Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
File: 1QTmQeVaSK7gFB4sDSYicQLKptQ.mft (raw, json)
Hash identifier: tJPI1o+NlgsE7XM4ppKku5oLxEkXiuFyBpAWfn/Iv1I=
Subject key identifier: BA:DB:86:7D:DD:1C:57:DE:B0:F8:74:6A:22:1B:47:7A:72:0E:A7:F7
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial: 01987FE73FFCC13823707CA92268E670D707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
Manifest number: 0FCF
Signing time: Wed 06 Aug 2025 15:01:58 +0000
Manifest this update: Wed 06 Aug 2025 15:01:58 +0000
Manifest next update: Thu 07 Aug 2025 15:01:58 +0000
Files and hashes: 1: 1QTmQeVaSK7gFB4sDSYicQLKptQ.crl (hash: lZrO3KvFlUUcigpHdTFwFaTNz0yJU2xufmHpgTwwaKw=)
2: 8394MOfnLh_yAjC5oBzFaMKHm6g.roa (hash: LERfhqf0k5zIruV7b50StKNQsMWe2Ikf9jCbw9DjSV0=)
3: EeJuZ6ZuYMeP-N4AAq72eBlOcpM.roa (hash: oERKMEQ/M129kNgVvoyFhR9aTD1YFXrhdgiUJ9nGJ/4=)
4: FAqlGSimYu0iYfDKBVjHX-VLzKc.roa (hash: WfUufO4W+prwwNDD5ADTi0DPEPfB9t599hV9voFifsQ=)
5: Hl87tUhseJrx8ua_eZqEp-JXnL8.roa (hash: jm0/ddSHPme/VSGWBnMHo4jZkNs2MFEBOqNEBiv6awA=)
6: mS4C21ztnhJ1CQEhvl6HMt_DrKI.roa (hash: +AZpnsUJfoswiZ8L8H5vFWzIYnjuMk5tWnCTTVqTzgU=)
7: wPc7v-r8HN2WgTXXGZ1otoniuZk.roa (hash: 25D1eRRGlzWdsvEgZ+vInaKAYQi119NABCdy4hawamc=)
8: zqQPqsNghrHDurnrcYBnEoZLmxo.roa (hash: X61i/t72QEVUDPoVAXxvJ+YmKuAemlBmWuMndAD4GQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 14:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:e7:3f:fc:c1:38:23:70:7c:a9:22:68:e6:70:d7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Validity
Not Before: Aug 6 15:01:58 2025 GMT
Not After : Aug 7 15:01:58 2025 GMT
Subject: CN=badb867ddd1c57deb0f8746a221b477a720ea7f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:67:50:74:61:7e:33:32:54:cc:9d:46:e2:4a:
5c:5e:b5:ac:0c:f1:88:7d:0a:12:0a:dc:6a:7b:1d:
a3:32:0f:aa:ad:7f:d5:ef:fd:c7:33:92:b9:9b:72:
1a:d2:f6:92:b7:0d:54:fd:43:a8:ee:d4:51:5b:f8:
15:db:f6:23:74:10:9c:28:1f:ac:b6:f8:1d:68:26:
e2:16:cb:64:ac:8e:53:e5:e9:7b:85:15:3a:0e:57:
6a:b3:46:0d:a3:06:f8:b2:f0:30:7a:6b:c0:95:ba:
76:9a:45:9d:df:c0:a4:04:77:40:b0:e2:f3:7e:15:
ad:75:25:8a:c8:7e:f1:ef:9e:9a:68:b2:e9:42:02:
ce:6a:c6:79:db:51:b4:8a:f1:39:e3:12:3e:e5:6e:
0c:55:93:99:56:d6:93:ea:b4:8c:ae:b7:40:b7:93:
e5:54:ba:70:90:6d:c8:c3:f4:9a:46:46:39:a1:0d:
b2:03:92:20:59:82:f2:60:ac:21:51:95:69:27:50:
1f:36:52:0e:34:ed:75:49:fc:4b:08:5a:15:61:66:
60:2d:e8:7d:32:88:52:7b:74:45:31:5c:5a:99:7f:
b1:29:57:d5:0d:83:c3:2c:90:2a:63:98:b8:f3:5a:
30:72:87:b6:56:05:4e:30:5a:23:56:96:5e:da:76:
30:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DB:86:7D:DD:1C:57:DE:B0:F8:74:6A:22:1B:47:7A:72:0E:A7:F7
X509v3 Authority Key Identifier:
keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:02:99:e3:08:14:f1:03:f1:aa:79:dd:e2:18:08:7f:ee:ea:
be:94:4a:73:e9:db:0f:b6:4b:1c:63:28:5d:fc:b6:e2:c5:d4:
67:1e:34:6e:b9:6d:86:0b:3d:8c:d3:8c:67:c9:e4:ff:47:31:
b8:1a:a5:19:54:4e:9a:ba:fd:e3:dc:66:07:c3:3b:80:d5:2f:
7e:22:e4:85:ed:40:80:e2:ae:e6:28:40:95:a3:13:1b:0d:22:
92:7e:b9:29:58:5d:f2:82:29:5d:b6:ac:39:c3:17:4b:f5:99:
22:c9:60:db:ea:0d:6c:58:f3:7a:d0:87:2f:fe:84:12:10:f5:
98:e0:82:f3:d5:7a:3b:51:15:dd:ec:5c:95:67:b6:d9:e2:24:
08:41:cb:77:ce:ba:4c:44:91:91:0f:9b:5f:b2:10:1d:cb:79:
9a:08:a4:a0:1f:45:4a:a8:3d:bc:65:b5:e1:39:fa:52:58:93:
c9:8b:2c:16:08:38:d9:47:d8:8f:0b:46:62:33:30:44:e8:a2:
0b:66:80:7c:95:60:a8:e9:be:0d:81:6c:b5:9f:58:b4:3d:e5:
7d:1c:49:ff:91:86:79:bd:7c:14:c2:44:ff:49:04:14:63:f6:
c0:97:c9:b2:6f:06:38:79:47:47:1d:98:a3:26:a5:1a:a6:34:
88:19:26:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:27:09 2025 by rpki-client