Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
File: rQVANtrTLReoyRbcLfuzzoo2RSw.mft (raw, json)
Hash identifier: 4popcN4eJJXNAlCjH3paBmmrL07df37TkFZF5Jj579Q=
Subject key identifier: AB:56:E2:73:C0:AF:5F:A9:38:E3:30:FC:03:2C:5C:A6:69:82:C7:89
Authority key identifier: AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C
Certificate issuer: /CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c
Certificate serial: 0197B6A0679191C694889D3BC03BCE9D2450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:00:54 +0000
Manifest this update: Sat 28 Jun 2025 13:00:54 +0000
Manifest next update: Sun 29 Jun 2025 13:00:54 +0000
Files and hashes: 1: V1VyWKK4g97snYUaOwHJAFP_MdQ.roa (hash: IhL8EIfC6sBImzV34O7y77KJDpidcr5em23zVj3USMQ=)
2: rQVANtrTLReoyRbcLfuzzoo2RSw.crl (hash: kMN+sbBGJNj4fQkvoCSRlwUIM626XtvDtUAZujHz4qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:67:91:91:c6:94:88:9d:3b:c0:3b:ce:9d:24:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c
Validity
Not Before: Jun 28 13:00:54 2025 GMT
Not After : Jun 29 13:00:54 2025 GMT
Subject: CN=ab56e273c0af5fa938e330fc032c5ca66982c789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ab:82:19:53:3e:6f:6e:da:d0:37:79:2f:77:
99:fc:90:bc:ca:50:09:57:74:f9:23:5d:4d:d6:18:
12:1c:98:89:f7:79:3b:3e:ad:d8:6a:9f:9f:4c:f1:
b8:e7:f4:04:0b:f2:f6:69:6f:34:ca:7d:4f:09:c7:
26:b0:45:25:3c:7d:1d:1f:35:0e:3b:27:73:1f:b5:
0a:36:eb:c1:a2:3a:5e:66:e4:99:bd:6e:32:51:db:
bf:54:4e:96:b1:ac:f1:c9:3d:16:19:62:47:6f:dc:
bc:02:8b:59:60:ad:f2:41:f5:fc:ec:c3:3d:75:32:
38:64:51:d4:49:88:88:f9:e7:66:98:4f:92:4f:09:
b1:ba:25:a7:40:14:a5:69:49:51:0a:24:97:1b:6b:
89:55:56:53:3a:7f:5b:e3:40:60:fe:71:34:31:b4:
53:b6:4a:8a:18:ae:a6:de:05:a3:ec:14:94:96:26:
b8:2d:7f:d0:35:fe:aa:23:51:1f:fe:64:a4:ed:15:
1b:c6:0a:ef:4f:7a:77:5b:aa:8b:b9:5e:3d:17:c2:
c4:43:5b:39:4b:d2:cf:77:a7:30:c3:e9:35:fa:86:
d9:95:31:5f:61:af:ed:37:45:0c:d5:6f:3b:05:08:
ea:d6:f0:8f:0e:18:08:3b:b8:5b:a8:10:cb:08:8a:
41:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:56:E2:73:C0:AF:5F:A9:38:E3:30:FC:03:2C:5C:A6:69:82:C7:89
X509v3 Authority Key Identifier:
keyid:AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:1d:4a:1c:84:cf:26:88:c1:89:6c:52:99:50:3f:9c:b2:e4:
77:85:bd:55:ef:2b:60:25:79:fb:a2:f1:cf:38:6b:18:be:a9:
ca:57:0b:3c:9b:9c:b1:d6:bb:bb:8f:e2:9c:8e:40:09:25:e1:
98:e4:12:f5:ef:42:8e:75:15:22:8b:ab:ba:24:53:24:69:6c:
a8:85:e6:e3:d7:da:29:47:62:5a:f0:40:78:e4:ce:72:20:d5:
f8:ad:aa:7a:f6:c9:bc:ed:a3:3d:6d:b2:f6:90:9d:81:f4:9f:
65:df:f6:d5:e3:fa:b4:97:4c:01:c5:e5:fc:86:e6:e9:ce:aa:
6c:e5:b1:ae:87:61:b4:a8:b3:d7:72:bd:fa:bd:70:f7:eb:d8:
51:9e:f5:ec:a2:9a:00:bd:cf:a3:23:8d:b9:dc:22:6a:e5:db:
dc:4b:42:79:21:a5:fc:ab:02:b1:a7:c4:ae:34:93:34:bf:5b:
e8:d6:7f:5f:3e:83:9a:d3:45:71:97:91:5a:8b:bc:d6:59:5b:
a0:55:51:17:b7:57:b2:1a:26:51:86:5d:7e:45:17:02:27:e4:
70:49:fb:0c:b4:cf:e9:cb:c4:03:e6:58:be:68:61:da:c9:da:
d3:4c:df:6b:ea:11:55:8a:09:67:2c:e9:4d:86:44:84:b4:76:
f6:ff:10:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:22:49 2025 by rpki-client