Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
File: 0QENo1diQjJM77LIHBM5psDjtAM.mft (raw, json)
Hash identifier: QHMQ5LQVloXUDS7h2emtJLVQsyC4Fow+E9ftjnSAViQ=
Subject key identifier: 1F:E8:0C:D9:FD:8C:AB:BB:1A:84:F4:F7:EE:B4:CD:62:ED:A7:98:46
Authority key identifier: D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03
Certificate issuer: /CN=d1010da3576242324cefb2c81c1339a6c0e3b403
Certificate serial: 01976BBCB66188D4F8C553742511319966D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 00:00:18 +0000
Manifest this update: Sat 14 Jun 2025 00:00:18 +0000
Manifest next update: Sun 15 Jun 2025 00:00:18 +0000
Files and hashes: 1: 0QENo1diQjJM77LIHBM5psDjtAM.crl (hash: S+hDsJEG/28jIZMdtbykw2C7hzUkUIfHJau2XR1ZEk0=)
2: axw8eTRN4luwNfUppGZPJDLFRnk.roa (hash: 941/E7Pt0vnLLqpxlWNVKlBSpW2P0hox/ZuN05lIlOE=)
3: qL1excp8Az_0o7x1vHRMJ6uUBq8.roa (hash: etXW7FKK/vCX8HY/wRSJVfpHZyWVeKG9hX8M0M6D1Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bc:b6:61:88:d4:f8:c5:53:74:25:11:31:99:66:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1010da3576242324cefb2c81c1339a6c0e3b403
Validity
Not Before: Jun 14 00:00:18 2025 GMT
Not After : Jun 15 00:00:18 2025 GMT
Subject: CN=1fe80cd9fd8cabbb1a84f4f7eeb4cd62eda79846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:91:6c:6e:b5:79:09:9b:b4:52:18:a2:da:0f:
ef:6d:48:21:f0:9f:5f:ee:47:59:ae:8b:fb:54:b4:
42:d8:b2:4e:b7:55:78:68:f9:98:c4:51:df:83:35:
6f:6f:9b:d5:69:59:38:5c:53:19:82:4b:44:8c:18:
6b:ba:4c:95:59:1a:46:9e:d2:2e:5d:48:55:16:57:
b8:64:f9:97:4c:a7:b3:92:14:3b:6e:ef:c4:e1:33:
d8:07:5b:07:18:6e:4a:3a:a1:1f:18:e1:d8:88:e5:
77:44:98:a5:73:25:96:29:f9:c7:27:fc:cb:60:de:
de:e8:ae:88:57:e1:48:1c:ae:3d:9c:02:78:5b:26:
85:e5:21:40:a9:41:cd:ae:0f:d8:dd:e9:23:a4:7c:
5c:14:a6:47:17:37:dd:09:d9:76:08:db:1b:50:6d:
57:00:f4:f0:6d:c5:a2:44:97:7b:6b:f6:a8:6a:02:
f9:b3:20:72:21:1f:02:3c:ed:9d:56:fc:3a:20:85:
11:e2:6c:24:63:2a:21:97:41:e5:37:9e:10:70:81:
fa:63:d9:23:75:35:e1:d4:e2:76:1e:ae:bf:60:59:
30:dc:a7:1a:1e:77:05:f0:63:0d:62:1f:c7:12:8a:
ff:32:24:20:f2:8f:dd:b0:29:d1:b2:f4:37:7a:f2:
0d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E8:0C:D9:FD:8C:AB:BB:1A:84:F4:F7:EE:B4:CD:62:ED:A7:98:46
X509v3 Authority Key Identifier:
keyid:D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d6:9c:aa:c0:ae:f3:3c:69:0c:7d:88:a7:37:c3:ed:05:da:
fe:a6:12:e8:37:57:15:62:09:7e:77:b7:bf:db:4c:e6:d6:cd:
e7:f3:55:3e:74:7d:10:3c:8e:be:65:3e:3a:7c:f9:30:ae:98:
14:61:d2:0e:50:7c:41:e3:42:ae:a9:69:73:ef:82:f5:a4:5c:
44:44:1e:cd:f7:45:90:6c:99:61:55:11:86:0b:2e:6a:b6:56:
1e:60:09:64:84:36:64:de:6d:e5:9a:03:06:36:09:a9:a1:f3:
99:22:b8:19:aa:02:c4:f7:b1:2e:fe:41:9d:a7:d4:62:06:48:
22:d7:c5:90:63:ce:82:ca:e1:4b:07:30:42:fe:05:f6:ee:bd:
ac:29:e1:03:2d:73:6a:6d:6e:74:4e:5d:62:e3:96:d4:8f:5c:
5f:1e:e4:d7:24:d0:ab:3f:11:5c:15:22:81:9d:d4:d1:8f:43:
4d:52:13:fd:15:89:20:76:13:05:94:fa:25:3f:13:b4:ef:10:
24:69:67:b6:43:fb:b5:7a:ee:0e:13:30:da:53:f0:b3:2a:4b:
25:8a:96:7f:47:23:5d:68:00:40:1d:77:67:1c:c6:1c:0f:0a:
8a:c5:92:6d:b7:93:4a:f4:63:38:ec:39:b6:a1:f1:27:3b:7f:
d8:ab:ca:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:22:11 2025 by rpki-client