Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
File: qyftHOpDIcScPKEPOv-v29rVMsI.mft (raw, json)
Hash identifier: 1Qupi+FV9vzYOJlgdVKYm5OImApG2jn+Pfpdn1i4DA4=
Subject key identifier: 3E:57:80:9C:CD:BD:F9:FC:15:47:9B:D8:34:FB:38:6F:81:46:11:A5
Authority key identifier: AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
Certificate issuer: /CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Certificate serial: 0197B8211FEB80DD5E231B2D9E8CE3232B35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 20:01:07 +0000
Manifest this update: Sat 28 Jun 2025 20:01:07 +0000
Manifest next update: Sun 29 Jun 2025 20:01:07 +0000
Files and hashes: 1: 2U9OMR0vNGIWLLTXLBnFAJc6zag.roa (hash: F6oBZloimXQ0suZfVl9SgIpXfkXnctvWcc1snNVrOMI=)
2: qyftHOpDIcScPKEPOv-v29rVMsI.crl (hash: eBWfDwTqWkcdlu/ijUg6UTHjkRYXkQzfb3e9R4DSuJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:1f:eb:80:dd:5e:23:1b:2d:9e:8c:e3:23:2b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Validity
Not Before: Jun 28 20:01:07 2025 GMT
Not After : Jun 29 20:01:07 2025 GMT
Subject: CN=3e57809ccdbdf9fc15479bd834fb386f814611a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:94:ff:85:fe:33:36:92:e6:bd:92:68:6e:56:
dc:2d:8b:f2:89:0e:9f:5a:55:6e:41:08:42:ce:3f:
36:8c:ab:4d:4f:44:47:fb:a0:f2:ca:f2:58:f8:63:
91:ed:80:f2:bf:28:a5:9a:0a:78:22:b9:80:10:28:
7a:ac:92:2b:8d:e0:9b:8b:da:22:d4:88:de:5f:ef:
f9:55:e5:57:b0:19:f7:dc:ec:6c:68:1d:25:a6:c9:
86:ee:25:9b:a1:b5:8f:26:fa:bb:18:b8:ae:0d:4d:
5e:72:38:a4:1c:1a:52:64:60:83:e8:bb:03:a5:25:
a0:78:fb:13:6a:51:ab:13:95:01:e7:df:ea:7e:28:
85:be:95:7c:c4:0c:2e:ff:82:b5:dc:a0:13:7b:ce:
b7:53:04:d0:61:4c:c7:19:97:69:91:e5:45:b0:51:
79:5e:fa:eb:3c:b5:af:b6:ad:b4:e0:34:6e:91:3b:
37:53:de:29:07:1e:4d:75:f0:4c:8e:3c:06:8b:14:
0c:fc:a8:2f:ab:79:69:15:72:dd:f4:6e:0c:75:37:
1f:c0:97:79:db:53:04:82:ee:7e:ed:97:11:bb:81:
c9:c9:c5:33:c7:3d:3f:43:48:ee:d4:8e:8d:4d:88:
3b:81:2c:31:ac:9a:4c:e1:2b:ad:dd:56:34:3c:2d:
2f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:57:80:9C:CD:BD:F9:FC:15:47:9B:D8:34:FB:38:6F:81:46:11:A5
X509v3 Authority Key Identifier:
keyid:AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e9:f1:3f:31:d5:52:72:5d:ef:2a:a7:df:ac:59:f0:6c:ed:
2e:73:d1:76:58:1b:9c:ee:f2:c7:50:aa:4c:ab:4e:9e:7f:ae:
0b:e8:23:32:6f:3a:37:26:d9:05:89:81:7a:e8:30:87:d2:94:
16:ea:06:51:ef:52:55:2c:3b:2e:25:c7:d5:a1:0b:e3:b4:e0:
ea:3d:59:3e:fc:f6:84:55:dc:cb:42:50:f1:1f:8d:a8:24:96:
86:6d:e6:66:cb:0d:b2:ab:b3:99:5b:2b:db:29:ee:13:73:b6:
cf:44:68:7d:9a:7c:5d:c7:24:7b:6f:28:f7:2f:80:c9:ce:bb:
83:aa:1e:fd:84:a7:58:81:b7:dc:8e:07:96:e8:f3:b0:fb:48:
89:13:0e:75:e2:87:56:f5:0e:7f:88:11:b6:7f:9b:03:c0:6a:
5e:79:8e:80:44:7c:df:83:49:22:f8:ee:e6:59:d9:29:2b:84:
41:05:a6:a0:56:db:3f:70:e9:11:af:d7:de:f8:67:fb:bd:77:
ac:a3:e9:3a:57:52:5b:00:4f:74:83:a6:0f:e6:9d:d4:73:ed:
4f:8f:d6:6a:3d:4c:75:df:49:04:72:13:58:f2:e1:2e:8d:ea:
8c:cb:b9:1c:78:f0:5d:7a:06:28:e3:59:58:86:cb:5d:34:e1:
40:ea:3a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:28:17 2025 by rpki-client