Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
File: qKJRFAEUyP2K1ftFtxiaunvFBI8.mft (raw, json)
Hash identifier: VMNxBLkg7Bf50OjpRR43fCB1psFO84Dr2xOCPvj6r4o=
Subject key identifier: 20:00:75:B8:20:59:1F:B1:3A:58:19:AE:47:F2:BD:E5:D3:4B:82:77
Authority key identifier: A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F
Certificate issuer: /CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f
Certificate serial: 0197B6A080B5F5F8614FDC1BFFF6766D1097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
Manifest number: 1247
Signing time: Sat 28 Jun 2025 13:01:01 +0000
Manifest this update: Sat 28 Jun 2025 13:01:01 +0000
Manifest next update: Sun 29 Jun 2025 13:01:01 +0000
Files and hashes: 1: AHkD8Aaan3pABbcPGhXEHYTBg8Y.roa (hash: hXef/ttEb+W4FSVe0XdSIGoItwURMRnjh0hA4tDFc64=)
2: qKJRFAEUyP2K1ftFtxiaunvFBI8.crl (hash: sNDs0w85I6QAtJ0VXk/BRe1W6vlsr/niKLPfcjdGzMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:80:b5:f5:f8:61:4f:dc:1b:ff:f6:76:6d:10:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f
Validity
Not Before: Jun 28 13:01:01 2025 GMT
Not After : Jun 29 13:01:01 2025 GMT
Subject: CN=200075b820591fb13a5819ae47f2bde5d34b8277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:6f:e9:c2:fc:1c:ec:0d:31:6d:41:57:d3:07:
6d:72:0f:66:c5:65:d5:b9:49:c9:25:24:a7:b5:08:
8d:63:bb:02:be:a2:c0:ec:2c:ff:ef:1a:2e:9c:0c:
98:a6:83:cd:c6:e2:54:7a:52:36:87:5a:5f:86:e6:
08:ba:be:84:23:5a:49:fa:51:95:e6:b8:1e:30:71:
5a:4a:52:18:5c:d8:ca:b2:0e:4c:4c:4d:af:5d:a3:
98:76:12:fa:00:e5:09:96:b8:93:f3:88:92:9d:09:
e1:6d:97:85:36:93:c2:5f:8d:67:12:af:77:58:2c:
01:72:a0:d8:24:05:ae:73:36:1e:f4:a4:ba:45:93:
d4:20:bc:ea:cf:9e:56:22:43:11:8a:6d:9f:9c:38:
c5:b8:8f:29:d3:8f:43:24:4a:20:00:f7:cf:3a:e5:
a6:05:80:fa:54:68:de:b0:40:18:86:7c:12:60:6d:
78:f4:33:c4:3b:e3:16:a1:97:f1:df:d4:b2:3b:f9:
2c:2c:ab:db:80:12:34:e1:81:06:b7:6d:85:a2:70:
ca:7a:9c:1a:6b:5d:cb:66:54:f5:b4:e7:c4:b7:f0:
b7:13:28:a2:b1:13:3b:ce:2d:3e:8a:6b:3d:eb:5f:
5e:87:59:19:7b:0b:72:d6:b8:6d:b9:24:5a:a5:fb:
a9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:00:75:B8:20:59:1F:B1:3A:58:19:AE:47:F2:BD:E5:D3:4B:82:77
X509v3 Authority Key Identifier:
keyid:A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a6:34:4b:4c:89:c1:d8:58:a5:e6:08:a8:37:85:f3:ea:b4:
ee:a5:7a:18:71:30:d4:85:12:7b:5b:4d:15:2f:f1:5a:97:27:
af:4d:83:cd:59:03:51:4b:54:e6:d9:39:3e:9a:ca:3b:b5:52:
19:be:dd:52:6a:da:7d:26:3b:88:9e:35:87:c3:53:74:ec:fb:
71:ff:8d:e2:e7:4a:22:95:04:88:8f:e6:fb:ec:49:80:20:98:
82:a5:11:1b:68:db:70:5b:4f:05:22:c2:cd:d2:df:8e:50:5f:
78:20:bf:17:cd:61:57:f4:d0:b2:b4:1a:fd:1c:ef:cc:a2:36:
86:10:e2:b8:63:10:62:23:86:e0:6f:a0:f8:e8:d5:8e:cf:ca:
25:57:d5:6a:35:0b:5a:e0:47:e7:22:99:9d:02:0b:51:44:1f:
99:1e:7a:92:22:15:55:20:09:36:25:fb:1e:ca:f0:cd:89:96:
37:0b:fc:f2:fb:06:b6:a7:d3:7a:df:fe:5c:d7:0d:75:6f:12:
64:7b:ef:4e:aa:01:2f:b1:29:9f:c2:c0:01:c0:93:68:5a:98:
8a:48:21:42:c0:6b:74:da:40:f4:95:b2:eb:82:90:b0:54:a6:
d9:67:d3:ee:29:b9:bc:16:0c:22:ed:17:a6:9c:4b:41:1f:28:
7a:72:3d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:58:14 2025 by rpki-client