Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
File: 0Q1bMLRse5ey28RYnOo2Iq11YVY.mft (raw, json)
Hash identifier: VaRWeoP27zXYZV2f9aUqDnvIABMfrNVkv4JJ9yJCoMU=
Subject key identifier: 2C:2D:D5:49:79:84:61:95:2B:34:14:DB:D0:F6:24:BB:FA:AB:D9:B0
Authority key identifier: D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
Certificate issuer: /CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Certificate serial: 019873E40D742267E88F357A5986D15A8082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 07:03:02 +0000
Manifest this update: Mon 04 Aug 2025 07:03:02 +0000
Manifest next update: Tue 05 Aug 2025 07:03:02 +0000
Files and hashes: 1: 0Q1bMLRse5ey28RYnOo2Iq11YVY.crl (hash: sadnyiljPg7BWSIcTLFYrgdkTuXmoSEw6CFW8dR8GoE=)
2: U_YkWvIbAgSV60H8mUEYqY805XM.roa (hash: rIv2yHmGWREBYz1rPgWWMboLSc3Q207kM2zjs8JlUoo=)
3: muAVUu1aPnEHmAc-r1xMJMX_xwE.roa (hash: t/IG40S9IeJr1JmuDkCemhTExv33uEsQ8ntTYx4HhXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e4:0d:74:22:67:e8:8f:35:7a:59:86:d1:5a:80:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Validity
Not Before: Aug 4 07:03:02 2025 GMT
Not After : Aug 5 07:03:02 2025 GMT
Subject: CN=2c2dd549798461952b3414dbd0f624bbfaabd9b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:97:aa:ca:e4:6d:d9:b0:40:10:53:a4:eb:af:
46:f9:66:8f:87:4c:f5:85:83:ef:61:4a:fa:83:9b:
37:44:f5:a6:34:59:c7:cd:94:6c:4b:8c:5c:91:6b:
87:d4:6c:42:2c:09:2e:98:06:15:39:df:39:5a:f8:
17:42:de:b0:30:e0:71:39:95:81:81:d8:77:82:e7:
dd:49:10:25:9b:9d:5b:f0:7c:37:87:64:17:ed:44:
9d:b7:15:1f:f7:6e:3a:83:ad:fd:b5:64:60:ec:9d:
39:f8:13:11:fd:b6:29:7a:a0:c1:a4:ff:94:3b:c2:
d3:38:c7:67:7b:af:2b:81:f9:f0:ab:ed:68:99:2b:
48:ca:f6:7c:a2:3c:a8:69:75:67:e5:b9:56:f3:c0:
2b:3e:84:6a:e6:05:49:7b:70:b2:96:0c:24:d5:0b:
69:9f:a7:40:16:bd:8b:32:b5:9d:32:3a:7c:9a:4c:
85:32:a6:ec:1e:9d:ae:21:ca:37:82:ee:d2:45:9d:
95:5f:fb:3d:7a:2f:a5:40:9a:50:cb:8b:b5:15:92:
42:21:ca:2c:45:ec:91:f9:2b:e0:4b:6a:f3:9f:8a:
3c:ce:0d:17:4e:f7:38:24:b2:e4:00:4c:82:74:37:
7b:ca:58:f2:70:53:1c:53:d7:6e:5c:8a:df:8e:5d:
25:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2D:D5:49:79:84:61:95:2B:34:14:DB:D0:F6:24:BB:FA:AB:D9:B0
X509v3 Authority Key Identifier:
keyid:D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:54:52:6d:a4:a0:a9:0d:9b:0f:d9:58:ae:8a:5d:db:b6:0b:
86:53:4c:07:7f:be:bc:a7:e1:32:2c:d8:45:ab:d5:22:da:94:
5f:2d:51:67:4f:e1:12:a4:d3:b1:b8:dc:63:ea:77:82:b7:31:
13:70:ff:5d:a9:e1:4a:c7:79:38:b3:98:05:8b:06:f3:99:b8:
e9:f2:e9:36:f7:df:e4:3b:79:ac:28:14:74:73:26:1d:32:c1:
76:75:71:55:93:9a:8f:9e:92:8f:ac:78:68:ba:bf:15:e2:0a:
68:62:bc:49:b7:99:6a:d3:a5:06:ad:2b:91:77:a1:ef:e2:ad:
0d:e0:6d:42:04:5e:50:17:08:8e:fb:2a:a7:5c:4d:99:5e:c3:
ed:39:1e:d6:a5:71:5a:40:2e:27:0f:80:f1:fb:04:e8:25:25:
b4:ff:bc:39:8c:07:f8:f7:4b:0b:4a:3d:b5:35:17:a5:c6:e1:
78:26:86:cf:51:c2:95:4a:34:ac:85:d4:f9:39:ad:07:44:b9:
20:bd:f0:75:9f:fe:ac:1c:2c:da:60:f3:e8:5e:2c:5f:76:00:
d5:a3:08:48:52:06:fa:e9:cd:b5:68:89:a0:ec:cc:59:70:0b:
b3:db:f4:54:8e:a7:0c:4f:d6:bd:f7:84:57:60:a0:8f:42:3b:
19:72:02:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:22 2025 by rpki-client