Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/69f655-6879-426f-9bfb-3aed4cc7d5b8/1/qT2oa0r2Dn0ppYfQH8yYtZlsRto.mft
File: qT2oa0r2Dn0ppYfQH8yYtZlsRto.mft (raw, json)
Hash identifier: KA95P+OLROYp+NiH8wM+w9CgcGKnY1zeqy5Xvhlbgks=
Subject key identifier: 63:7E:EE:CE:C3:31:6F:AB:71:2E:8F:7B:D3:C5:63:E2:19:65:45:79
Authority key identifier: A9:3D:A8:6B:4A:F6:0E:7D:29:A5:87:D0:1F:CC:98:B5:99:6C:46:DA
Certificate issuer: /CN=a93da86b4af60e7d29a587d01fcc98b5996c46da
Certificate serial: 0197B96AF51A0553F0D427853FC4146F1A19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT2oa0r2Dn0ppYfQH8yYtZlsRto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/69f655-6879-426f-9bfb-3aed4cc7d5b8/1/qT2oa0r2Dn0ppYfQH8yYtZlsRto.mft
Manifest number: 0ADC
Signing time: Sun 29 Jun 2025 02:01:23 +0000
Manifest this update: Sun 29 Jun 2025 02:01:23 +0000
Manifest next update: Mon 30 Jun 2025 02:01:23 +0000
Files and hashes: 1: LQO8Jka9B_Ga8wSNJ-H4GWRMbUM.roa (hash: 9Hoa1JZkYbMn9eEYjrKfJwUHw8DrzeOwQXlGIKyXqwo=)
2: qT2oa0r2Dn0ppYfQH8yYtZlsRto.crl (hash: v+STpo4Zu40A57jlyGpjctE8vR1b5FOpHYJ9ouZtmBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/69f655-6879-426f-9bfb-3aed4cc7d5b8/1/qT2oa0r2Dn0ppYfQH8yYtZlsRto.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/69f655-6879-426f-9bfb-3aed4cc7d5b8/1/qT2oa0r2Dn0ppYfQH8yYtZlsRto.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT2oa0r2Dn0ppYfQH8yYtZlsRto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:f5:1a:05:53:f0:d4:27:85:3f:c4:14:6f:1a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93da86b4af60e7d29a587d01fcc98b5996c46da
Validity
Not Before: Jun 29 02:01:23 2025 GMT
Not After : Jun 30 02:01:23 2025 GMT
Subject: CN=637eeecec3316fab712e8f7bd3c563e219654579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:de:27:17:8c:32:3e:19:c8:55:0a:8a:a3:b3:
ff:8b:20:dc:b7:cc:78:0d:76:b7:a4:45:92:b4:43:
b7:06:fa:3b:ec:df:4a:97:03:c5:4d:ce:96:c3:04:
e2:ac:e0:7f:d4:9c:e8:a0:7d:c3:e6:a0:7d:01:64:
f6:55:75:1a:61:ea:ae:e9:cb:b4:26:26:a6:2a:1d:
77:b3:45:33:23:44:b6:37:b8:63:87:67:41:42:01:
c5:29:ce:0f:5c:b6:ea:44:85:b4:cf:5b:13:0f:38:
54:12:0c:7f:01:01:2c:00:40:b4:3f:b6:ba:87:24:
0f:f5:b7:4e:d0:39:95:99:91:8d:67:d0:70:cd:80:
1b:42:b2:6d:87:37:2e:fe:1e:16:17:02:b1:61:db:
cb:2e:9b:61:0d:69:e2:02:df:86:2b:2c:ec:3e:3f:
28:fb:22:7e:da:72:93:01:08:a8:01:1c:ff:7d:82:
06:5d:b7:bd:62:78:22:66:06:ac:44:96:65:a3:5a:
ef:c7:71:9d:32:b0:51:5a:f8:89:38:45:d5:7e:24:
92:c9:dc:00:43:ae:c1:a9:b9:0d:92:36:53:9b:b1:
a3:c0:c4:de:12:68:19:5e:2f:d3:0a:02:e1:63:a1:
ac:c8:1d:47:06:c3:77:c8:04:d5:42:ce:4f:00:33:
e9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7E:EE:CE:C3:31:6F:AB:71:2E:8F:7B:D3:C5:63:E2:19:65:45:79
X509v3 Authority Key Identifier:
keyid:A9:3D:A8:6B:4A:F6:0E:7D:29:A5:87:D0:1F:CC:98:B5:99:6C:46:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT2oa0r2Dn0ppYfQH8yYtZlsRto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/69f655-6879-426f-9bfb-3aed4cc7d5b8/1/qT2oa0r2Dn0ppYfQH8yYtZlsRto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/69f655-6879-426f-9bfb-3aed4cc7d5b8/1/qT2oa0r2Dn0ppYfQH8yYtZlsRto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:91:0e:a5:29:5e:8b:30:27:99:75:e7:25:99:d4:bc:57:ac:
1d:76:4d:ce:98:7c:d8:bb:d5:28:94:79:14:9a:48:f6:4c:eb:
27:55:30:f8:92:0e:6d:82:44:05:c8:fd:67:9c:53:20:3d:f4:
a2:a8:ca:5a:37:df:e1:07:97:89:9d:15:fc:b5:17:29:fb:7e:
20:94:e1:7a:f3:97:9b:c5:09:bf:99:ee:b8:47:bb:f8:4e:10:
df:85:c6:68:5c:4d:6c:55:5a:92:9e:1c:64:e4:e5:2e:eb:73:
a3:5a:01:60:9c:38:2a:1b:32:fa:35:57:59:b1:a8:45:08:2e:
f8:69:04:35:ba:8f:9c:5e:35:0d:c1:37:0e:1d:a5:d4:f4:36:
58:16:e6:79:4b:79:bb:23:2c:b9:d1:17:6f:a2:70:5a:07:18:
ae:9c:a1:c1:02:07:fd:41:f5:42:12:53:8b:5e:2b:7a:90:1e:
b6:34:9d:2c:df:e1:08:e7:02:50:90:21:07:4c:b9:aa:07:47:
5f:25:84:b7:0c:ca:7c:0b:1a:02:75:c3:47:55:a0:a8:57:a5:
ce:fe:33:0a:36:21:bd:5b:0f:30:27:5e:f5:99:35:53:49:f4:
d0:22:9f:34:35:88:a5:bc:45:1f:e8:94:3b:6b:51:63:4c:c1:
f3:9a:a5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:20:19 2025 by rpki-client