Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
File: quibwwl3aKzWfC3XR9O-Gtty6Zc.mft (raw, json)
Hash identifier: F0MhWIRFf7t/LR15n+CXaHHwNd2e6az1tMxPeQosk2k=
Subject key identifier: B9:C5:D7:9D:CA:7C:E3:79:4E:97:57:75:5E:78:4D:BC:4E:D3:2C:03
Authority key identifier: AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97
Certificate issuer: /CN=aae89bc3097768acd67c2dd747d3be1adb72e997
Certificate serial: 0197B77C625B6033DAFD012531B1317BD836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 17:01:11 +0000
Manifest this update: Sat 28 Jun 2025 17:01:11 +0000
Manifest next update: Sun 29 Jun 2025 17:01:11 +0000
Files and hashes: 1: Se8jY-LoM2MVsZ37wmyygWUdZqw.roa (hash: 460xRSiSARjue5TmuazrIkrxiYolcj28Woj0bWcIVJo=)
2: quibwwl3aKzWfC3XR9O-Gtty6Zc.crl (hash: uXzHoG0yU+kgQy7E7lZ9BirmmRAdNcQGYoS9iIQ1VXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:62:5b:60:33:da:fd:01:25:31:b1:31:7b:d8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae89bc3097768acd67c2dd747d3be1adb72e997
Validity
Not Before: Jun 28 17:01:11 2025 GMT
Not After : Jun 29 17:01:11 2025 GMT
Subject: CN=b9c5d79dca7ce3794e9757755e784dbc4ed32c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:13:d6:57:92:7f:79:11:99:fc:13:9a:de:72:
82:32:c7:bb:1a:d6:d9:40:e0:42:87:39:1a:33:a7:
b9:c2:68:ff:7c:53:a2:9b:7e:9f:cc:43:02:d6:4a:
e7:68:18:64:53:80:8b:1c:be:71:d6:7f:54:76:21:
ab:8c:8d:e7:97:5f:9a:54:2c:10:87:e1:55:47:99:
3c:20:3c:43:bb:d0:dd:85:1a:8b:97:3e:ef:3e:f5:
91:df:1e:6c:5d:c6:b1:c8:12:27:ba:c7:3f:1f:11:
45:10:c5:98:0f:2b:db:ed:1c:56:6c:fe:d3:4f:c4:
27:d7:f7:fd:51:de:3b:4d:23:09:03:8a:14:5f:d2:
99:b5:87:81:c4:02:24:d4:68:70:9a:4f:cf:d0:b4:
1f:cd:e4:9f:df:97:23:44:47:50:58:54:c2:c9:56:
47:a4:74:46:21:0e:e0:ad:c6:57:d6:21:60:e1:a1:
fe:37:a6:6d:05:46:5b:15:7a:cc:8c:c4:5f:d5:5c:
c4:9a:49:26:a6:8c:f4:f9:b8:c8:01:76:13:6e:aa:
b0:d4:3e:a5:a0:ec:a1:14:e6:23:bb:ba:19:5c:ab:
98:e2:5f:84:3b:31:77:5e:bc:e0:6a:5a:ef:f4:f1:
aa:3e:1b:0e:42:35:4e:ed:cf:91:c4:be:54:11:9c:
85:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C5:D7:9D:CA:7C:E3:79:4E:97:57:75:5E:78:4D:BC:4E:D3:2C:03
X509v3 Authority Key Identifier:
keyid:AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:2e:9e:d8:9b:49:11:75:d3:72:13:20:61:02:43:8e:11:55:
a1:11:9b:83:53:e6:fc:48:bb:c8:96:4b:ab:b1:11:ab:88:fe:
f0:0e:e4:bd:b7:85:a3:4f:7d:7d:e1:8a:e5:68:a3:39:bc:f9:
57:c5:44:be:0a:e6:36:56:6c:db:43:68:ae:30:7f:46:ae:a5:
1e:b2:3f:6d:c7:c6:a7:2e:43:6a:df:e6:2b:8c:c6:6f:c4:a0:
8e:44:4b:00:44:25:1c:d8:0b:4a:88:33:5d:42:fe:d5:0d:cd:
24:b7:d7:a4:f0:4d:a7:ca:88:dc:fd:9f:2f:27:ff:88:af:56:
f8:69:c0:cd:74:9f:ab:5f:ea:2d:70:ab:77:34:65:d1:de:d7:
bd:f6:5c:3c:3c:3d:f9:b9:03:d8:6c:d5:a2:b8:02:a7:8d:33:
71:b9:fa:aa:ea:33:7b:79:40:7d:21:9d:bf:7f:7a:24:59:47:
c0:2a:6f:e6:0c:e9:13:98:d8:15:fb:f6:da:22:ab:f0:91:a5:
0b:ae:7e:88:52:96:08:db:0d:38:f9:ed:73:55:a0:2a:e6:21:
fb:bb:50:c8:8b:c9:03:8a:2b:20:80:2e:0a:eb:22:45:5d:13:
d0:c4:71:06:27:5f:72:6c:81:0f:12:93:72:90:23:72:5a:2a:
f9:14:b6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:07:14 2025 by rpki-client