Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
File: 1-0q-E5QqvkIPINwUn9xX30BFwUM.mft (raw, json)
Hash identifier: OTuEd13kqVi6lnpiiLwJH3XUEXF+AM4JsmKYmxQYsQ4=
Subject key identifier: 9D:F2:45:6D:68:CD:73:C8:EB:C5:C2:1E:43:05:23:6C:51:0F:DC:D7
Authority key identifier: FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43
Certificate issuer: /CN=fb4abe13942abe420f20dc149fdc57df4045c143
Certificate serial: 0197B77C9A8A35B0BF66282C12416B48AC4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
Manifest number: 09C4
Signing time: Sat 28 Jun 2025 17:01:25 +0000
Manifest this update: Sat 28 Jun 2025 17:01:25 +0000
Manifest next update: Sun 29 Jun 2025 17:01:25 +0000
Files and hashes: 1: 1-0q-E5QqvkIPINwUn9xX30BFwUM.crl (hash: 9Nz5oEnlhXm3TuIVoL84z2YXDv4GUaLieNfA8i+5hSQ=)
2: Y_oNEiPJWS2zLwFvLL35UCRFKWA.roa (hash: q2i0iB2Ep81QHqaDB0CnMDZLGuww93ap90YlQXqqvaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:9a:8a:35:b0:bf:66:28:2c:12:41:6b:48:ac:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb4abe13942abe420f20dc149fdc57df4045c143
Validity
Not Before: Jun 28 17:01:25 2025 GMT
Not After : Jun 29 17:01:25 2025 GMT
Subject: CN=9df2456d68cd73c8ebc5c21e4305236c510fdcd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:72:77:56:1b:dd:59:6d:13:da:3a:53:38:a9:
c1:5a:06:84:26:95:f8:d6:81:ea:70:bb:fd:f2:7f:
ec:a1:26:92:3a:e2:0f:4d:76:f2:37:97:ac:01:28:
63:e3:2a:34:c6:a0:76:66:39:14:79:fc:39:50:dc:
6d:07:b6:1d:d2:72:45:3e:da:d0:37:bf:27:4a:85:
33:3f:4f:1a:4a:9e:e3:5f:dc:b8:a1:01:14:0e:f9:
36:5a:c8:e5:90:1a:64:8d:11:09:b2:b5:62:8e:6a:
9b:7b:56:03:cf:86:87:7e:b3:c6:e8:58:df:fa:5d:
5d:7c:8e:1c:ce:47:10:36:e8:0e:bc:cc:94:11:e5:
9d:cc:0e:a8:34:a9:b4:2f:8f:e6:c0:58:2a:5f:df:
af:31:a8:ae:c7:52:72:e8:8f:36:dc:46:4f:17:00:
09:f3:34:c5:ff:80:fc:cb:c9:c4:53:1c:85:fd:62:
ae:61:05:45:ca:30:be:65:a4:3c:da:bc:0f:fc:c5:
54:8d:0f:df:b7:00:2a:67:17:89:7a:7e:20:d0:43:
bd:33:b4:82:30:d8:08:2f:2b:1c:4b:3f:95:1d:e0:
52:1f:98:13:45:e4:08:7f:9c:46:24:4c:ce:b6:df:
71:9a:7d:c0:0e:d2:21:45:ce:4d:bf:35:ea:0d:34:
91:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F2:45:6D:68:CD:73:C8:EB:C5:C2:1E:43:05:23:6C:51:0F:DC:D7
X509v3 Authority Key Identifier:
keyid:FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:97:28:f4:b2:43:b4:00:71:5e:54:f7:86:65:5f:76:19:90:
86:1f:c7:bf:a5:95:0f:ab:c2:ae:a0:50:25:87:77:24:95:e2:
78:73:6b:30:7b:21:6e:60:73:b3:c5:1e:57:28:be:0d:e7:95:
ba:2a:86:fa:0d:43:ff:4e:56:b2:c1:b0:a3:ca:32:bf:7a:ca:
6e:27:a2:f6:78:e6:ab:e1:b8:c9:77:a7:b6:dc:61:00:f6:be:
e6:e1:61:50:38:ba:b7:e2:44:89:38:b7:13:9b:c6:9d:b1:4f:
ba:30:4b:de:6b:3e:32:09:01:05:c4:59:5d:4c:07:fa:00:49:
b0:a6:3d:45:a8:36:47:92:4b:fb:dd:33:14:12:5c:93:15:1c:
c1:ab:bf:32:65:06:4c:38:89:6c:c0:e8:86:eb:04:ad:e8:d0:
73:02:3f:65:a2:c2:dd:0f:9b:7b:0e:00:20:81:74:4d:4a:b1:
0e:52:e2:5a:22:89:dc:a7:dc:19:73:7a:fb:68:0b:f1:78:85:
e5:8b:3a:43:94:6e:03:3e:3c:fb:7f:17:3f:46:91:59:5a:29:
e5:ea:30:c5:eb:dd:eb:3e:74:a5:b1:5b:37:e0:ae:ce:2a:d6:
4f:e9:cb:10:0a:74:08:85:5f:c1:9a:8d:5a:e5:c7:11:3b:5e:
3f:c9:f9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:37 2025 by rpki-client