Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
File: qBaZpbxkh70vF0nRM_yi43_U2og.mft (raw, json)
Hash identifier: YLt36m1xeEV1T4EwLIjDLgpIXg4C97HkSBk+Mfxh+20=
Subject key identifier: A0:01:19:90:EC:1E:3B:38:D6:9F:24:24:B4:2D:C4:A7:07:D0:E7:BD
Authority key identifier: A8:16:99:A5:BC:64:87:BD:2F:17:49:D1:33:FC:A2:E3:7F:D4:DA:88
Certificate issuer: /CN=a81699a5bc6487bd2f1749d133fca2e37fd4da88
Certificate serial: 0197B6D7BAF9D9F42D87BF9C006D9931923F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
Manifest number: 0C9B
Signing time: Sat 28 Jun 2025 14:01:20 +0000
Manifest this update: Sat 28 Jun 2025 14:01:20 +0000
Manifest next update: Sun 29 Jun 2025 14:01:20 +0000
Files and hashes: 1: OjQvRP3Qk-EfOjLrBZFcCGXmqW8.roa (hash: tuPCcx5ju8FKUrcPlz2PFkmuFSo/tuFb+mEuY/BILEc=)
2: qBaZpbxkh70vF0nRM_yi43_U2og.crl (hash: IPELqlcR120Ojqi7qfMhmUwoxYXIK2pXvYBntwT6ASQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:ba:f9:d9:f4:2d:87:bf:9c:00:6d:99:31:92:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81699a5bc6487bd2f1749d133fca2e37fd4da88
Validity
Not Before: Jun 28 14:01:20 2025 GMT
Not After : Jun 29 14:01:20 2025 GMT
Subject: CN=a0011990ec1e3b38d69f2424b42dc4a707d0e7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:83:19:f0:97:7c:46:ae:8e:1e:3c:d7:a2:d5:
44:cc:d0:56:71:66:ef:35:db:4e:16:1d:8f:e2:9e:
8e:47:7d:f1:f3:2c:2e:7d:87:a9:9c:37:6f:da:b2:
11:d8:c4:8d:2d:93:75:ca:b2:39:77:4c:bd:97:40:
fe:94:1d:3a:d7:59:2e:9e:17:30:ae:a0:dd:6c:30:
38:d7:83:3d:38:15:fd:11:cc:d0:ef:59:99:eb:84:
41:4f:25:e6:92:69:19:e8:91:3b:e4:30:65:62:1a:
aa:36:f4:83:9c:b3:c9:cd:6a:b4:4b:54:1c:34:a8:
e2:ec:61:97:2d:68:e6:e0:39:9f:9d:59:ed:f8:51:
da:97:41:98:f0:fa:de:47:cf:e9:4d:71:43:06:7c:
56:ae:08:cc:a3:04:92:4e:69:4f:02:36:89:fd:b1:
d8:46:1d:f4:6b:6e:ac:1c:f9:4c:0c:6d:82:e1:96:
b0:d6:fc:c1:eb:d5:c1:85:ec:97:6b:cb:6e:64:96:
71:41:ac:0b:40:4e:e9:54:a8:ca:74:86:21:c9:90:
21:d1:e5:fa:0c:28:58:51:04:e2:ef:3a:68:ca:ca:
d5:2a:4d:0c:6f:3e:85:24:63:77:fc:2a:76:70:b3:
3c:60:50:c2:1c:43:eb:ec:ce:fa:84:5d:04:46:ab:
84:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:01:19:90:EC:1E:3B:38:D6:9F:24:24:B4:2D:C4:A7:07:D0:E7:BD
X509v3 Authority Key Identifier:
keyid:A8:16:99:A5:BC:64:87:BD:2F:17:49:D1:33:FC:A2:E3:7F:D4:DA:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a0:f4:ae:9b:74:c0:61:2e:29:ef:bb:0b:49:f6:8c:5b:9e:
f3:30:8b:47:77:bb:3d:54:27:b7:02:77:a8:e9:f1:88:4c:ab:
f4:33:d6:3a:cb:5f:18:0e:80:5e:b3:9f:8f:c4:59:c0:74:e2:
33:16:f3:79:b3:67:c7:b9:6e:f0:4a:60:11:d0:f5:62:96:43:
19:cf:2a:1d:c0:d8:f4:e6:87:84:df:64:84:19:55:bf:5b:48:
cc:7c:51:a4:6d:9f:54:39:36:a8:fc:5d:70:6a:01:1b:1e:91:
20:90:23:60:1a:f5:20:fe:33:7d:40:f1:b6:8d:25:a0:53:2c:
7d:c2:0c:67:ac:56:ea:81:ab:93:57:cf:79:1c:67:e1:b5:7b:
ad:9a:be:6c:1a:bb:38:b6:04:e4:c5:b0:a2:0b:b1:c8:60:26:
99:68:e8:5c:0c:73:82:71:cf:5d:f1:41:ab:64:58:70:e7:e9:
4d:e7:c5:19:90:67:3c:6b:af:45:7c:a9:03:e7:91:8f:4c:f4:
09:55:22:13:a0:e1:c5:dd:2e:1c:9f:a0:21:46:ac:9a:1f:3d:
30:eb:30:4d:bf:6e:b8:5b:e6:09:78:00:7e:58:ae:22:f1:f3:
26:bf:ff:77:a5:f9:d1:9c:ea:88:9a:a3:07:0f:53:a3:32:a2:
fd:ec:30:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:28:02 2025 by rpki-client