Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
File: 0QENo1diQjJM77LIHBM5psDjtAM.mft (raw, json)
Hash identifier: qJZkSbdkwW7tBCfkxvheyjgeFIrLY4tEiGq4G7wl3q8=
Subject key identifier: 00:EE:0D:41:4B:E9:45:8F:66:7C:9D:98:87:53:3B:AA:6F:5D:9E:87
Authority key identifier: D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03
Certificate issuer: /CN=d1010da3576242324cefb2c81c1339a6c0e3b403
Certificate serial: 0197B70F44B07C3DC58653C778BAB6179150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 15:02:00 +0000
Manifest this update: Sat 28 Jun 2025 15:02:00 +0000
Manifest next update: Sun 29 Jun 2025 15:02:00 +0000
Files and hashes: 1: 0QENo1diQjJM77LIHBM5psDjtAM.crl (hash: SLSdD+v1ncN43uwhYrSG9XVQwdDUInjn8375Iq0ONTk=)
2: axw8eTRN4luwNfUppGZPJDLFRnk.roa (hash: 941/E7Pt0vnLLqpxlWNVKlBSpW2P0hox/ZuN05lIlOE=)
3: qL1excp8Az_0o7x1vHRMJ6uUBq8.roa (hash: etXW7FKK/vCX8HY/wRSJVfpHZyWVeKG9hX8M0M6D1Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:44:b0:7c:3d:c5:86:53:c7:78:ba:b6:17:91:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1010da3576242324cefb2c81c1339a6c0e3b403
Validity
Not Before: Jun 28 15:02:00 2025 GMT
Not After : Jun 29 15:02:00 2025 GMT
Subject: CN=00ee0d414be9458f667c9d9887533baa6f5d9e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c0:53:2d:88:30:b9:84:ba:ba:35:86:8f:4d:
f7:b8:78:ef:ad:df:3a:ee:55:e6:f4:d3:f7:dd:ac:
e0:be:c3:01:ae:ad:15:de:5d:56:c2:0d:6a:f9:8b:
79:1e:e8:b0:ee:e3:8c:76:45:78:a9:24:d6:83:a2:
ed:09:6a:30:de:ef:57:c2:71:04:2c:40:78:b2:50:
44:b4:fa:c9:78:7f:ff:be:d0:fc:0b:b2:a9:2c:b2:
ac:69:0e:c2:27:68:1b:55:42:1f:75:33:93:c8:db:
d5:10:a1:20:9b:01:cb:b2:cd:ca:ec:86:63:cc:4c:
e8:2b:88:45:a5:e6:2e:79:72:e3:1c:05:38:81:f0:
48:83:ba:35:5c:64:11:7b:6c:a6:95:51:30:62:b7:
3c:8c:f8:b7:d5:8a:1b:b2:50:c7:13:60:ee:33:2b:
c5:df:92:9c:5f:1f:8a:af:05:87:bf:a4:47:c4:6b:
98:84:a1:f3:d2:75:cc:9d:a9:40:ee:fa:31:bd:e2:
61:81:46:50:f0:d8:30:df:2d:83:90:33:80:96:20:
4f:0e:f0:58:8a:74:ae:e9:2b:dc:95:7f:d4:e3:0d:
bc:42:9d:de:dd:94:64:35:ae:e8:09:31:3c:15:1a:
50:f1:25:26:f4:11:0e:0c:05:5e:ab:24:1c:a9:6f:
9b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:EE:0D:41:4B:E9:45:8F:66:7C:9D:98:87:53:3B:AA:6F:5D:9E:87
X509v3 Authority Key Identifier:
keyid:D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:cd:9c:51:fa:0c:23:db:8b:3c:0f:4c:3c:eb:0d:13:06:14:
00:24:ee:b7:b4:a1:37:88:f2:58:ad:23:10:12:85:5c:cb:9a:
c1:d9:6e:a1:d7:6c:f4:11:d2:79:0d:14:68:ca:1c:cb:d9:75:
4c:ef:2e:b7:19:82:a5:ca:9c:ab:f5:81:76:01:a5:2a:93:82:
cd:a1:32:00:63:79:c1:6f:48:af:60:43:19:6e:f5:d3:f8:4c:
46:96:91:2f:b3:58:44:ba:a6:a9:14:61:1b:fa:14:a7:bd:ab:
01:39:d0:ab:59:a9:70:5c:c6:e8:96:1c:16:37:e9:1a:79:5a:
51:cc:29:6a:d7:b3:31:4f:e4:3d:08:18:6f:17:98:b7:eb:3d:
06:6f:a7:c0:65:91:fe:82:75:84:a2:dd:60:52:27:6b:76:de:
56:b1:82:11:3b:03:ae:2c:c1:25:b9:bf:1f:8c:a0:1d:1c:4e:
74:e7:a0:f6:24:3a:91:0e:c5:f4:da:aa:05:8e:65:89:c4:5d:
92:70:9f:e6:2c:72:b9:e6:a3:de:af:2f:38:84:1d:ed:06:cf:
d4:4c:ec:e6:8a:85:12:ce:11:c9:5e:1a:62:cc:ce:a3:bd:5a:
9a:0c:f2:b4:e1:5e:0c:fe:84:d3:37:24:c5:c1:3f:22:15:b4:
99:59:73:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:27 2025 by rpki-client