Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
File: 1-0q-E5QqvkIPINwUn9xX30BFwUM.mft (raw, json)
Hash identifier: HovO8NlT6A9vdw4vqexUPXdEsXfDpPvX7cM15LJFmgA=
Subject key identifier: C9:E9:25:F4:AC:A3:49:EF:38:24:D7:FD:F0:03:8F:66:8A:BA:20:15
Authority key identifier: FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43
Certificate issuer: /CN=fb4abe13942abe420f20dc149fdc57df4045c143
Certificate serial: 0198D73BBC81DB494442949C0E3D51A26EE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
Manifest number: 0A59
Signing time: Sat 23 Aug 2025 14:01:12 +0000
Manifest this update: Sat 23 Aug 2025 14:01:12 +0000
Manifest next update: Sun 24 Aug 2025 14:01:12 +0000
Files and hashes: 1: 1-0q-E5QqvkIPINwUn9xX30BFwUM.crl (hash: YfwBXJj+38BNbkNg4iV/wiQFSeD8WlQ6gPIDt1weQvE=)
2: Y_oNEiPJWS2zLwFvLL35UCRFKWA.roa (hash: q2i0iB2Ep81QHqaDB0CnMDZLGuww93ap90YlQXqqvaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:bc:81:db:49:44:42:94:9c:0e:3d:51:a2:6e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb4abe13942abe420f20dc149fdc57df4045c143
Validity
Not Before: Aug 23 14:01:12 2025 GMT
Not After : Aug 24 14:01:12 2025 GMT
Subject: CN=c9e925f4aca349ef3824d7fdf0038f668aba2015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:21:53:eb:51:ce:de:76:a9:38:46:d2:14:0a:
b3:cc:5b:fb:7e:06:23:f3:a6:81:a9:f8:77:0a:f8:
a0:4a:47:1c:53:86:8c:18:1e:17:cf:8c:44:a7:72:
26:3a:89:83:4e:70:ec:3c:28:91:66:e0:5d:b9:a8:
a5:07:14:fd:9c:f3:f2:c9:27:f2:ce:9e:c8:f5:9c:
3a:9f:1c:33:cb:14:ef:fd:59:12:31:60:63:9c:bc:
de:01:4a:c6:22:e6:f0:4e:ea:9a:e4:db:c3:f5:a5:
d2:f3:f1:e7:99:9a:af:73:51:93:85:52:cd:5d:b1:
af:04:6e:2c:03:be:de:13:ff:ac:f8:2b:13:fc:9e:
31:db:a8:83:0f:0a:f5:e6:82:c7:44:5f:e0:f0:a5:
f9:a7:57:1b:81:60:a8:da:93:ac:ca:c6:18:a2:0a:
76:71:e5:67:34:ca:9e:f6:bb:ed:86:1d:e4:3a:4e:
10:1e:96:60:d1:4e:12:fb:d3:99:88:c3:fe:0c:70:
1d:fc:52:0b:6f:63:c0:b3:ad:ee:fb:64:e1:22:5c:
e0:6a:f2:e4:71:8b:36:40:f5:23:79:3d:6a:67:f4:
83:61:f6:a8:72:ce:81:d2:0f:b0:0f:10:bd:6c:9e:
1a:91:bc:cc:d6:59:78:fd:37:ce:9a:dd:f2:66:ae:
19:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E9:25:F4:AC:A3:49:EF:38:24:D7:FD:F0:03:8F:66:8A:BA:20:15
X509v3 Authority Key Identifier:
keyid:FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:08:31:cd:34:a3:62:de:da:a9:22:a9:c5:a2:1d:91:0a:66:
1c:86:68:08:75:7a:c1:87:46:74:a2:31:67:34:3b:9b:31:ba:
03:dd:09:2e:bd:64:03:c0:a8:0e:28:e8:36:af:1f:f2:08:c9:
ee:49:24:f0:9c:10:57:ce:14:45:4c:87:fe:0d:05:b5:18:98:
d8:60:5d:e7:d5:1c:4d:ce:fa:25:b1:b1:c5:ed:39:36:20:f8:
12:a8:c4:cb:e3:c4:3e:46:21:b7:51:49:a8:5a:02:73:3a:20:
3b:f0:3c:f2:d5:93:fe:9e:0a:07:d2:82:26:65:22:e3:82:db:
e0:9e:37:5a:00:88:18:6f:0a:c5:19:5b:63:51:c3:f1:f8:ff:
68:14:28:e1:d1:bd:a0:23:15:b8:b0:90:b3:8f:e0:58:dd:33:
8b:e1:a7:44:54:78:25:8b:d4:50:e3:24:97:bf:34:89:b7:3c:
52:4f:e8:3d:12:51:49:fb:da:dd:49:c1:20:92:f1:f9:48:c8:
2e:76:ef:5f:70:b5:d0:12:2e:18:f8:17:d4:ea:b1:7d:ff:57:
4f:fe:37:d7:0c:0d:02:d6:54:2b:d9:99:dd:06:b6:df:37:0d:
9e:ee:d1:0e:a9:9b:78:19:39:87:a7:17:81:07:90:37:c3:5d:
3f:ff:0b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:44:29 2025 by rpki-client