Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
File: qIXNvd_X0TFoRb609zmPPOZPrNA.mft (raw, json)
Hash identifier: zfGNdr/tneLxOXlmQON7emhO+YapsCJxsmLtzDf5gjI=
Subject key identifier: 99:21:E0:5B:2A:AD:63:38:C7:1C:C7:CB:41:27:DB:7F:A3:04:EA:90
Authority key identifier: A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0
Certificate issuer: /CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0
Certificate serial: 0197B7EA4165A1D1EC6FA579071F537C460E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
Manifest number: 12F8
Signing time: Sat 28 Jun 2025 19:01:12 +0000
Manifest this update: Sat 28 Jun 2025 19:01:12 +0000
Manifest next update: Sun 29 Jun 2025 19:01:12 +0000
Files and hashes: 1: qIXNvd_X0TFoRb609zmPPOZPrNA.crl (hash: 6Tew7itjQNW6Rwpus3C7Y/dYSaDyEtsepJ9mLBEebBM=)
2: xtTCfWlyctb3-ZIARtvZc7gD2_c.roa (hash: DoO5FfFnFM++vEGajImQDDKEPB+yqs7BrAr2CdTgfGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:41:65:a1:d1:ec:6f:a5:79:07:1f:53:7c:46:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0
Validity
Not Before: Jun 28 19:01:12 2025 GMT
Not After : Jun 29 19:01:12 2025 GMT
Subject: CN=9921e05b2aad6338c71cc7cb4127db7fa304ea90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e2:ef:60:5c:5c:ee:88:2e:79:da:91:27:ef:
ef:61:0b:f4:a8:7e:0f:84:33:45:de:09:bf:fb:93:
84:a0:11:12:f9:7f:12:f3:ec:6f:d8:24:79:00:b8:
3a:25:09:4f:eb:9d:01:cb:b0:80:44:24:dd:87:ad:
ee:9f:78:7d:a6:0e:fb:bf:7b:c8:43:50:77:c4:37:
d6:df:5e:b9:c8:c8:d5:f5:81:71:da:29:94:c0:73:
0f:c3:b2:3a:a8:81:0c:7c:e0:66:85:a2:f0:74:7f:
0e:93:0f:f2:ff:46:89:d1:bd:fa:1e:b1:ba:d3:e9:
22:6b:5c:23:e0:52:3c:3f:16:78:3d:45:22:d9:3c:
cd:80:cd:04:d2:f7:c5:be:2f:d9:d9:b7:bb:35:91:
f4:a2:f7:8f:d8:fe:70:34:72:67:32:d2:ae:0c:9b:
33:e1:0f:79:f1:2f:88:47:d4:c5:eb:af:60:c6:55:
c1:30:fb:10:b1:88:c7:ed:a4:de:be:89:b2:47:d2:
68:79:c4:68:7b:78:8d:15:fc:d6:02:76:f2:40:e8:
f5:a1:3c:7a:89:39:5f:7e:64:c8:cf:89:a1:63:21:
c2:44:d5:77:c2:5d:39:a4:f3:61:06:f6:31:c2:07:
1f:33:b5:0a:36:36:ba:59:b6:35:d9:98:02:c7:e2:
97:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:21:E0:5B:2A:AD:63:38:C7:1C:C7:CB:41:27:DB:7F:A3:04:EA:90
X509v3 Authority Key Identifier:
keyid:A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:83:1c:17:2c:59:03:49:08:bd:69:70:c1:ef:52:d5:c2:ce:
7a:6f:0c:ef:9d:9e:4e:bb:56:c8:a7:0a:86:6f:03:2c:a0:4f:
e9:4c:97:af:00:86:3f:5d:e8:4a:2a:27:11:07:28:66:a8:86:
f4:55:b6:1e:fc:65:f8:e1:5b:73:ea:e7:c5:2a:f6:fd:a5:87:
09:69:4b:bd:fe:b4:d2:8a:5e:5a:c2:60:61:3f:71:2f:d1:7d:
5f:f0:63:d9:cb:49:9f:cd:a8:66:e5:f9:df:73:ca:05:3d:85:
9e:0a:78:21:84:ed:92:13:c3:5b:bb:ad:d7:ff:1e:ea:c5:b1:
96:99:e0:fc:d4:2a:b6:ac:b1:9f:ea:cd:26:10:39:60:63:03:
0b:bf:f7:64:d4:cc:86:cf:a5:b9:f7:38:f7:2c:34:15:ba:ac:
10:e4:96:67:9a:03:3d:bd:cd:2a:f4:be:f2:71:4a:ca:23:fa:
c6:89:38:37:5d:e7:14:a4:f1:8e:5d:ee:f8:f1:34:c0:20:31:
33:d1:81:9e:9e:cc:eb:34:f5:0a:e5:44:88:33:d6:43:e2:9c:
1b:62:f2:5b:62:00:39:6f:3b:51:e3:ee:cf:78:28:ab:9f:dd:
9a:a7:f7:05:75:2e:2d:6d:dc:94:be:55:75:4d:6f:6e:7f:fd:
6f:88:3e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:33 2025 by rpki-client