Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
File: qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft (raw, json)
Hash identifier: PxeYLgpBH4MVW3Z3U0giItoOXf1yKA6Kac1qfhzDbX8=
Subject key identifier: 09:4C:C3:A6:BA:28:6B:03:A5:0B:DD:2F:AE:35:98:5B:30:61:E6:A0
Authority key identifier: A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
Certificate issuer: /CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Certificate serial: 0197B88EA770F5CF47B1AE367BED17671F1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
Manifest number: 0640
Signing time: Sat 28 Jun 2025 22:00:46 +0000
Manifest this update: Sat 28 Jun 2025 22:00:46 +0000
Manifest next update: Sun 29 Jun 2025 22:00:46 +0000
Files and hashes: 1: 1-llihL5lyA2GQR2PsGqhLCANktk.roa (hash: mzRJaHFcotS/RWlzVy4qgPbMvteqzba1lDARW973GdY=)
2: 5O0UiD_W3tjgR9ssx2_M3oXSAqs.roa (hash: gAGUmwLvei624zjz2Ru7prJo+tns2dqLybNdH1gm80g=)
3: fjZ2O6X1drD4u2kQUpCSZOgPEgQ.roa (hash: C+uPnjidRp+aUpGFTJLFRy477yZGyTAEpW7NYrD38KM=)
4: qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl (hash: oQWa1krcG4NJXc8aRQyTIX1qg49E5JUAdhPQl91kI+Q=)
5: zkvZvBR_ZIBD-QsAPtiUmTfPoYw.roa (hash: QZPnljABa+B7L3bRvs6ZKt265sGoFXO7IkclbyLbbsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:a7:70:f5:cf:47:b1:ae:36:7b:ed:17:67:1f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Validity
Not Before: Jun 28 22:00:46 2025 GMT
Not After : Jun 29 22:00:46 2025 GMT
Subject: CN=094cc3a6ba286b03a50bdd2fae35985b3061e6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5f:cd:f5:df:e5:45:a8:f6:ba:d9:1c:ff:eb:
99:43:d7:0e:d2:79:4d:0d:26:04:e6:ff:6f:8f:53:
43:ff:c6:71:a1:e0:d5:ad:40:2a:b6:37:42:01:6b:
b8:e3:aa:54:da:e0:64:79:a3:18:df:d0:24:bd:f6:
28:97:7b:96:63:33:40:f4:59:d4:eb:46:58:33:0e:
06:9f:27:8a:6a:f1:8b:43:9c:27:41:4f:0c:ca:50:
58:e3:58:af:86:da:20:9b:5a:d3:a6:1b:a9:ed:cf:
a8:36:7c:b7:e4:dd:a6:1e:e2:68:dc:16:47:48:d5:
8f:70:2d:9f:cc:88:ed:6f:33:45:bd:76:64:88:6c:
51:0c:b4:3f:11:72:09:8b:e1:4a:3a:5c:d8:eb:f9:
59:a2:d5:df:09:d0:94:79:b9:db:aa:84:35:d2:43:
25:89:ee:05:97:3e:3d:bd:cc:72:1c:cb:6e:33:cb:
87:cb:4f:84:f5:8f:4b:a0:97:46:97:f8:db:18:1c:
24:ac:83:e3:8e:43:2c:95:d2:53:ac:51:4d:38:2d:
cc:56:10:29:29:31:66:cc:7f:bd:33:f3:a0:24:e5:
f1:9a:6e:4b:f3:e9:1a:b2:c9:2b:2c:3c:cb:ca:63:
4a:27:7c:21:86:bc:5e:cb:6e:db:1b:cb:d6:e0:8a:
94:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4C:C3:A6:BA:28:6B:03:A5:0B:DD:2F:AE:35:98:5B:30:61:E6:A0
X509v3 Authority Key Identifier:
keyid:A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:7c:c7:8f:ee:07:f2:71:33:44:24:5b:a9:bb:13:33:c9:20:
50:5c:56:29:2e:f3:29:45:b5:9a:8f:af:26:5e:ea:52:87:26:
af:bd:fd:f6:46:3b:7c:1c:4e:67:ad:a7:e0:78:37:b6:0c:8a:
de:89:da:5b:23:a0:d2:c4:73:5e:07:ec:74:41:c8:89:e9:b8:
ec:dc:14:80:f9:8d:8f:ba:d8:e3:3e:fc:12:12:27:29:79:57:
7c:f2:72:45:9c:b4:72:84:05:cf:d2:d5:1f:bb:21:02:04:02:
0b:ca:c1:a0:65:b6:92:6c:89:df:23:22:ec:e7:da:54:e9:e2:
bc:5b:03:2e:21:5b:4c:72:68:f6:37:3b:d0:03:29:eb:74:4d:
7a:6e:66:1b:c0:a2:60:17:2f:5c:83:58:60:d4:cb:04:c5:d7:
41:f6:81:8d:79:7e:ad:5c:c1:2f:4c:9a:84:c4:64:70:95:ce:
1b:dd:27:a0:38:2a:64:c3:0f:ba:74:4b:64:88:08:8c:fa:cd:
ac:1b:75:16:65:c2:43:5a:e8:4a:14:ea:f1:ec:0f:16:8f:6a:
e0:bb:42:f9:fa:3c:a1:fd:c7:ed:6e:08:f1:c6:7c:c4:5f:58:
ac:13:8c:49:08:f6:9f:e1:36:d5:ad:03:09:b5:a5:22:fa:86:
d8:a9:5a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:13 2025 by rpki-client