Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
File: qTS43sEoG8VDF8f-0OmsvHuXysc.mft (raw, json)
Hash identifier: 9xDI0X/fTHgdzywoZwdOgWNoEZxAZxpivHYEn+qqluQ=
Subject key identifier: D1:A5:A2:70:39:9E:B7:E1:A5:B6:D3:7F:61:61:43:8B:73:F6:E9:30
Authority key identifier: A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
Certificate issuer: /CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Certificate serial: 0197B745359462CF0F3828FE1CCAE6812C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
Manifest number: 15BB
Signing time: Sat 28 Jun 2025 16:00:55 +0000
Manifest this update: Sat 28 Jun 2025 16:00:55 +0000
Manifest next update: Sun 29 Jun 2025 16:00:55 +0000
Files and hashes: 1: nNICaFb7G3xV0xaZvY4tLFZeqjU.roa (hash: 5uzWSjZq0ATl8Nrn/VGx6JZA+5X6g81sHleJ+o0B2vM=)
2: qTS43sEoG8VDF8f-0OmsvHuXysc.crl (hash: cgdZxMoN+aO0QVAxt4SO8/Qd6CrNrRgu73u7v0cLcHM=)
3: vlECbF8HkBG6WpBhMBZnOl_AraI.roa (hash: 3UR9pQsXBE1n+38LaDwJGSYsS95ZptnvsHsDatSDo+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:35:94:62:cf:0f:38:28:fe:1c:ca:e6:81:2c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Validity
Not Before: Jun 28 16:00:55 2025 GMT
Not After : Jun 29 16:00:55 2025 GMT
Subject: CN=d1a5a270399eb7e1a5b6d37f6161438b73f6e930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:84:ce:ba:39:28:7b:ba:62:a1:93:9d:0c:b7:
17:10:2e:86:78:ad:6d:19:f6:b2:01:48:dc:a8:64:
22:58:61:40:97:56:fa:ae:32:d9:be:c7:2a:56:b5:
2c:71:1e:c4:f5:47:33:0f:9a:0a:5d:2d:5b:60:90:
2e:94:02:57:9f:c1:d8:54:3c:50:c6:34:c4:04:5e:
d5:69:d9:7e:54:bc:13:4c:d1:e2:fe:ce:f4:44:76:
e8:53:88:af:9e:b3:b6:25:41:d1:c3:8f:d0:50:4f:
0f:f4:38:3f:bd:53:83:79:97:3d:15:17:35:2a:cd:
2d:2b:99:c3:77:9c:b2:16:11:e4:7f:c8:b7:96:73:
1b:05:95:82:fa:46:77:b6:13:65:0f:84:3f:77:36:
22:63:9a:a3:5a:cf:40:57:6a:d1:af:e2:c6:78:f4:
1c:a8:b7:b5:34:61:b4:03:0d:c8:cc:f9:b7:78:bd:
ae:91:c1:d8:71:22:02:62:a8:4d:96:92:c9:e9:b0:
73:f9:86:1a:5f:97:d0:cc:14:14:39:9b:80:ba:60:
81:90:09:9b:aa:f9:25:d9:0e:6b:be:9f:2b:5c:e5:
29:9f:be:52:39:c5:e8:06:a7:a2:03:d2:cd:cf:15:
fd:d5:10:c6:bc:1f:f4:d6:ea:8e:66:99:71:63:cc:
42:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A5:A2:70:39:9E:B7:E1:A5:B6:D3:7F:61:61:43:8B:73:F6:E9:30
X509v3 Authority Key Identifier:
keyid:A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b2:f0:69:78:aa:10:c9:33:45:e1:f3:a7:c3:6e:ea:a8:1d:
f7:84:e5:90:fb:bf:6a:c6:e1:52:19:84:8a:2d:fd:52:13:b7:
04:f8:87:bf:23:da:4b:67:97:75:1b:ea:f7:d4:ba:80:f7:76:
cc:5f:d4:e5:85:9b:f7:ec:91:12:fb:39:40:2d:31:72:80:ab:
d8:ac:f7:81:95:63:43:e6:87:60:30:82:41:1a:ce:a3:33:b0:
f8:05:97:f6:fd:e5:a2:52:25:48:38:1e:4b:1a:ef:3b:73:ea:
f4:ac:58:08:ff:88:4c:8e:30:81:57:8f:d1:b4:a1:4f:41:48:
42:c9:93:46:2f:45:2c:fa:30:bb:d5:8b:ad:ec:f5:80:15:bb:
f6:27:14:00:4e:ca:6a:b9:04:d5:70:b6:0a:0f:8f:96:df:ed:
48:77:77:28:9d:97:32:76:97:c7:92:75:1b:85:a0:41:b8:eb:
8e:34:f7:9f:4f:ef:40:d9:84:54:86:67:c6:7f:d8:9b:c5:dd:
a9:48:13:4b:36:f0:21:8f:83:b2:be:26:b7:e5:9b:11:b2:07:
05:c2:e2:11:fd:06:b2:f6:b4:b9:40:55:07:23:cb:c1:c7:24:
11:15:b3:0d:59:3a:8e:92:b1:5a:4d:05:75:be:46:3d:fb:3c:
a0:c7:bc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:29:49 2025 by rpki-client