Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
File: 1-q6U9bfurTpdhIMHiAmi7_ooOA.mft (raw, json)
Hash identifier: wVA2Y7Zv2UHJy0lcnvd4Iv+mp8xztMoDtAjwccICDJ0=
Subject key identifier: 68:BF:EC:88:FF:0B:6C:6D:C0:2E:5B:31:69:DD:C3:E1:08:47:5D:4A
Authority key identifier: D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0
Certificate issuer: /CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
Certificate serial: 01987DF87C0F21C1F0B6DC7AEB8A3A084F8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
Manifest number: 135A
Signing time: Wed 06 Aug 2025 06:01:33 +0000
Manifest this update: Wed 06 Aug 2025 06:01:33 +0000
Manifest next update: Thu 07 Aug 2025 06:01:33 +0000
Files and hashes: 1: 1-NNWhK-5UZlX86GIvBS3F5KFXGM.roa (hash: ZnHYmG2JFMVQIt7lMjIb53DbqPPrkNie9D30hGqcWLQ=)
2: 1-q6U9bfurTpdhIMHiAmi7_ooOA.crl (hash: cBAf15ViimI/AdLSMMNFZ1PObO8WnlsRRGYBNM3bvZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:7c:0f:21:c1:f0:b6:dc:7a:eb:8a:3a:08:4f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
Validity
Not Before: Aug 6 06:01:33 2025 GMT
Not After : Aug 7 06:01:33 2025 GMT
Subject: CN=68bfec88ff0b6c6dc02e5b3169ddc3e108475d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:50:05:0a:0e:12:01:00:e6:bf:f6:d2:46:8b:
cf:45:6a:0c:99:56:e3:b9:8e:eb:97:7b:e9:9b:1d:
92:57:47:c3:5c:b3:11:97:7f:74:a4:c5:78:74:f6:
2b:f9:b0:fb:2a:02:fd:a8:51:59:25:22:f6:6a:07:
8d:9f:2a:55:ca:db:24:ab:e1:16:b0:33:6e:c0:65:
1f:06:6d:76:88:cc:16:1b:a7:9e:bf:fd:0f:67:9a:
a1:b0:c2:9a:d3:f0:fa:0b:60:30:8a:95:4f:80:38:
3f:7e:8b:27:e8:99:24:3e:64:ac:bd:46:57:fe:38:
d3:81:22:86:91:d5:d5:3f:17:93:1e:2a:c4:7c:ac:
40:d3:62:13:91:c9:c7:bf:63:52:93:7f:01:4f:3a:
15:a8:b7:50:fd:10:fa:9a:5e:71:1e:aa:a2:6c:93:
c6:a4:d7:2b:d5:79:eb:3a:b7:66:88:18:05:db:4a:
d2:e6:45:3c:9f:24:a5:74:40:15:2a:88:31:77:f2:
36:06:38:d7:4d:2c:7d:4e:92:b8:8b:c0:ba:4c:df:
fa:a9:37:5a:b7:d3:2a:af:de:5e:8b:92:18:c6:ce:
56:07:98:48:45:2b:c0:43:3c:25:dd:72:29:e8:e0:
19:99:bd:0b:65:e1:1a:7e:68:0c:43:77:5d:fd:f0:
8e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BF:EC:88:FF:0B:6C:6D:C0:2E:5B:31:69:DD:C3:E1:08:47:5D:4A
X509v3 Authority Key Identifier:
keyid:D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:2a:03:90:5a:ea:a7:2d:b7:5d:f4:21:34:fc:42:75:1b:e0:
1e:2e:8a:ee:af:ea:e3:30:f9:de:32:e1:20:3f:f1:04:93:a9:
8c:a6:5e:a0:78:73:4c:d4:4b:02:d2:32:17:6f:22:59:28:8d:
ae:b8:9f:30:8e:fb:01:1c:0e:f6:31:3e:7d:6e:01:e2:25:4a:
95:c5:2c:28:4d:3b:79:9f:d4:29:41:37:e2:65:2a:91:d4:c7:
af:28:e2:dc:f4:a4:12:85:b2:3d:d6:aa:ce:69:6c:a9:79:3e:
03:e0:bd:05:f3:e4:7a:11:fc:c7:e4:18:a1:ca:e1:ea:64:58:
f7:9e:35:04:3e:04:0e:9d:08:64:fc:7b:03:23:7e:dc:5a:25:
98:9a:0b:36:31:ac:7b:be:46:2c:58:5d:95:d6:3d:1b:28:b0:
ce:76:bb:71:67:42:d5:7d:f7:79:aa:0c:e6:f3:22:89:63:f0:
dc:6f:2a:71:ed:5c:a9:99:8b:99:f7:a0:3c:1d:45:19:36:19:
37:43:94:b6:5b:a3:e5:1e:d8:05:42:e0:96:e3:b0:48:79:93:
b3:bc:02:04:4c:b8:53:9c:f8:00:80:d3:d5:a6:98:51:52:7d:
b8:e3:c0:6c:10:12:22:50:e9:f9:c7:97:ec:e1:cb:33:3b:31:
1d:78:94:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:17:11 2025 by rpki-client