Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
File: 1QTmQeVaSK7gFB4sDSYicQLKptQ.mft (raw, json)
Hash identifier: bh/mtSdeQQsE1o5ll0g5NvynfntzRa84xCIHsePYHx8=
Subject key identifier: 6A:0C:25:6F:F8:78:7D:DC:FE:84:08:E0:34:5A:7E:8C:CA:49:C2:64
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial: 01976F99E5598BA88DE2DDB80432FB42599D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
Manifest number: 0F42
Signing time: Sat 14 Jun 2025 18:00:46 +0000
Manifest this update: Sat 14 Jun 2025 18:00:46 +0000
Manifest next update: Sun 15 Jun 2025 18:00:46 +0000
Files and hashes: 1: 1QTmQeVaSK7gFB4sDSYicQLKptQ.crl (hash: rNTMgI7M82br2+HkoV3GVXCD233YbyaziB788LhzLBw=)
2: 8394MOfnLh_yAjC5oBzFaMKHm6g.roa (hash: LERfhqf0k5zIruV7b50StKNQsMWe2Ikf9jCbw9DjSV0=)
3: EeJuZ6ZuYMeP-N4AAq72eBlOcpM.roa (hash: oERKMEQ/M129kNgVvoyFhR9aTD1YFXrhdgiUJ9nGJ/4=)
4: FAqlGSimYu0iYfDKBVjHX-VLzKc.roa (hash: WfUufO4W+prwwNDD5ADTi0DPEPfB9t599hV9voFifsQ=)
5: Hl87tUhseJrx8ua_eZqEp-JXnL8.roa (hash: jm0/ddSHPme/VSGWBnMHo4jZkNs2MFEBOqNEBiv6awA=)
6: mS4C21ztnhJ1CQEhvl6HMt_DrKI.roa (hash: +AZpnsUJfoswiZ8L8H5vFWzIYnjuMk5tWnCTTVqTzgU=)
7: wPc7v-r8HN2WgTXXGZ1otoniuZk.roa (hash: 25D1eRRGlzWdsvEgZ+vInaKAYQi119NABCdy4hawamc=)
8: zqQPqsNghrHDurnrcYBnEoZLmxo.roa (hash: X61i/t72QEVUDPoVAXxvJ+YmKuAemlBmWuMndAD4GQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:e5:59:8b:a8:8d:e2:dd:b8:04:32:fb:42:59:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Validity
Not Before: Jun 14 18:00:46 2025 GMT
Not After : Jun 15 18:00:46 2025 GMT
Subject: CN=6a0c256ff8787ddcfe8408e0345a7e8cca49c264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:61:0c:cd:4c:e1:5f:01:e6:44:3c:af:a7:39:
91:dc:5b:4b:fa:b6:4b:e6:4c:9f:a6:b0:bf:26:94:
c1:b6:ac:91:5b:19:97:f4:80:e5:85:f9:4e:8e:b6:
de:2b:66:e2:96:4f:00:91:82:eb:8a:d0:2f:f8:c6:
b1:b5:05:69:d5:b5:84:98:43:8e:97:1f:d5:8f:97:
92:6b:a7:87:d6:25:d7:a8:f6:0f:d4:67:19:ba:b9:
63:3e:50:52:35:89:13:91:5a:2d:78:c6:8f:b2:80:
9a:04:ef:3c:fd:a3:1f:7b:97:c1:52:f5:ae:bf:cd:
41:b4:50:3e:74:3f:fa:39:16:16:b5:c3:55:a4:02:
9b:d2:b3:ea:1f:67:46:c0:26:81:71:bb:e2:71:2d:
4e:a9:e4:f7:f6:ed:99:4d:7a:11:00:87:e9:c3:3c:
a9:0c:b9:56:97:6b:65:c4:d5:35:f2:f4:c1:ee:21:
17:c7:3a:57:d7:f3:8f:ca:ff:11:79:a3:52:a5:0b:
76:2c:13:55:32:79:79:34:a0:5b:1d:39:09:c3:79:
20:df:18:70:4b:fd:5d:44:95:26:3c:35:6e:8b:0b:
3e:ba:6a:9d:09:f2:52:64:73:e7:25:9b:01:da:5d:
d2:35:72:e7:11:8e:92:34:39:19:c1:c7:b0:42:83:
03:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0C:25:6F:F8:78:7D:DC:FE:84:08:E0:34:5A:7E:8C:CA:49:C2:64
X509v3 Authority Key Identifier:
keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:bf:d1:21:f7:98:02:a1:6b:67:5f:e5:d6:7a:a7:3e:7a:4f:
c3:c1:53:e3:4a:14:d9:62:c9:1f:88:b7:b5:61:45:bd:84:5f:
b0:2e:7a:58:50:d3:21:d4:d2:c6:d0:6b:ee:04:83:c0:c2:ef:
e4:0e:b0:62:7d:a6:4f:ee:59:e5:c6:1a:78:76:21:9b:60:83:
1b:86:c7:e5:0f:cc:4d:d1:f0:63:d5:6a:61:72:d3:87:de:71:
5f:c1:54:44:7e:bd:07:3f:43:b9:d9:c0:55:97:4c:0a:fd:16:
cc:29:36:d0:aa:60:7d:fb:db:2a:b2:62:39:c8:40:21:85:79:
a9:a7:7b:56:3c:cd:8e:2a:e0:36:d7:5b:c0:27:1a:e3:ca:f6:
b1:ff:01:1c:fd:0d:ec:89:9b:4d:d0:89:83:7c:01:2c:80:e3:
80:2c:fb:7b:29:b5:3c:4c:ff:11:bf:81:db:b5:de:dc:af:ae:
33:bc:15:10:c9:35:48:9c:1c:dd:78:36:a0:80:be:2d:ca:d6:
ef:2b:b0:7c:e1:62:0a:f1:16:c6:cc:f9:cd:5d:22:0c:4b:51:
fa:13:db:68:ad:9d:41:34:b8:79:5b:85:a9:c6:4c:97:9b:b4:
2c:e4:84:8d:4f:63:ed:ab:80:46:5d:25:bc:9e:dd:bd:ef:5a:
14:3f:3a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:18:40 2025 by rpki-client