Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
File: 1QzaSMNeVOuAJXWqpAjM5XmSchY.mft (raw, json)
Hash identifier: ZlDObVb7bAyTZLhcF5as49Nab94zfmszg5gxCR+0rCQ=
Subject key identifier: 1E:33:B8:EC:D2:9B:F2:37:48:8F:D0:35:91:C9:CC:99:E2:83:F1:A7
Authority key identifier: D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16
Certificate issuer: /CN=d50cda48c35e54eb802575aaa408cce579927216
Certificate serial: 019872987A8C777EA74F1CDB4A8991BCAD07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
Manifest number: 0655
Signing time: Mon 04 Aug 2025 01:00:52 +0000
Manifest this update: Mon 04 Aug 2025 01:00:52 +0000
Manifest next update: Tue 05 Aug 2025 01:00:52 +0000
Files and hashes: 1: 1QzaSMNeVOuAJXWqpAjM5XmSchY.crl (hash: Fbd0bTwkjNNIkGds4a2V1Pjlnm/wV9QwysILX0kIKSY=)
2: hth3rJjFWs6NUkK-o0tTbHyr4L0.roa (hash: Vn4AMxs64boyWbgENvm4Of96GFQtj+G6HAjnQ0teAh4=)
3: lPDpfx3Te7zjZCAdY5UFziIAeNM.roa (hash: 5bkDE5sFGFyGe5UEk23hluwD8i8ffdDbAYDQQoPB27A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:7a:8c:77:7e:a7:4f:1c:db:4a:89:91:bc:ad:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50cda48c35e54eb802575aaa408cce579927216
Validity
Not Before: Aug 4 01:00:52 2025 GMT
Not After : Aug 5 01:00:52 2025 GMT
Subject: CN=1e33b8ecd29bf237488fd03591c9cc99e283f1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5d:35:0f:4c:95:53:f9:d7:e6:8b:66:33:68:
3b:b0:e0:c0:4d:92:7e:03:da:b9:53:ea:80:3c:1a:
9c:b0:9b:48:31:be:3c:ad:7e:0d:cd:a7:39:43:33:
50:70:c8:59:42:74:f1:26:27:ab:31:8f:8b:13:a3:
d0:11:4c:51:ff:36:14:af:fc:85:46:61:e0:31:85:
d6:07:09:d6:df:1e:25:b7:25:a3:8a:b8:e9:71:2b:
91:f3:ac:69:ab:b0:ae:99:a0:c7:f7:29:c7:bd:ed:
16:6a:96:33:74:fe:07:ee:fb:c0:f4:09:f9:38:04:
49:2a:3c:27:f6:d1:c3:9a:d4:b1:27:dc:5d:36:2a:
9e:7b:1d:89:11:53:cf:b6:f9:89:dd:6b:0c:e8:00:
08:93:e4:63:07:de:45:6f:c6:72:d5:8f:fc:1f:6f:
39:e0:f2:5b:86:e2:21:f4:8f:a3:72:47:72:7b:e4:
9f:6d:b2:5c:34:f5:df:0b:31:64:93:5b:0f:53:60:
42:3f:30:02:02:b1:87:e3:29:90:bf:dd:12:5b:8d:
60:85:25:3c:b3:85:61:48:a7:b7:4e:fc:d0:5d:ec:
2f:68:4b:ab:4d:10:44:07:38:ac:af:0f:67:78:94:
08:04:f6:f1:1b:b9:d3:1f:aa:18:cb:a0:38:26:e7:
06:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:33:B8:EC:D2:9B:F2:37:48:8F:D0:35:91:C9:CC:99:E2:83:F1:A7
X509v3 Authority Key Identifier:
keyid:D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e0:1f:d6:6b:c4:1f:49:7e:f5:40:70:e1:09:6c:75:fb:b9:
d8:19:57:fa:d6:2f:6e:83:8b:9c:3a:85:97:31:77:56:b9:bd:
43:ca:8c:e2:a3:46:1f:b8:bf:eb:10:cd:64:a4:e4:22:d7:59:
f8:d3:b7:5e:bc:cd:89:a5:83:3f:04:c7:bc:4a:95:fe:29:1d:
33:7c:b1:6b:2c:b8:62:4d:0c:c4:20:c0:af:a3:20:00:e9:aa:
d4:15:90:be:36:d9:04:15:d3:12:54:6d:0f:25:44:6a:13:ba:
80:7d:a6:ad:63:11:d8:af:e6:b9:f8:4a:ba:6e:3e:a0:5f:ec:
9b:b8:0f:f2:17:80:a7:9a:16:85:05:dd:32:b7:72:36:cf:30:
83:88:f6:e9:2e:57:15:6c:f5:95:38:f1:26:2d:b1:23:ba:dc:
90:20:fd:97:27:61:c6:5b:03:10:14:5a:17:fe:9e:78:8c:04:
52:ae:cc:58:b8:32:76:bb:b2:92:00:98:33:d0:16:e7:c5:3d:
c5:93:a5:6f:ea:07:20:9e:6e:ba:95:a6:2e:2e:00:15:09:67:
2a:49:46:e5:b3:bc:d0:d2:0d:96:bf:2d:40:46:e9:5b:e8:6a:
73:f6:51:28:8f:56:78:22:8f:37:42:5b:1a:d5:33:6b:b5:39:
92:a8:2b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:53 2025 by rpki-client