Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
File: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft (raw, json)
Hash identifier: QTXPescLqZtMDqWaCsF1OL6Ak4po7ZeQj5oqBu8gON4=
Subject key identifier: 74:18:6D:F6:BC:D4:33:73:2A:A9:E7:AA:5B:6D:DB:BE:5B:A1:4B:9C
Authority key identifier: F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
Certificate issuer: /CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Certificate serial: 01978A6C08F7CDD39DD87047A6D10C19B402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
Manifest number: 0D93
Signing time: Thu 19 Jun 2025 23:00:25 +0000
Manifest this update: Thu 19 Jun 2025 23:00:25 +0000
Manifest next update: Fri 20 Jun 2025 23:00:25 +0000
Files and hashes: 1: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl (hash: fk1Hce6DecG5UIdER7KH+DcFSB1IMyNjhNQttOmGmx4=)
2: C3CtZTgV6FhDx8jPsObo2L6FO8k.roa (hash: NvkBnoMHiuCQDQqP9VPXNRtC0nvpW5lhq9MDa3+jS9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 19:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8a:6c:08:f7:cd:d3:9d:d8:70:47:a6:d1:0c:19:b4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Validity
Not Before: Jun 19 23:00:25 2025 GMT
Not After : Jun 20 23:00:25 2025 GMT
Subject: CN=74186df6bcd433732aa9e7aa5b6ddbbe5ba14b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ba:82:27:67:5e:cb:d9:84:75:47:c8:d2:0f:
7f:dc:9c:c9:a1:a1:24:02:76:70:d1:a7:70:2c:3c:
94:43:9c:40:13:3d:ae:2f:cb:ae:6f:55:33:dd:97:
85:b2:d7:70:fd:61:58:b9:03:bf:be:7d:be:25:7c:
6a:53:2d:cb:9e:55:3d:8c:97:d0:67:f0:b1:11:be:
fe:e0:b8:0c:f3:ab:6a:af:45:36:77:00:c4:cb:53:
db:c2:2f:80:69:a2:1f:cf:a6:f2:59:4b:0c:25:7d:
1d:e1:30:b9:38:46:16:4d:d9:74:22:59:77:d3:cd:
3d:5b:0c:7a:32:c4:21:df:06:68:61:8a:e0:6c:f6:
4f:92:a1:9d:e8:d0:20:ea:13:70:13:80:f9:64:c4:
3a:13:c9:a7:a1:95:0b:cf:87:63:86:fa:71:3d:a8:
ab:9c:a0:eb:e9:a1:74:85:df:03:39:68:9c:8d:68:
7c:49:9c:6e:38:42:12:53:9f:62:88:e0:1b:28:13:
05:71:ab:3a:c7:83:42:bb:a8:a6:0e:6f:af:a4:76:
60:04:91:7a:d1:76:c3:27:66:52:db:66:cf:29:54:
35:b7:5f:34:ea:44:76:5d:15:37:bc:1f:9f:05:bb:
df:ca:2b:86:d6:4a:c4:8a:f2:13:b4:a2:89:12:21:
12:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:18:6D:F6:BC:D4:33:73:2A:A9:E7:AA:5B:6D:DB:BE:5B:A1:4B:9C
X509v3 Authority Key Identifier:
keyid:F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ab:23:0a:46:e1:9d:a6:76:d9:95:2a:48:43:8e:bb:c2:37:
39:22:a3:93:e5:f4:5a:3e:97:ed:6a:f8:c3:ca:c6:a1:f0:f3:
9c:24:66:ee:12:7e:3e:ef:43:7c:43:5c:ad:5f:5d:88:b9:d9:
8e:7b:ca:58:d2:91:01:a8:c1:c5:a1:64:c8:13:3d:b1:72:51:
72:2f:a6:37:ad:62:56:f5:c9:c1:4f:41:3c:77:5c:e6:2f:8d:
d1:b9:8a:2f:45:04:93:f6:0c:03:a4:2e:aa:c3:0e:ca:1c:a0:
11:a0:9c:c1:f4:6d:f0:b5:6d:99:7b:1f:6b:0e:81:26:5f:2b:
1d:40:8a:1c:77:4e:eb:87:04:bb:13:b2:2d:67:d8:b9:69:73:
2b:c9:08:ec:49:c6:2f:9c:d3:3d:13:34:3e:5e:25:5b:af:8a:
73:d3:72:76:db:31:d3:ef:8f:5f:5c:75:53:54:7b:8a:bd:aa:
a6:a1:b7:f2:6f:c8:c9:a7:b9:e3:77:25:91:8b:4c:d7:30:91:
73:16:b6:88:7a:ca:35:d3:63:2d:3f:a7:e1:16:52:1f:5d:e3:
34:ff:e4:99:a9:f4:26:cc:d9:0c:20:94:8e:30:86:8a:8d:c6:
bc:98:e5:1a:90:1c:ae:a3:2a:c7:21:cd:ee:ea:1d:c5:12:94:
90:8f:fd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 05:25:43 2025 by rpki-client