Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
File: 1QibzgjFXapXtPOjyQcPs5GFPM8.mft (raw, json)
Hash identifier: A312E6jHhFRajckycjrrbbITQAhwxezcGFzC0uP7Jdk=
Subject key identifier: 5F:0F:E4:27:ED:7A:B1:E1:3A:BD:A4:A6:47:22:90:FA:84:30:82:D6
Authority key identifier: D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF
Certificate issuer: /CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf
Certificate serial: 0197741B1221DB00EA5E8DB7388B3528207E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
Manifest number: 0A67
Signing time: Sun 15 Jun 2025 15:00:20 +0000
Manifest this update: Sun 15 Jun 2025 15:00:20 +0000
Manifest next update: Mon 16 Jun 2025 15:00:20 +0000
Files and hashes: 1: 1QibzgjFXapXtPOjyQcPs5GFPM8.crl (hash: HzP3nPxfq7w1iEVg+gzm21xtfqtCuAaetxSnR9lrV+4=)
2: Vf8IRTOjd5EHRik_XU5SL231JR0.roa (hash: pdMIDPOwO8DUN6tctG8DJMO1R37Vl0PhbVyMv6IZEJE=)
3: x75CgHaNcNlIrskWea67UxRrM1c.roa (hash: xJt3cVolGlaYguNEQZsOwCLANVkSIZwIfqNsviXM16Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:1b:12:21:db:00:ea:5e:8d:b7:38:8b:35:28:20:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf
Validity
Not Before: Jun 15 15:00:20 2025 GMT
Not After : Jun 16 15:00:20 2025 GMT
Subject: CN=5f0fe427ed7ab1e13abda4a6472290fa843082d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:93:92:67:db:81:e2:4a:40:ed:d0:6f:48:46:
a7:cd:90:da:77:31:73:f4:15:ca:24:e0:ac:f6:69:
2a:da:23:67:0b:c4:79:40:38:86:00:a2:59:74:98:
87:17:f8:43:3d:00:bc:0e:0f:ab:04:d3:0e:44:53:
31:ee:61:d4:84:d8:a3:e0:9d:f0:dd:f3:7e:29:ba:
c0:3d:49:1a:c4:b5:0e:ae:91:0e:a9:42:d0:a2:e4:
c2:00:83:f7:b7:3d:06:2e:cf:e3:05:0d:ba:71:45:
62:c3:d2:a0:6f:50:b5:8c:bc:8e:db:d8:56:25:bf:
ef:1b:66:e7:46:bd:d9:86:db:2c:c1:10:41:58:25:
b1:09:da:5d:ea:ed:fd:cd:98:92:ff:e2:90:29:c0:
0f:32:2a:d3:54:37:2b:ad:b1:85:b9:e0:a2:78:81:
9f:b9:fb:ab:44:ec:53:11:85:a0:80:9c:32:fb:6e:
d9:21:2a:24:0b:81:b7:fd:25:77:0a:70:e6:d9:b9:
af:23:b8:9a:35:d2:02:94:84:af:30:40:a0:a5:0b:
cc:0a:35:7f:17:7c:98:a0:93:8c:49:5d:db:dc:ed:
1a:fe:3e:68:96:eb:53:8b:99:14:1e:9c:94:ee:da:
fb:24:1c:14:db:45:b9:a4:1d:e0:cc:09:e3:f8:2c:
0b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0F:E4:27:ED:7A:B1:E1:3A:BD:A4:A6:47:22:90:FA:84:30:82:D6
X509v3 Authority Key Identifier:
keyid:D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:26:4c:fb:e8:e7:a5:14:84:d3:92:e4:71:0b:90:b0:ab:e5:
b7:47:d9:7e:fe:80:84:c2:87:38:1b:7f:1f:e5:87:35:47:d3:
bd:c2:79:f4:a3:2c:83:cb:00:81:7d:0d:08:b2:82:94:f0:41:
f0:13:44:6a:37:c6:b1:0d:e4:35:49:1c:c4:e0:7c:00:31:7c:
2f:03:07:73:07:02:21:4b:61:0e:72:1b:3e:7e:bb:f0:48:80:
03:70:7e:14:39:0a:3b:76:a3:fd:d1:dd:b1:9f:34:5d:1c:0e:
a3:42:49:c4:b3:9b:c8:9f:59:95:6f:b7:e0:fb:ca:74:6a:51:
d8:5a:86:9b:e4:f9:26:2a:ab:da:e4:c9:4f:27:8a:56:2e:a6:
8c:d0:39:21:6b:fd:a6:90:6f:13:84:e1:5b:9a:50:49:fa:e8:
0d:db:4d:60:6a:c4:ac:34:57:83:a5:15:ab:d3:26:2a:c9:15:
0e:c3:7e:c8:35:37:b1:b5:17:97:01:30:d7:d2:0b:33:eb:29:
bc:a5:80:4e:2c:b0:89:cb:c2:1e:49:26:21:4e:25:59:84:3c:
e1:9a:6b:90:3c:87:cf:89:56:48:6c:db:23:62:20:9a:b5:d1:
87:29:08:fb:93:d7:1e:fc:fd:49:c7:0f:41:c5:c8:bb:97:cd:
2d:6b:cf:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:21:19 2025 by rpki-client