Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
File: qERxpm95BxB-RTRxa_pCCNQGlp8.mft (raw, json)
Hash identifier: KPW1lUhOYGB5zMlGNHN2T/Jvv8sJ3N/fDnoPf2j7x+Q=
Subject key identifier: A3:2E:08:00:DE:7E:FB:C9:90:D8:10:A9:1E:02:5E:71:07:7C:9D:17
Authority key identifier: A8:44:71:A6:6F:79:07:10:7E:45:34:71:6B:FA:42:08:D4:06:96:9F
Certificate issuer: /CN=a84471a66f7907107e4534716bfa4208d406969f
Certificate serial: 0197BA7DF9ED08CF18F2DF8189D61A2C70FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
Manifest number: 15B6
Signing time: Sun 29 Jun 2025 07:01:47 +0000
Manifest this update: Sun 29 Jun 2025 07:01:47 +0000
Manifest next update: Mon 30 Jun 2025 07:01:47 +0000
Files and hashes: 1: qERxpm95BxB-RTRxa_pCCNQGlp8.crl (hash: nQTu77qVsvh0RY+dX79LLHFjGXBfOD5ZVQUPZFfMXXk=)
2: tcbbFJDqhBbRkJh6NDYN55iLfDE.roa (hash: vKEQ9e0Db9WBNbap5GYKx4PxGXK/ovDmh/isyYRiZ1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:f9:ed:08:cf:18:f2:df:81:89:d6:1a:2c:70:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84471a66f7907107e4534716bfa4208d406969f
Validity
Not Before: Jun 29 07:01:47 2025 GMT
Not After : Jun 30 07:01:47 2025 GMT
Subject: CN=a32e0800de7efbc990d810a91e025e71077c9d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cd:ac:eb:50:1e:9e:90:26:7b:66:93:b6:46:
39:8a:95:6d:4d:49:de:f1:ef:4c:74:46:05:3a:0a:
b4:0d:ba:9b:74:2b:9a:f0:4b:ec:91:6d:4a:0e:84:
20:96:fe:1a:26:17:be:65:88:51:c2:52:67:ef:b7:
b2:58:55:1a:b1:a1:0e:cb:da:a2:e8:51:f3:13:8f:
2e:ab:9f:17:21:dd:c6:ef:29:34:6b:cc:93:05:ac:
d3:78:f1:99:60:16:09:86:32:97:63:39:c7:74:4e:
c2:aa:89:a8:ac:68:b9:a0:fe:d6:6a:ca:73:a6:56:
ca:15:3a:6c:39:30:62:7e:32:5d:7a:00:52:e4:4d:
9f:2c:4e:48:c1:8e:06:6e:89:c5:00:56:85:84:0f:
ae:cd:28:39:05:97:e8:6b:b6:93:e7:4f:b9:ae:b6:
8c:a3:b4:60:98:20:44:32:83:f2:3a:5e:69:79:3f:
39:3b:35:95:d9:2b:90:ce:0c:10:20:b5:92:51:b1:
5c:10:96:69:58:3c:0f:71:88:72:15:04:34:2e:6b:
9d:ac:af:83:7b:26:eb:80:f3:c0:e4:11:32:58:bd:
24:40:ee:24:9c:56:d9:97:79:4b:e4:55:d0:e9:63:
f4:2f:a8:d4:67:46:ed:e8:fa:ff:cd:a8:8c:9b:a6:
87:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:2E:08:00:DE:7E:FB:C9:90:D8:10:A9:1E:02:5E:71:07:7C:9D:17
X509v3 Authority Key Identifier:
keyid:A8:44:71:A6:6F:79:07:10:7E:45:34:71:6B:FA:42:08:D4:06:96:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:cb:43:8b:3e:b5:52:88:9c:6d:67:b6:0e:90:86:c3:4c:ef:
bc:ac:5c:b8:5a:97:13:ef:8f:61:1e:a5:97:24:b1:c3:c7:66:
42:d6:67:47:97:19:3e:01:6e:35:59:3a:05:03:43:45:85:0a:
f6:81:2e:47:55:eb:60:bb:51:2a:8b:dd:e1:24:13:89:9a:c7:
65:c2:55:44:ec:50:1e:1d:0a:75:31:fe:46:c5:bd:8b:0e:ea:
25:78:16:bf:8d:54:ee:bc:f5:5f:a9:e6:f0:b1:a4:8e:59:fc:
0e:48:9d:b2:23:7c:82:a0:0b:23:f9:d5:aa:ed:15:e4:b1:2e:
d9:30:c8:94:0e:10:c0:2e:ed:0d:4e:04:e8:57:f7:8e:e6:63:
e7:13:87:84:bb:4e:e3:db:a5:b2:3f:f2:c8:03:00:6c:78:ed:
19:cb:74:2c:11:8f:f3:2a:0e:a9:fd:6e:b9:25:76:2d:57:dd:
47:11:c1:f3:62:02:a7:f7:d0:14:99:07:e5:2a:5b:44:13:11:
31:c6:00:e6:b5:1d:7e:ee:25:e1:66:05:e8:2e:a2:51:60:bb:
5f:0d:0f:0f:c9:5c:a8:e3:2c:86:bc:08:47:58:07:69:43:dc:
c5:7d:8d:a6:5f:7b:1f:05:f0:12:3c:b2:0c:b6:6b:36:4d:82:
36:3e:6d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:16:46 2025 by rpki-client