Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
File: qPSR8hDFe_RvtS1K8i5-z29M2oA.mft (raw, json)
Hash identifier: ousmRPsN7vr5NwAmofSM7PRSCIJ5UTb6EODflQ2FSvA=
Subject key identifier: B2:A8:7D:18:E5:D2:B2:79:15:E2:2D:50:F1:CF:1A:86:3B:60:C2:C2
Authority key identifier: A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80
Certificate issuer: /CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80
Certificate serial: 0197B820CDA6E666468E202AB4911DAA17C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
Manifest number: 0B92
Signing time: Sat 28 Jun 2025 20:00:46 +0000
Manifest this update: Sat 28 Jun 2025 20:00:46 +0000
Manifest next update: Sun 29 Jun 2025 20:00:46 +0000
Files and hashes: 1: ZZqXGnxEBhLfDD9lB7yOqiX8_H0.roa (hash: AmgNgGv8HaEfNgQu4ILsUPklwcafU90+t65Aj2bSX9Y=)
2: qPSR8hDFe_RvtS1K8i5-z29M2oA.crl (hash: beNs9OeqoyPTK3yhDxzPrMs2bbrermQf0BoZP5A4ZPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:cd:a6:e6:66:46:8e:20:2a:b4:91:1d:aa:17:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80
Validity
Not Before: Jun 28 20:00:46 2025 GMT
Not After : Jun 29 20:00:46 2025 GMT
Subject: CN=b2a87d18e5d2b27915e22d50f1cf1a863b60c2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:08:0e:a1:4d:08:e6:94:ac:14:ef:ab:fa:bc:
92:95:71:bf:d5:d3:98:bb:44:aa:10:0c:2d:3e:3c:
0f:55:cf:86:ba:8e:ad:91:97:22:7e:9b:c5:2b:94:
41:b2:34:64:20:80:41:e5:b1:c1:b7:7d:ef:5a:a6:
7b:7e:cd:67:6b:20:15:03:b0:62:1e:da:dc:2e:03:
d6:95:5c:75:24:fb:3f:38:2b:c1:3a:de:20:41:a8:
7d:61:f5:23:69:03:89:81:1b:72:08:df:d2:07:6d:
87:ce:ba:6c:4e:0f:e8:ca:b9:09:3e:76:91:4d:4c:
e2:6f:8e:fb:2f:f5:c6:e7:27:31:26:c2:a0:f1:ad:
fe:13:cf:cd:fa:06:2a:ee:78:9e:ea:4b:5c:28:0a:
e5:3a:d1:ce:8d:4d:5b:71:c7:0f:ce:73:10:e7:8c:
a2:ff:82:da:25:dc:4c:f6:1b:85:1a:3f:1e:9d:69:
ff:58:8b:c0:f4:8a:3b:44:14:fe:2c:5e:c9:08:84:
b1:40:cd:59:38:44:23:4e:3a:a7:3d:e8:f2:06:41:
12:f4:88:4e:be:7e:7e:42:08:97:5e:9f:e0:8e:c3:
f4:ea:e2:51:3c:82:f7:63:6c:68:0b:0d:de:86:72:
76:66:cc:8d:34:5a:5e:1f:00:c9:8e:72:05:0f:b2:
6e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A8:7D:18:E5:D2:B2:79:15:E2:2D:50:F1:CF:1A:86:3B:60:C2:C2
X509v3 Authority Key Identifier:
keyid:A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b2:85:33:86:84:cf:b0:ba:0c:04:11:63:a8:0f:a3:8f:68:
6a:1c:ce:4f:31:34:f8:2e:eb:eb:3f:c1:61:2c:6c:1d:c3:0d:
0c:b4:5c:b0:a2:03:62:be:d5:01:a0:5f:45:b3:d1:47:2b:7b:
56:73:bc:58:b6:b6:20:e1:a0:20:28:26:d4:d0:7e:e6:66:96:
55:1e:6f:25:5e:37:7a:a7:47:88:d9:0c:e6:9d:96:aa:36:cb:
a2:c2:36:c8:e0:86:ed:54:a3:00:b0:7a:f4:ba:94:b6:64:3c:
50:a2:1f:e9:d6:bb:db:1d:a2:dc:aa:cf:11:f4:67:62:51:90:
57:39:a2:f9:d7:a6:37:73:ba:6f:0d:75:b4:b3:54:19:23:0b:
4a:1f:15:e6:0b:66:87:dc:f9:ef:5e:8d:3a:b2:f1:18:af:f5:
5e:a5:14:26:74:5c:5e:64:ce:1f:09:69:20:3f:2d:c8:13:af:
d3:53:cc:95:b4:18:9f:9c:e5:d7:bb:2b:b1:2d:5c:09:e0:a5:
59:e4:9d:dd:af:3b:aa:c3:3a:63:47:95:ed:f0:ae:51:63:4b:
4d:8f:a4:c1:e0:f2:86:84:e3:b9:c2:21:42:35:bd:4d:45:09:
25:83:12:47:1b:50:ca:c8:23:cc:f8:10:5d:30:f7:bc:a3:f3:
bb:55:78:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:15 2025 by rpki-client