Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft
File: qYW1Uh0gkBiCR48PCUGWLD6clPo.mft (raw, json)
Hash identifier: HUjZM8+rOG5uY3LKbshR14JUmsYp5HOb96wh0y8WO10=
Subject key identifier: 9A:37:8C:6C:24:A9:8D:5E:B4:B0:35:D7:15:CF:7F:BB:3F:0C:34:16
Authority key identifier: A9:85:B5:52:1D:20:90:18:82:47:8F:0F:09:41:96:2C:3E:9C:94:FA
Certificate issuer: /CN=a985b5521d20901882478f0f0941962c3e9c94fa
Certificate serial: 0197B82150229359E85D930CF5868D666947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft
Manifest number: 023C
Signing time: Sat 28 Jun 2025 20:01:20 +0000
Manifest this update: Sat 28 Jun 2025 20:01:20 +0000
Manifest next update: Sun 29 Jun 2025 20:01:20 +0000
Files and hashes: 1: 5AKIjXxvlD1ejPdjcCa3GKRo67k.roa (hash: tQg1Hre7Hi5yVH1kQPOYLNbXNBUZ5paMSfhayTmbmmc=)
2: qYW1Uh0gkBiCR48PCUGWLD6clPo.crl (hash: QG3+iNlLxyTcUxdqxoM/1L47zmhvplTTnJvNjEqWmvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:50:22:93:59:e8:5d:93:0c:f5:86:8d:66:69:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a985b5521d20901882478f0f0941962c3e9c94fa
Validity
Not Before: Jun 28 20:01:20 2025 GMT
Not After : Jun 29 20:01:20 2025 GMT
Subject: CN=9a378c6c24a98d5eb4b035d715cf7fbb3f0c3416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5d:1c:39:27:7f:b0:f1:db:14:11:25:6b:98:
d4:d6:6b:c7:49:23:84:97:20:aa:d6:9d:17:07:2a:
37:02:f7:b1:63:ea:09:01:c0:67:5a:83:93:78:6b:
03:e1:75:48:4c:9c:60:a7:37:7a:3b:94:18:27:8a:
d5:19:c6:fc:2f:95:11:51:ab:d7:1f:45:93:b0:f8:
2e:92:3a:5c:ae:16:e1:fc:ce:73:0d:7b:bc:4a:54:
95:07:55:2e:97:9d:1b:c3:00:f8:cf:0e:1a:c4:16:
6a:4e:9d:d8:7b:ef:be:a6:c9:7b:af:2b:6c:f8:da:
3e:91:30:22:b2:06:c4:90:ac:92:8c:20:65:4c:d8:
0c:ac:fd:a3:a9:01:81:da:fc:75:31:fa:3e:db:41:
02:ff:3e:1e:5d:75:9c:07:d0:59:77:d8:b9:9a:3c:
c5:26:43:39:8d:8b:74:36:99:6c:cc:9f:4d:1f:dd:
a6:3c:06:fc:57:92:ed:7c:57:40:f5:e2:5a:65:aa:
47:d0:a5:fe:60:50:78:1c:63:b6:94:fc:05:f2:1c:
05:fe:dc:f4:d7:c0:85:a0:86:22:5b:7a:c3:c5:1f:
aa:ac:65:4f:a5:26:f1:61:16:c0:4c:76:a1:ac:c5:
95:59:58:31:88:30:68:97:2b:3e:ac:7e:47:a7:20:
b6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:37:8C:6C:24:A9:8D:5E:B4:B0:35:D7:15:CF:7F:BB:3F:0C:34:16
X509v3 Authority Key Identifier:
keyid:A9:85:B5:52:1D:20:90:18:82:47:8F:0F:09:41:96:2C:3E:9C:94:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:37:74:2a:f6:e6:e3:b7:ab:fe:bd:f2:32:25:55:72:b5:c8:
95:27:f9:ec:81:b5:a1:a8:d0:6b:69:fe:df:e9:94:01:40:f8:
ef:2f:78:b7:65:62:2d:b9:75:8c:38:4c:5f:b3:cb:21:a8:79:
a5:85:5c:43:da:b9:a8:ae:a6:6a:1a:bb:ec:7e:c8:32:60:8e:
9b:2c:41:92:a4:40:ac:17:79:43:b3:e8:35:21:8f:00:88:01:
95:ac:2d:e8:e2:d4:b3:37:24:72:0f:34:06:26:3a:b2:ad:3c:
4c:43:90:08:00:64:35:eb:2b:fa:bc:1d:5f:f3:be:88:57:b5:
45:65:e4:32:93:4a:12:fe:ec:34:6b:4b:11:f1:f4:84:7c:bd:
8b:02:91:be:45:aa:7d:d3:72:4e:b2:5b:51:ab:5b:e6:14:19:
bd:3b:cb:40:11:26:c9:27:7e:c9:71:53:36:28:e0:8d:4a:70:
ef:40:06:1e:fe:31:a8:5b:b0:dd:6a:6d:cb:cb:ff:f3:23:00:
d1:ee:30:40:d6:8e:e1:69:a5:91:fd:52:14:81:6e:e5:c8:41:
59:7e:74:57:d9:4b:06:6d:99:4d:f5:fd:f2:af:84:37:fe:4d:
12:ba:e5:26:cd:19:90:61:6c:26:88:e0:f3:c3:34:0c:a2:2d:
df:88:77:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:39:24 2025 by rpki-client