Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
File: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft (raw, json)
Hash identifier: QF0UE9nqLpoxz8jR0QQgc/2+giHG3FGM3GKtrKbMqF4=
Subject key identifier: AB:34:8D:18:3A:7D:B9:56:DB:4B:34:CB:6B:7B:22:ED:03:2E:96:FA
Authority key identifier: D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
Certificate issuer: /CN=d50697943676399ac5cac6a3e476545af0df49dd
Certificate serial: 01976929C0B7A6A5173C2B3390C6D0E4FEB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
Manifest number: 07D2
Signing time: Fri 13 Jun 2025 12:00:33 +0000
Manifest this update: Fri 13 Jun 2025 12:00:33 +0000
Manifest next update: Sat 14 Jun 2025 12:00:33 +0000
Files and hashes: 1: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl (hash: 9F7DaO6a1O3rCAYiAUe8hmafEITsgAd7tVh9MyBaEeE=)
2: HUjG5wlXIs_S_8BTLmPoqHtpE_8.roa (hash: n0+Gv3Td1KV66vO7s/EA+fLLoF/hxd3hZyfSfNcw3NA=)
3: IosBMyCwhJpK9xWG1hvvXMqJa78.roa (hash: IYmZiNnkFwPxUpuPBI4TiPPkO8hQgA4aXIJpQwDNzpw=)
4: UNVV8q9mxHzj40ukB0dOp3qehFE.roa (hash: BXbVtWFAEKhtBygy5e3mBPkEaoCOBDieBmzKaOr8eAc=)
5: WJoZ3Cyd9hGNWW7azIwgdgzOVS4.roa (hash: 4VZTAKZBwZm9hthBlF7ANdxLjE6ybka+xW9+Dectll0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:c0:b7:a6:a5:17:3c:2b:33:90:c6:d0:e4:fe:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50697943676399ac5cac6a3e476545af0df49dd
Validity
Not Before: Jun 13 12:00:33 2025 GMT
Not After : Jun 14 12:00:33 2025 GMT
Subject: CN=ab348d183a7db956db4b34cb6b7b22ed032e96fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5b:f5:9d:bb:be:77:cc:af:0c:45:0f:53:af:
19:41:6f:d4:e4:8d:aa:4a:89:97:19:5b:c1:63:48:
5a:29:7e:e4:59:66:a5:f9:fa:b5:ba:7f:f5:04:e5:
87:e6:61:73:4d:87:7a:22:ba:08:b5:05:59:4b:ab:
3a:2a:af:6f:27:1d:3d:a6:79:60:c4:af:66:1a:6a:
27:32:97:3d:fc:0f:4e:63:0a:28:90:b8:f5:41:16:
29:9a:15:10:0e:ce:64:7b:6e:27:83:20:a1:08:c7:
d6:f4:d0:f6:f5:94:7d:42:8d:d3:f4:b7:5c:74:51:
21:fb:cd:ba:d1:f0:05:37:ed:51:8d:8a:79:a6:52:
e0:aa:b1:23:06:6b:92:77:8a:14:4e:cb:0f:76:58:
b2:a7:e7:77:16:28:af:cb:66:cf:53:b1:43:d3:8c:
53:8b:44:14:ec:21:c8:08:f0:bf:42:7c:22:ae:10:
4e:64:89:6d:f1:b3:2f:14:48:a3:08:c2:99:b8:82:
93:82:60:0b:f9:5f:f6:0b:27:ec:39:8b:5b:b1:1d:
ab:01:67:6c:82:02:ba:49:55:74:54:4e:d8:1b:9d:
be:db:a3:44:6f:e2:91:4c:5f:e3:9f:12:fd:36:01:
03:17:21:36:0f:52:20:60:eb:17:7b:cc:66:c0:37:
97:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:34:8D:18:3A:7D:B9:56:DB:4B:34:CB:6B:7B:22:ED:03:2E:96:FA
X509v3 Authority Key Identifier:
keyid:D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:53:72:06:14:1f:66:79:e8:3b:48:77:fa:79:5e:e7:bb:5d:
f4:b7:3c:c5:86:95:d9:75:2d:29:b5:85:a9:f4:ad:cb:42:2e:
82:c6:bf:fa:af:f1:78:16:20:0c:f5:87:31:a7:a5:75:a5:5e:
20:e4:4b:58:6c:d2:50:bc:a7:10:9d:29:32:2f:08:01:96:fc:
d3:ee:86:4e:c1:d5:d2:f8:ff:99:58:64:28:aa:2c:2f:87:39:
9f:08:69:f8:c0:36:97:89:a0:66:68:b1:7b:4f:21:9d:7d:bc:
8c:e1:cd:b0:18:4d:db:f8:c7:54:44:8b:33:fa:f8:60:34:5e:
d2:1c:1d:d5:36:b0:14:55:63:88:f2:63:2c:9d:b4:6b:0f:06:
2c:d8:df:10:3b:68:45:e2:dd:67:2d:f8:4c:91:49:24:61:33:
b2:e5:1a:40:65:0a:a6:e1:7b:c5:2c:11:1b:01:53:78:a8:0b:
df:3f:ab:88:8b:46:c2:45:7b:b9:d4:33:0e:3d:10:fe:9b:93:
e2:a8:31:ed:2b:bc:22:9c:c2:bd:88:2a:94:7d:c2:9c:6e:ea:
62:b3:16:75:61:a3:a8:3c:40:cd:1d:fc:10:a0:6c:e1:f6:6e:
fa:80:d1:1c:6f:4e:e9:15:39:7b:5c:91:38:d7:0e:d3:0a:fb:
de:72:d3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:28:28 2025 by rpki-client