Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
File: 1QibzgjFXapXtPOjyQcPs5GFPM8.mft (raw, json)
Hash identifier: lWW2l860GpGFHQLxyun/cx4IBcbgwWPHpOIKzdtBIfg=
Subject key identifier: 37:C3:44:DF:37:33:FC:11:23:43:63:4B:B3:8C:10:33:EE:C4:01:8D
Authority key identifier: D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF
Certificate issuer: /CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf
Certificate serial: 01987CAEBA829A12C5DD148C81FDA349819E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
Manifest number: 0AF0
Signing time: Wed 06 Aug 2025 00:01:22 +0000
Manifest this update: Wed 06 Aug 2025 00:01:22 +0000
Manifest next update: Thu 07 Aug 2025 00:01:22 +0000
Files and hashes: 1: 1QibzgjFXapXtPOjyQcPs5GFPM8.crl (hash: fpKjFxUqgIQyQf1QlqfaZgH1BeR1awgYLWZCPUPn0F0=)
2: Vf8IRTOjd5EHRik_XU5SL231JR0.roa (hash: pdMIDPOwO8DUN6tctG8DJMO1R37Vl0PhbVyMv6IZEJE=)
3: x75CgHaNcNlIrskWea67UxRrM1c.roa (hash: xJt3cVolGlaYguNEQZsOwCLANVkSIZwIfqNsviXM16Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:ba:82:9a:12:c5:dd:14:8c:81:fd:a3:49:81:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf
Validity
Not Before: Aug 6 00:01:22 2025 GMT
Not After : Aug 7 00:01:22 2025 GMT
Subject: CN=37c344df3733fc112343634bb38c1033eec4018d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:84:6a:27:c6:0b:05:ee:ef:f4:49:82:df:52:
ed:dd:b3:98:a4:3f:b1:c6:77:fb:cc:4e:28:84:75:
19:a6:94:c1:7d:de:23:2a:73:e4:21:0b:16:35:be:
68:4a:f8:a4:8a:ba:9f:78:73:86:be:e2:c8:01:45:
14:71:2c:24:da:ed:10:65:d4:7e:9c:ca:e6:a4:5f:
61:c3:6e:ee:33:2a:3c:6f:7f:de:43:92:90:c2:c2:
a1:db:01:d7:fc:a1:ad:8f:5f:21:64:7a:7e:e1:c4:
d6:f1:1b:93:6c:c8:dd:e1:5b:d2:d7:21:95:a4:68:
dd:3f:3f:c8:f6:02:41:74:32:9f:bd:74:17:7b:f6:
d7:5b:62:33:5c:b5:54:ee:f0:6c:c4:a1:5a:22:f1:
da:58:96:87:57:f1:fe:a1:d8:5c:79:a7:06:a7:24:
d3:d0:c7:e1:d5:80:16:05:86:cd:cf:5d:85:c3:34:
8d:7e:57:1a:c4:59:2f:c8:26:e0:5f:cb:60:aa:ba:
ea:88:d2:a1:c5:8b:86:11:26:fa:72:b3:93:72:ee:
1c:df:e5:6f:d5:c5:17:6b:28:7d:ee:d9:04:e6:b4:
a1:95:fb:de:0d:20:48:ff:29:98:29:bb:08:fa:5d:
ee:04:32:18:a5:74:b0:aa:12:ae:2c:ed:6f:08:a7:
9e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C3:44:DF:37:33:FC:11:23:43:63:4B:B3:8C:10:33:EE:C4:01:8D
X509v3 Authority Key Identifier:
keyid:D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:23:54:7f:45:fb:53:70:59:81:0f:a7:81:2b:4e:14:fc:87:
44:a1:4a:91:dd:73:89:3c:22:e3:96:3f:20:3b:7f:84:59:10:
4a:48:c4:08:7f:47:e9:d5:21:68:13:ff:a9:e9:4b:c3:4b:fd:
cd:97:b0:0a:45:a5:4a:e1:50:09:7c:a8:1e:cf:45:1e:3d:fa:
b3:55:b4:12:56:dc:46:93:91:54:58:3e:a6:e3:dc:cf:de:1b:
ac:38:63:7d:1d:1c:fb:fc:48:0c:e5:06:a7:49:74:9a:99:c0:
37:ab:b0:df:05:ec:4f:ff:d5:4d:83:4a:fd:4d:bb:57:63:3b:
af:b8:fa:6f:36:06:13:b8:b7:4c:db:bf:53:bd:52:74:1d:ed:
67:fb:b5:2f:e6:c1:b3:b7:e5:3b:8b:7c:84:91:bc:c2:83:6f:
2c:e0:81:fa:1b:6b:91:13:c3:63:6e:bd:dc:00:c1:43:23:47:
40:21:bb:5b:a1:f1:97:d0:5e:39:2b:ca:32:61:a1:fc:b9:2d:
db:1f:07:e1:f6:19:39:10:40:29:01:f1:13:18:29:37:02:8b:
73:7c:50:63:44:75:15:ae:26:17:91:6c:1d:21:6f:aa:d0:4c:
49:66:d5:c2:d8:81:6c:53:c2:1a:e0:d9:55:82:00:df:46:fe:
5d:40:a5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:21:58 2025 by rpki-client