Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
File: tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft (raw, json)
Hash identifier: 3guGMCOPi/g/BquMFGkxGo/bAvH9yCgldPt2zC4PHO4=
Subject key identifier: 85:7E:B3:59:F3:FD:36:8A:24:6B:45:19:CA:B0:5D:10:C4:9F:0F:7B
Authority key identifier: B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84
Certificate issuer: /CN=b504bcceb9c363f13e3adaa4c0fa52780f064684
Certificate serial: 0197B6D732F82A3E383E21530CE7A13A995D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
Manifest number: 07E4
Signing time: Sat 28 Jun 2025 14:00:45 +0000
Manifest this update: Sat 28 Jun 2025 14:00:45 +0000
Manifest next update: Sun 29 Jun 2025 14:00:45 +0000
Files and hashes: 1: XkoFzkhGOVU5LUerqTHh__leFZg.roa (hash: z0PB3OIVOF5qm40evjJvgBDDcdbv5T70mZxHdxYv7d4=)
2: lE8Zy8N-xpY9U-oK5WN375n1Ofw.roa (hash: eG5bABtFszI7d/P1aStzKC6pmrIphfH8b15K2w83lWk=)
3: tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl (hash: rgg1RzXJYdnMlgiaPWB1uFvcUNZMn2yioZgsslSqvJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:32:f8:2a:3e:38:3e:21:53:0c:e7:a1:3a:99:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b504bcceb9c363f13e3adaa4c0fa52780f064684
Validity
Not Before: Jun 28 14:00:45 2025 GMT
Not After : Jun 29 14:00:45 2025 GMT
Subject: CN=857eb359f3fd368a246b4519cab05d10c49f0f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b6:66:b2:3e:87:d0:e3:16:7c:0f:48:e0:88:
55:df:1a:bd:49:68:72:a8:de:78:bd:a7:a9:82:12:
8a:82:70:97:93:0e:95:b7:da:fc:a4:f9:18:42:98:
67:7b:75:7b:01:8c:f7:de:3f:91:83:5d:00:bf:cd:
87:6d:11:78:1a:ec:4c:7c:4c:3f:66:bb:65:8f:00:
c5:07:a4:34:ae:50:f7:26:54:03:68:b1:ae:76:b7:
67:50:ec:f4:8a:bc:9f:4d:ee:59:06:7e:35:ed:87:
44:b3:39:90:9e:d5:2a:a6:b6:11:da:04:68:14:05:
c4:10:0b:ff:81:a7:f8:73:b1:80:c0:e6:83:77:04:
0e:23:a3:e7:f4:f3:b0:27:96:14:32:d2:e5:0e:53:
99:38:95:d5:07:82:af:71:d3:9f:de:b5:85:42:81:
bc:9d:c9:c6:0e:8d:6c:9d:30:35:b2:c8:eb:fc:73:
14:08:43:29:74:37:ea:b3:26:cd:95:fa:6f:bc:68:
04:da:77:98:cf:b5:99:7f:04:af:4a:4e:16:f3:db:
7e:19:3c:06:46:ea:2d:fb:be:fa:66:97:0f:23:68:
12:5c:49:89:33:c8:03:08:ae:f2:d6:c6:df:78:e5:
c6:d1:a7:54:c2:d3:8c:2b:ab:d6:7a:ae:75:05:52:
fd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7E:B3:59:F3:FD:36:8A:24:6B:45:19:CA:B0:5D:10:C4:9F:0F:7B
X509v3 Authority Key Identifier:
keyid:B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:2a:a6:cd:42:18:0b:e4:4e:eb:e7:b7:f9:3e:b3:3b:3b:69:
e9:90:bf:ec:22:ab:7f:0c:9a:dd:96:21:b3:53:24:19:ba:7c:
19:ce:44:5f:d4:0f:4c:6f:46:c8:9a:56:80:3e:e1:2e:d1:f4:
89:93:11:5e:7e:bb:48:08:b6:9e:3b:4f:be:3b:d3:a5:d7:a9:
e5:54:8c:52:86:bb:c0:1f:1c:b5:68:9c:8c:1f:dd:6b:9c:af:
0f:13:d3:69:45:fb:9b:4a:c9:f0:85:0d:e3:27:43:29:0d:a4:
d7:3e:7a:11:e3:a7:5c:53:d8:cd:cf:4c:4e:1a:fc:8c:11:a0:
f7:4e:8f:69:03:59:bd:29:92:35:9e:e0:1c:76:49:6d:a8:d1:
39:9f:e8:2f:81:a4:48:f0:98:d9:5d:cc:dc:8f:99:4b:92:66:
7b:14:c5:c6:83:9d:39:11:7b:e5:f5:2d:9c:77:62:98:1e:c9:
10:5d:2d:08:48:1a:5f:9d:4a:f0:7c:49:80:da:82:c9:b4:18:
14:d0:c5:a3:5a:a2:0f:f6:da:c2:9d:5f:b7:3b:a9:2f:c9:96:
b9:ca:88:8a:1c:31:4e:8d:91:be:76:cf:16:0f:49:00:ca:b5:
82:6b:77:4e:fd:41:c5:86:04:46:47:96:a3:32:e6:54:a1:ef:
17:9c:a1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:50:18 2025 by rpki-client