Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
File: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft (raw, json)
Hash identifier: FGHNlNgKq/W1P+/76V21KrQgYrHFq95kF88xo0Yhcag=
Subject key identifier: D0:BC:C6:09:F7:B2:55:89:DA:93:D8:68:85:36:9F:FB:C1:F7:E1:B2
Authority key identifier: F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F
Certificate issuer: /CN=f8a41594a92a9ae05c65a04f803d411a4f88423f
Certificate serial: 01976A7345DA2368DBD9D22F022EBD38CC67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
Manifest number: 1198
Signing time: Fri 13 Jun 2025 18:00:28 +0000
Manifest this update: Fri 13 Jun 2025 18:00:28 +0000
Manifest next update: Sat 14 Jun 2025 18:00:28 +0000
Files and hashes: 1: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl (hash: U7BeSs8ity4yCYOkKhqRZG/xUR4lii2kKJj3CeSbq64=)
2: kgzoK8BF6aDaCA7s2y2-oNomvaU.roa (hash: thv0x/fHxG1HTXAqa1M1DqYuduWmIxV8jm8IAHJKruM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:73:45:da:23:68:db:d9:d2:2f:02:2e:bd:38:cc:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a41594a92a9ae05c65a04f803d411a4f88423f
Validity
Not Before: Jun 13 18:00:28 2025 GMT
Not After : Jun 14 18:00:28 2025 GMT
Subject: CN=d0bcc609f7b25589da93d86885369ffbc1f7e1b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7d:f6:fb:5c:3c:d1:bd:b6:21:78:fb:f7:11:
04:ec:ef:3a:cc:25:e6:e1:7a:4e:31:7f:72:c9:a5:
af:90:e4:88:c0:6b:5c:7e:dc:7f:da:49:a8:bc:80:
e4:64:8b:96:81:17:2c:18:35:bc:71:60:93:25:84:
a3:1c:7b:0f:95:04:b9:a4:83:58:40:25:e9:f5:f1:
1d:7b:68:af:d7:2b:85:29:e9:c4:f2:61:7b:72:14:
f5:96:5c:36:10:c3:0b:57:87:73:c7:7c:89:b3:7f:
28:57:f4:cb:0f:03:8c:c6:a0:47:1d:d4:19:41:59:
d0:ed:dc:55:88:49:72:16:15:43:02:de:df:3f:da:
d7:d8:e2:74:b0:93:af:e3:41:5c:48:26:ad:27:50:
53:f1:31:8a:78:ac:a6:fd:c0:6e:52:6c:c0:c0:4d:
48:be:7a:a5:f5:99:37:af:e6:dd:39:79:15:0d:6f:
1a:93:1c:29:a7:9e:61:11:0e:cb:01:93:f1:3a:09:
12:5c:3d:c4:b4:19:d6:c0:f2:eb:23:3f:f4:b5:6e:
3f:e7:ed:d0:f5:20:21:6e:34:9a:39:ca:a3:7d:f8:
d9:fc:78:80:43:37:40:a0:66:bd:e4:1c:3d:d1:a8:
40:9b:8c:16:81:40:91:25:17:ef:2d:64:df:e3:e6:
29:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BC:C6:09:F7:B2:55:89:DA:93:D8:68:85:36:9F:FB:C1:F7:E1:B2
X509v3 Authority Key Identifier:
keyid:F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:24:1a:96:e5:a0:8b:df:00:95:94:6b:f6:47:3f:6f:9e:2a:
6b:a3:4c:23:30:14:d0:ea:7e:0c:e0:ea:46:1d:33:58:1c:e1:
b1:67:b2:40:00:f9:53:98:6e:00:1b:f0:a3:e4:63:4e:b9:a1:
2e:eb:e2:11:e8:93:00:fc:4d:6d:d9:a9:ff:fe:c9:9b:a1:4a:
df:03:ba:cb:bd:3e:6a:72:a5:72:69:46:a1:de:7c:b3:56:6a:
43:0c:11:b4:c0:cb:d7:90:27:3d:ac:59:c4:5e:4b:51:c6:a2:
95:4d:17:9a:87:3e:e5:36:71:3b:c9:47:0f:e3:21:f2:62:7d:
4d:8f:22:82:2c:53:35:37:70:2b:c1:57:62:f0:b4:2f:59:05:
dd:12:55:6c:e0:c3:40:42:90:90:0e:d1:24:cd:5b:75:4c:90:
8c:58:dc:21:08:c5:2a:8a:96:ef:5d:01:e0:51:78:92:ff:d5:
7d:cd:01:94:4e:9c:db:51:0d:47:68:72:d1:f3:31:62:b2:58:
6c:1a:e5:96:ff:5d:15:b0:9b:b6:0c:50:7a:3a:f9:8b:af:a2:
bc:34:3f:4d:09:ac:80:8d:c6:ef:b1:8d:ca:0e:1d:1b:ad:fc:
65:94:57:8d:d0:a8:1d:2b:02:5b:66:48:7f:79:3e:fb:c7:e9:
3d:0a:40:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:16:30 2025 by rpki-client