Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft
File: q08Em20XYCv3tI0QTQja8BQx28I.mft (raw, json)
Hash identifier: AtfXx6iO93ooWR/jqS4Q6SNx3OyenrvXUl4mGIlUelk=
Subject key identifier: 28:FB:4A:03:2C:33:92:01:CE:35:E6:A0:5C:5A:47:14:4B:13:E7:06
Authority key identifier: AB:4F:04:9B:6D:17:60:2B:F7:B4:8D:10:4D:08:DA:F0:14:31:DB:C2
Certificate issuer: /CN=ab4f049b6d17602bf7b48d104d08daf01431dbc2
Certificate serial: 019821EA2ED9CB371C5F94DB1D0345838942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q08Em20XYCv3tI0QTQja8BQx28I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft
Manifest number: 15EA
Signing time: Sat 19 Jul 2025 09:00:52 +0000
Manifest this update: Sat 19 Jul 2025 09:00:52 +0000
Manifest next update: Sun 20 Jul 2025 09:00:52 +0000
Files and hashes: 1: kWd4hi-OyYBjozDmbmhqQmpA6Pw.roa (hash: ZCQPM7gY7pbLQQubJYcs97+7fXVoiPmIY9e2vsVxbNM=)
2: q08Em20XYCv3tI0QTQja8BQx28I.crl (hash: CXdAawyR9EasQfDBdWRkEeNuGwNbFpFqbJLSsNp994s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft
rsync://rpki.ripe.net/repository/DEFAULT/q08Em20XYCv3tI0QTQja8BQx28I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Jul 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:21:ea:2e:d9:cb:37:1c:5f:94:db:1d:03:45:83:89:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab4f049b6d17602bf7b48d104d08daf01431dbc2
Validity
Not Before: Jul 19 09:00:52 2025 GMT
Not After : Jul 20 09:00:52 2025 GMT
Subject: CN=28fb4a032c339201ce35e6a05c5a47144b13e706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8a:42:6e:e0:c8:21:62:7a:10:6d:90:a8:73:
2b:3d:79:06:2b:52:7e:dd:a6:bb:de:d8:73:80:4f:
30:47:46:2f:7a:7b:45:5f:3d:0b:91:f6:4a:5c:91:
f7:f3:28:33:e6:ab:92:d5:7a:4e:4f:3c:9b:c9:58:
09:61:f8:0b:6c:1d:d1:8d:09:42:da:c4:79:f2:e8:
e3:16:98:53:ad:24:0e:59:5b:84:1a:37:45:8c:57:
2e:3b:65:de:84:ad:26:79:97:3e:08:a0:e6:c8:02:
ea:14:b3:38:61:4b:25:1c:91:aa:a2:c6:42:60:2b:
89:78:71:28:44:43:cb:cc:a7:55:f2:38:c8:a7:05:
8f:bb:9c:30:4c:a4:f6:56:72:0c:cb:c0:f6:1f:1f:
1c:2d:6f:0f:40:f3:24:13:5f:59:d1:f1:30:b2:7e:
ca:20:82:81:cb:51:87:97:eb:bd:f6:29:5e:26:44:
3e:ac:aa:ff:6e:b3:78:49:2a:f8:b0:43:34:b9:af:
05:84:dc:7f:b1:01:3a:5c:b7:e5:0a:62:c6:ed:0b:
ce:f2:dc:90:54:0f:e1:8b:50:db:6e:e3:22:40:9f:
2e:76:34:5e:52:82:af:dc:1a:0d:88:c8:89:00:14:
33:e9:90:61:b4:19:ee:3c:08:35:4d:1c:f3:07:e5:
be:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FB:4A:03:2C:33:92:01:CE:35:E6:A0:5C:5A:47:14:4B:13:E7:06
X509v3 Authority Key Identifier:
keyid:AB:4F:04:9B:6D:17:60:2B:F7:B4:8D:10:4D:08:DA:F0:14:31:DB:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08Em20XYCv3tI0QTQja8BQx28I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:29:07:43:3b:73:8c:95:50:fe:cc:32:a3:bb:c5:dc:f6:65:
90:a5:36:94:c5:df:c9:fe:4d:6e:e3:75:f9:e5:77:df:bb:57:
05:74:d4:bf:6e:6b:30:1e:1b:55:c9:6b:73:1b:e4:a6:98:4b:
69:f2:0d:8c:7a:f4:b4:e9:5c:65:dc:5c:31:35:8f:bd:94:ee:
8e:34:f6:65:7d:77:5b:22:ea:84:0e:9c:6d:bb:ac:54:b4:b2:
d6:26:a0:b1:f7:9a:88:db:b7:6b:1b:33:34:f6:12:e5:92:9e:
8a:c4:22:f5:6c:2d:ec:d4:7b:a6:d8:8e:fc:eb:22:e3:e7:8b:
a8:2a:83:1b:01:92:3d:4f:a5:98:e3:4c:e2:70:db:81:8e:b9:
8e:9f:f7:a5:ea:e4:8d:66:08:97:a2:cd:8c:c8:63:9d:27:20:
fb:2b:4d:31:f9:77:cb:a1:b4:d2:57:80:57:26:92:3f:d2:b1:
55:62:4c:57:35:39:6a:e3:8d:15:93:f1:fa:60:29:f8:59:1d:
c8:67:11:d9:8b:58:83:47:2a:42:f5:e2:85:5d:32:27:b7:92:
80:88:4b:cf:44:f6:b8:3b:04:62:11:d8:83:52:a7:7e:4d:58:
53:7f:7d:f4:7c:a0:79:f0:67:2f:4a:61:86:27:ca:43:d3:18:
1b:e2:fa:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 19 14:25:06 2025 by rpki-client