1:c7:fe:
7a:71:4a:18:28:79:b9:44:ac:be:4b:cb:c8:a6:93:
12:47:b1:5a:0a:65:4d:84:fe:8f:43:ee:70:27:22:
18:76:32:d4:c8:c6:c7:a4:f3:97:d1:fd:a8:d8:00:
b0:98:05:1e:83:ad:33:b4:33:1e:4f:d4:88:37:b6:
44:99:ce:77:0d:22:77:13:d5:9d:b3:dc:79:98:ed:
cc:ea:fd:cf:ad:f5:dd:78:6c:17:b5:6f:b5:42:18:
5e:41:a9:3b:52:5b:5d:bf:09:7f:23:32:0d:c2:16:
5b:7c:a1:fa:46:ff:79:90:72:2a:79:52:1d:c0:35:
9b:41:1a:9b:ea:9c:d4:a7:f9:38:b5:0c:4d:8f:28:
bb:c9:de:9c:88:86:05:04:b0:69:8e:34:b7:dd:aa:
b3:bb:f6:5f:f7:74:61:65:2c:74:1d:99:5d:29:27:
9a:55:8a:ca:24:fd:4c:f5:3a:10:d2:4d:3d:ca:b5:
51:25:39:e3:f0:13:e9:dd:7e:07:90:cb:14:aa:b9:
fa:09:26:a1:c2:bd:34:e5:06:0b:4e:17:fc:b2:67:
86:81:92:fb:d3:c2:c5:92:e6:c6:57:ce:95:08:fc:
b2:10:d4:cd:a4:50:9e:82:bc:8e:f1:b8:48:cf:2b:
96:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:23:A5:D5:91:6D:33:7E:E6:73:F3:F5:CE:99:B5:F6:16:21:8E:27
X509v3 Authority Key Identifier:
keyid:D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b1:16:21:b1:5b:89:26:1f:74:03:8e:c0:10:51:04:ea:f2:
ff:43:bc:e6:b4:7e:da:6e:7d:fd:07:9f:6b:b3:eb:67:d9:8b:
6c:80:22:26:6f:de:8a:83:54:4e:52:97:c6:91:13:31:01:94:
e7:09:30:ab:6d:42:72:79:12:9c:bf:28:f7:e8:eb:21:e4:aa:
e7:fc:71:71:33:f9:da:ce:fd:20:af:0a:ca:79:0c:54:f3:a4:
68:f6:0c:d4:14:15:b1:bf:56:d3:66:0b:60:c7:3c:60:16:8e:
c6:c9:0a:f9:ac:66:6d:db:6f:e5:6a:84:57:fe:09:aa:2a:d3:
2d:c3:73:66:eb:89:6b:42:4c:72:6a:0e:66:f7:3e:ec:a2:5f:
1e:8a:c9:2a:a5:78:0d:d2:ce:21:de:73:81:06:8c:8a:eb:98:
11:2c:7c:74:b7:d6:3d:13:f2:9d:30:b0:e4:6f:b6:07:8a:a1:
0a:3c:52:ac:b1:72:56:7d:f6:31:2b:09:f3:de:bf:cd:fa:51:
19:5c:6f:fa:85:b1:bc:fd:24:3b:4d:5a:fd:09:53:02:32:01:
be:e3:80:2d:bc:43:13:3e:1f:26:21:ed:81:0f:3c:65:57:af:
a8:40:80:d3:32:46:d7:76:e9:13:e4:c6:28:a0:e7:eb:da:7c:
ac:ae:02:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:46 2025 by rpki-client