Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
File: 1QBRYT08xrPrgdW7QArg1OJBLIA.mft (raw, json)
Hash identifier: 5RdxO7/+i+oJpof69jk2KqHudmJT2g46J4nvrScTCC0=
Subject key identifier: 70:26:BC:B7:C2:A6:14:01:D0:F0:C9:5B:32:11:DE:7E:37:DB:73:28
Authority key identifier: D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80
Certificate issuer: /CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80
Certificate serial: 01976F2CB325EC8E855143F10930B480FEAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
Manifest number: 099D
Signing time: Sat 14 Jun 2025 16:01:29 +0000
Manifest this update: Sat 14 Jun 2025 16:01:29 +0000
Manifest next update: Sun 15 Jun 2025 16:01:29 +0000
Files and hashes: 1: 1QBRYT08xrPrgdW7QArg1OJBLIA.crl (hash: a4h0tIrzjI2TVx9kFzPAo8ZnyeaUqPNTpo73jGDxOkU=)
2: qBfFLLbMjDiXpHlclpBQm55p-Q8.roa (hash: X7f4s7PxbdY1OwsEitEQVcC4bC8kVzy8m2zO1xjTkLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:b3:25:ec:8e:85:51:43:f1:09:30:b4:80:fe:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80
Validity
Not Before: Jun 14 16:01:29 2025 GMT
Not After : Jun 15 16:01:29 2025 GMT
Subject: CN=7026bcb7c2a61401d0f0c95b3211de7e37db7328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:19:b7:77:c2:a0:b4:e5:34:53:24:c6:ca:8a:
36:27:ce:93:49:93:e2:61:22:35:73:7a:5c:7c:59:
87:3d:61:0e:33:10:29:30:11:89:a6:2f:d1:51:f4:
52:86:c5:06:9c:88:5f:0b:07:f5:e2:63:95:cc:4d:
b8:8a:3d:0c:62:cf:6f:15:fb:c8:2d:5b:5f:cb:d8:
01:ca:de:8e:a8:8b:2c:f8:30:a6:a6:40:c7:09:e6:
ee:04:ae:8f:5d:88:97:f2:93:0f:35:d1:12:06:bc:
ae:e6:45:84:8a:8d:9d:a8:d4:ea:5a:87:2d:7e:4c:
82:cc:5a:b9:be:2d:e4:41:62:fe:a0:13:01:3f:25:
32:b3:5c:0f:e9:61:66:e8:e8:11:7e:c2:25:67:24:
41:4a:3d:ed:2f:3e:48:79:ae:78:e2:0d:c9:c5:64:
02:5b:f3:6c:ab:e0:82:3b:07:6b:06:d1:1d:c7:7c:
63:9d:e1:d0:b3:9f:cf:8f:8a:df:19:f3:aa:74:ce:
21:18:32:e3:ba:86:c7:7a:b7:28:7b:e3:86:0c:c4:
64:18:dd:80:9f:7e:fb:89:d7:db:5c:d5:6e:0a:11:
ae:a3:39:87:ef:44:12:05:a9:35:86:24:b5:96:02:
ff:d5:d0:fa:c1:bf:fe:c9:82:be:64:93:4d:00:16:
75:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:26:BC:B7:C2:A6:14:01:D0:F0:C9:5B:32:11:DE:7E:37:DB:73:28
X509v3 Authority Key Identifier:
keyid:D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:84:72:e0:e2:49:74:3b:4e:dd:9b:cf:3d:8f:58:d2:5b:db:
10:3a:9e:b6:a7:86:2a:8d:13:a4:51:eb:da:cf:76:4d:a5:b5:
63:65:39:77:f1:cd:3e:4c:92:a2:64:ad:18:0a:cb:79:58:65:
1f:64:d6:18:23:0a:26:1b:93:c6:0b:c9:37:88:0a:85:53:df:
54:12:65:0b:13:ff:9e:01:26:c0:e3:a9:6a:75:ae:4b:37:c7:
62:8e:87:c7:72:84:1d:d6:60:2e:ff:ef:0e:04:4e:19:d6:dd:
54:ff:ed:83:d1:c9:7c:cf:55:46:67:05:93:b3:9f:c0:65:eb:
bd:1a:28:84:74:6d:58:ba:32:5d:2a:fd:4d:b0:eb:53:23:69:
0f:37:95:77:5e:b7:a0:70:63:53:da:90:f0:a6:f1:94:a9:41:
6f:fc:9f:b5:32:12:96:dc:fd:2a:04:75:dd:94:5c:60:32:1e:
9f:0e:ab:9a:7c:c8:19:c7:6b:7a:4b:3a:73:ab:0d:15:4f:e1:
28:fa:3a:c7:4f:39:f7:9c:3f:77:c9:c1:53:59:5b:06:11:6f:
b7:72:42:41:22:a4:65:96:b7:e5:ad:32:49:a6:bc:21:de:44:
13:bc:29:b7:73:5e:fe:c9:b9:b2:c4:42:fb:11:fb:d6:d4:dd:
9b:a2:9f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:56:37 2025 by rpki-client