Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
File: 1qqJ97ciJ5wDKULc8khl9tctZQE.mft (raw, json)
Hash identifier: gEmrqzmzXbC+Q4lQ2lc9qAZ1Rp+ey6iTjJY7+ykemQA=
Subject key identifier: 5B:FA:FD:2D:BE:51:8D:96:78:29:01:B2:62:CC:0A:6F:3C:C5:1D:A7
Authority key identifier: D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01
Certificate issuer: /CN=d6aa89f7b722279c032942dcf24865f6d72d6501
Certificate serial: 0197CA5E85C95BEFB1BC8B78E0E253828D16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
Manifest number: 10B3
Signing time: Wed 02 Jul 2025 09:01:21 +0000
Manifest this update: Wed 02 Jul 2025 09:01:21 +0000
Manifest next update: Thu 03 Jul 2025 09:01:21 +0000
Files and hashes: 1: 1qqJ97ciJ5wDKULc8khl9tctZQE.crl (hash: 1tXpVEUxYrU0MmuwWzGgWZ/BWUtlfkBko0w7KJvepzg=)
2: AgasgsgRMARsZv6ZL1FMUAMH49o.roa (hash: rP0A/zCy7W2yRJEKVS59R2RHbWAgc1CTX30QoNq6GK4=)
3: kIQph00YRfR7VyoSJ5QKs9_47CM.roa (hash: T6/F9gO6dDf2HDaMUJjHPMQQkg1ian0JLCMBF3Ug9u4=)
4: qtgbnELTyW65aNCYZpJqV2m2-Jw.roa (hash: BZNYV9kq2qBJjfITSVC14VQZO/Cg3QnROE1UWyqLr8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 09:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:5e:85:c9:5b:ef:b1:bc:8b:78:e0:e2:53:82:8d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa89f7b722279c032942dcf24865f6d72d6501
Validity
Not Before: Jul 2 09:01:21 2025 GMT
Not After : Jul 3 09:01:21 2025 GMT
Subject: CN=5bfafd2dbe518d96782901b262cc0a6f3cc51da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ce:a1:f5:21:19:4f:d3:a3:a5:29:ed:03:09:
a5:ae:5c:61:c2:32:4e:0e:3c:6f:59:65:c0:81:21:
dc:8b:d2:fb:ef:3b:78:c1:1d:a1:97:e3:06:78:f7:
72:46:d3:75:31:a1:05:5d:82:40:40:02:d3:dc:f1:
d1:71:42:d7:ae:8d:4d:bd:5f:6d:c6:c7:1a:2a:7c:
ca:95:d1:34:a9:b9:8c:66:05:72:8f:cd:ee:98:5b:
69:74:33:5e:f1:89:25:7a:09:03:a4:b1:89:bb:03:
14:34:d6:c8:86:ca:d0:39:ac:d0:8a:9e:3a:ac:6a:
22:37:9b:13:9c:84:94:2b:e7:57:86:4b:6c:a6:ed:
47:c5:7f:4b:a8:43:b9:1e:71:0d:e9:39:ce:3e:11:
dc:af:e7:74:d0:48:45:62:2e:95:3d:12:50:91:82:
35:f3:88:73:d4:d0:44:52:4f:61:5a:c7:7c:ad:85:
48:2c:ec:4e:c7:36:4a:88:8c:8f:8b:e8:4d:17:65:
10:2c:37:e1:16:be:07:6c:59:35:5d:b9:02:0a:c3:
b0:12:c0:e7:5d:dc:f2:f8:7c:95:2d:09:85:fa:0b:
e9:ac:8c:5c:54:1f:ea:23:b9:8d:49:22:9f:b4:d8:
82:39:38:fc:e6:01:59:da:66:c6:0f:79:c7:16:dc:
78:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FA:FD:2D:BE:51:8D:96:78:29:01:B2:62:CC:0A:6F:3C:C5:1D:A7
X509v3 Authority Key Identifier:
keyid:D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:99:82:2c:40:68:74:5e:f3:c7:24:db:72:2d:50:aa:64:05:
f1:f5:b8:ae:40:79:9e:f2:c3:b1:97:40:94:a9:a6:c7:c8:f4:
64:f7:f4:1f:3b:a9:18:3a:e6:5a:a9:f8:7c:f0:88:42:72:9d:
d5:c5:30:6c:ea:c8:1c:b5:92:41:74:02:c2:94:90:1c:e6:bb:
8b:77:4b:35:b2:82:6e:b4:01:01:05:fe:2e:a0:fe:3d:24:39:
39:c5:09:b7:c4:98:34:e6:00:8d:61:db:19:61:2e:c8:da:3a:
26:6e:72:1f:12:b1:74:43:c9:c3:c4:04:ec:8b:69:ca:0e:99:
ad:c2:87:e1:24:2d:a7:67:51:28:9b:57:2d:53:41:df:40:fb:
1c:7f:9f:57:92:41:77:dc:f4:e7:b4:3c:47:5a:dd:6d:6d:ff:
5d:5b:d2:76:ea:46:d5:8c:e5:e1:80:53:d7:0e:d6:14:84:80:
ec:30:de:0d:b1:24:a6:65:47:b2:4e:16:1b:8b:05:5d:bb:89:
4a:6e:7b:93:cf:a5:56:68:df:6d:9b:db:e2:4d:97:c4:23:e4:
d9:9c:51:61:5d:9a:53:b1:bd:3a:34:13:31:ca:02:f6:91:4d:
75:a0:12:b6:3c:52:d1:6b:68:f1:d2:bc:4c:5e:dd:13:0c:50:
b7:ba:d6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 12:45:11 2025 by rpki-client