Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
File: qT4365yxmDJdZWZzKJJY0o6587g.mft (raw, json)
Hash identifier: tsfsgAut0u57N+VQB2PiVq4bvdwOz22CiJnKvcfkFXE=
Subject key identifier: 8D:56:1D:00:7F:59:7A:CE:D6:11:77:CF:FC:9B:FB:60:86:04:93:22
Authority key identifier: A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
Certificate issuer: /CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Certificate serial: 0197CACBFF74D0E1CA4B463EAAE69E39DE0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
Manifest number: 1554
Signing time: Wed 02 Jul 2025 11:00:56 +0000
Manifest this update: Wed 02 Jul 2025 11:00:56 +0000
Manifest next update: Thu 03 Jul 2025 11:00:56 +0000
Files and hashes: 1: B6IAypRDNnn3wQIonYGMbrtebVA.roa (hash: RDNajdiQ2iOHeS1ehJ984LhPxM3hBSKi1PJW1BaavLE=)
2: qT4365yxmDJdZWZzKJJY0o6587g.crl (hash: SpkK/OEZtWHS/F97Q2K+NnF5dDFTzr59G8dZhsvcfZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:cb:ff:74:d0:e1:ca:4b:46:3e:aa:e6:9e:39:de:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Validity
Not Before: Jul 2 11:00:56 2025 GMT
Not After : Jul 3 11:00:56 2025 GMT
Subject: CN=8d561d007f597aced61177cffc9bfb6086049322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a2:b5:7e:4a:a6:43:3d:5f:cf:44:13:5d:b7:
b6:77:d7:67:86:a1:69:8f:61:37:f9:68:8d:0f:06:
80:ab:51:15:5e:e0:bc:0e:9b:7d:f2:86:94:ad:f2:
57:5f:ec:e3:c4:6c:95:08:51:6b:02:1d:80:7d:c7:
f7:b9:fd:a7:ee:5b:3d:53:b2:c0:8b:cf:c0:f1:0d:
37:19:aa:1b:f8:b8:95:32:f6:f2:ea:6a:6c:03:a2:
cc:9c:f1:46:ac:e1:08:b7:73:ce:68:cb:66:08:ee:
6a:79:10:a9:d5:98:aa:d1:af:75:6a:eb:b2:22:4b:
80:8c:33:8e:09:aa:be:6a:5e:32:1f:aa:ac:1a:d6:
bc:59:07:3d:5c:a2:f9:ba:6c:b0:b9:dd:6d:e4:c1:
16:91:62:90:87:c5:45:4e:45:75:39:e5:a3:ac:01:
72:31:76:bb:4a:f1:5c:01:2e:c5:2a:02:4c:49:bf:
56:f6:f3:13:34:27:eb:23:6d:9b:7e:47:96:8e:3e:
99:52:61:e4:6e:33:0b:9b:32:34:f2:99:95:ef:8f:
5b:fe:f2:39:d8:64:53:48:77:74:c2:60:db:5a:6a:
fd:e8:5c:35:99:d8:3a:8d:eb:9d:7b:0f:8b:0b:87:
95:12:96:f6:a8:03:67:c4:9c:07:93:26:10:bb:8d:
d1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:56:1D:00:7F:59:7A:CE:D6:11:77:CF:FC:9B:FB:60:86:04:93:22
X509v3 Authority Key Identifier:
keyid:A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:03:6c:d7:66:2d:e7:d6:40:06:97:0f:09:59:72:8b:83:0c:
db:6f:00:44:75:e0:5d:27:98:c1:1f:12:6f:34:f6:78:b0:a7:
0f:e1:62:c9:d2:48:3f:29:5a:fb:ee:eb:22:3e:7e:9a:7f:c1:
38:45:ca:fe:51:f9:fc:0a:d1:41:c8:e7:be:42:61:b1:cb:4a:
b3:08:35:97:de:3f:48:bf:eb:58:20:d3:45:80:90:0e:54:87:
bf:04:a5:4f:11:c8:5e:f4:2b:ca:96:6e:54:7f:18:81:bd:a8:
68:3d:37:90:72:11:1d:10:1d:e4:39:49:d1:f7:c6:ad:5f:17:
ee:13:e0:90:1a:b9:e5:1a:6f:b6:21:b5:d5:c4:aa:95:12:0c:
e1:da:f2:ce:30:81:59:88:d7:ce:57:4c:dd:b8:70:08:c2:ff:
93:dc:b2:c7:50:65:e2:e2:6d:76:ba:4e:40:86:87:5f:b4:e3:
bb:15:b7:d5:d3:9d:b2:39:af:8a:1f:a8:5c:f3:df:84:31:99:
c4:5c:59:e5:4d:74:5e:95:de:23:42:5b:b3:c6:72:c7:ca:68:
09:18:d4:26:89:82:5b:6f:6f:33:46:30:1f:08:a2:f0:f0:60:
55:2a:f1:9a:77:72:a8:40:d9:d0:72:3e:a9:9b:10:02:c7:3a:
77:1b:ad:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:11:18 2025 by rpki-client