Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
File: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft (raw, json)
Hash identifier: j1V4YjivAmRFP21vjWyXl0/PhHgSG+VygXu9fJcTYoY=
Subject key identifier: 60:18:27:98:81:47:1D:4D:1D:39:3C:C9:0B:15:BA:43:98:7E:26:31
Authority key identifier: A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
Certificate issuer: /CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Certificate serial: 0197B82111994F5FDCA527B4D5C232FABA62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
Manifest number: 114E
Signing time: Sat 28 Jun 2025 20:01:03 +0000
Manifest this update: Sat 28 Jun 2025 20:01:03 +0000
Manifest next update: Sun 29 Jun 2025 20:01:03 +0000
Files and hashes: 1: JkN8bIkVpi2C1QQ33sarGe3s8jc.roa (hash: qS4cYRYxbkUSSNoTxCHI4UmRIFnlPxYoJcBSjDIdM1g=)
2: d03ojnbuBeIJ-lnd7OihnLWEVxw.roa (hash: XlMC0ZRLbmiqoXJQRP7mRdNP4FsXpGfEzY9nYp5h2sg=)
3: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl (hash: 4hynSEPDyuyDfSOigIOMul0schdlYZsLLqlQPG7i1Rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:11:99:4f:5f:dc:a5:27:b4:d5:c2:32:fa:ba:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Validity
Not Before: Jun 28 20:01:03 2025 GMT
Not After : Jun 29 20:01:03 2025 GMT
Subject: CN=6018279881471d4d1d393cc90b15ba43987e2631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2a:4b:55:b0:d9:72:32:6c:dc:0b:42:45:4a:
d4:a1:f3:ce:3c:7e:a7:fd:6a:ac:47:d6:0f:27:d4:
13:71:2e:9d:08:d0:2a:30:bc:2d:f0:92:b0:23:08:
bd:ac:92:50:71:0f:e8:70:96:60:ae:ba:80:6e:43:
6a:7a:e7:ad:f0:a9:a9:88:7a:86:2b:03:41:36:14:
3c:bc:4d:8a:3a:3d:14:1f:48:86:3d:70:9f:ff:ab:
60:22:dd:b1:e1:89:13:c6:95:63:1d:de:b0:88:9b:
42:3d:ba:6a:94:d5:7d:62:9c:32:b2:26:19:8a:85:
ce:f5:be:c5:ba:7d:e2:0a:0d:5c:3a:eb:0f:69:f6:
ad:87:30:dc:ef:fa:bb:65:6a:56:6c:ad:23:48:cd:
2a:bf:70:12:ba:25:98:ae:bc:9d:6a:e9:4c:21:c7:
af:99:ad:49:5f:24:23:56:0c:c1:48:f5:5f:a6:d6:
11:83:16:11:9b:64:8b:61:5c:5f:f9:5f:d5:99:76:
af:91:3f:b8:8a:e8:60:bd:62:a9:a7:36:88:99:d5:
08:78:97:06:28:ad:36:c5:81:b6:93:3d:a4:7a:6b:
48:b2:0e:4c:99:15:2f:35:51:76:a8:48:f0:47:ad:
71:82:43:00:98:a0:43:f7:5f:6d:c7:0b:48:e3:d2:
32:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:18:27:98:81:47:1D:4D:1D:39:3C:C9:0B:15:BA:43:98:7E:26:31
X509v3 Authority Key Identifier:
keyid:A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:88:65:4f:75:e0:34:19:1b:88:90:6a:8f:b7:97:04:6f:79:
71:2c:e7:26:20:51:d5:09:54:3c:d5:d5:26:d1:c8:e6:80:10:
44:7b:12:a6:64:8a:fe:ab:56:89:a5:be:64:06:70:8c:e9:a8:
35:7f:72:3e:8b:00:30:a3:40:51:bf:58:d9:e8:1d:ec:4b:15:
c8:3c:72:df:0a:54:2b:60:cc:6f:23:20:29:36:a6:9d:84:57:
1c:d9:2b:84:dd:e0:26:b4:b4:45:c9:66:13:7f:f6:31:5c:8c:
87:2e:77:2e:e9:79:3c:f7:07:2a:ce:8b:f0:12:af:ef:df:4e:
b4:8b:59:c0:60:61:36:ff:50:da:15:62:c5:e2:17:dc:ec:59:
c8:74:39:4b:79:67:a4:52:48:b0:0f:5c:28:c5:cb:5a:a2:79:
b7:a4:a9:68:46:c2:f0:7c:5e:ac:2c:d4:e9:2d:8d:3e:4d:a2:
36:12:a8:59:7e:00:b1:26:9e:4d:8c:55:fc:a2:84:37:a3:49:
98:9e:5e:b5:61:96:cd:22:21:f4:36:5e:62:ab:b6:85:7a:01:
6a:dd:5d:1f:f9:fc:e0:ab:87:e2:68:8a:d7:67:8d:de:85:90:
3f:7b:70:5f:aa:8a:c1:73:c8:1b:fe:da:06:35:7c:d3:0d:c5:
db:c6:6d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:26:59 2025 by rpki-client