Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.mft
File: qklDGDthG-Ogd1OCUJSQBIsK1zg.mft (raw, json)
Hash identifier: QDFO/jKkFzY5r5vGhAdGgauamiMRxup5FvROHeZ7LUg=
Subject key identifier: C6:03:11:CD:96:6A:66:83:BF:D2:C9:79:82:E4:34:BE:FB:32:C2:C5
Authority key identifier: AA:49:43:18:3B:61:1B:E3:A0:77:53:82:50:94:90:04:8B:0A:D7:38
Certificate issuer: /CN=aa4943183b611be3a0775382509490048b0ad738
Certificate serial: 0197B7B387092FD4ADFBB55DBC354872C3DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qklDGDthG-Ogd1OCUJSQBIsK1zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 18:01:25 +0000
Manifest this update: Sat 28 Jun 2025 18:01:25 +0000
Manifest next update: Sun 29 Jun 2025 18:01:25 +0000
Files and hashes: 1: _b9uzDBnaBhrr4RiKYd-HrjhIyY.roa (hash: zuVo5YCjE6oxIWEPlMV6dA4fTWapSfHiFlgPsUG/qhk=)
2: qklDGDthG-Ogd1OCUJSQBIsK1zg.crl (hash: BvU6AY6vgKi8/H0L9OznN6/FsHsWo2SsbjMfZRbHMxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qklDGDthG-Ogd1OCUJSQBIsK1zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:87:09:2f:d4:ad:fb:b5:5d:bc:35:48:72:c3:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa4943183b611be3a0775382509490048b0ad738
Validity
Not Before: Jun 28 18:01:25 2025 GMT
Not After : Jun 29 18:01:25 2025 GMT
Subject: CN=c60311cd966a6683bfd2c97982e434befb32c2c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:01:5d:f1:88:c0:61:07:37:bf:be:1d:14:0f:
e2:8f:ca:e8:ad:f3:fe:15:be:42:27:ff:3f:f9:ff:
26:87:cd:b6:47:34:95:56:75:5a:1a:f9:f3:44:88:
93:5a:26:0a:ff:19:06:6b:f4:1f:23:d7:83:11:fb:
8c:47:3a:15:7e:29:6c:82:e1:23:07:81:f0:9f:18:
b0:64:92:1c:fb:40:c0:bb:c3:3e:57:92:71:2c:e9:
79:b3:a6:ee:66:12:3e:8a:9d:4e:1a:5b:3a:e8:60:
18:7b:e6:ba:00:68:b9:09:2e:95:0e:ed:25:36:28:
f7:24:29:4a:c7:a2:3e:62:28:6a:e1:32:89:b7:4f:
0d:0f:0c:57:21:59:48:bf:a4:7a:0a:90:09:cb:34:
e5:65:f1:1d:b1:c9:3c:78:83:f9:9c:46:45:c5:5e:
7f:e3:18:b4:79:de:d5:db:34:d6:d2:e2:17:7d:46:
e2:62:18:d0:2c:ea:94:23:fb:69:a3:20:e6:17:c4:
5a:b1:19:1d:4e:0d:69:74:29:69:0b:81:82:bb:12:
64:57:b7:52:0b:1a:b6:49:d7:fa:08:bc:d6:dc:47:
69:d4:c0:82:24:0a:56:57:5f:a4:c2:5c:90:9e:a3:
98:bd:8d:03:35:27:1a:5c:8b:36:8a:3f:e8:0c:02:
87:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:03:11:CD:96:6A:66:83:BF:D2:C9:79:82:E4:34:BE:FB:32:C2:C5
X509v3 Authority Key Identifier:
keyid:AA:49:43:18:3B:61:1B:E3:A0:77:53:82:50:94:90:04:8B:0A:D7:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qklDGDthG-Ogd1OCUJSQBIsK1zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:22:78:96:53:7c:42:eb:28:1f:90:9e:3f:e2:49:be:07:6d:
d8:d7:c9:f4:8b:27:dd:17:8f:f0:45:0f:fa:53:7b:a9:12:b7:
4e:b3:de:32:ed:a9:84:d4:3a:f1:03:25:09:ef:20:72:f3:b2:
3a:92:5e:4b:92:aa:03:23:e9:38:19:f7:11:b1:f8:50:2b:e8:
7b:4a:45:7b:45:df:0a:08:35:10:d1:75:fd:a6:9d:57:2c:77:
4c:0a:d0:36:22:7a:2f:a8:ce:69:67:2c:26:cd:41:5b:91:8a:
dd:75:3a:0f:49:b1:6a:d8:52:5d:6e:d3:1d:1e:8c:8a:87:de:
cf:8e:69:af:eb:d0:3f:a4:e8:e2:e7:de:e0:1f:a3:ed:c6:21:
f5:51:0f:11:ea:cb:52:33:9b:49:30:d0:93:59:15:4a:ba:90:
54:16:b4:af:27:ea:9c:d5:55:29:1d:08:80:3c:c8:85:8c:f1:
6e:0a:77:8d:63:67:36:36:3d:00:82:86:95:47:06:02:9f:d0:
02:2f:8f:b6:7c:ff:36:4c:18:75:92:44:76:69:b6:d8:2b:a4:
02:8c:22:31:8c:e2:34:31:0c:6a:5d:42:3d:eb:89:1d:72:9e:
bc:35:83:8c:05:83:1b:d6:a0:f2:d8:48:fb:c6:82:86:ad:14:
8e:42:12:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:38:50 2025 by rpki-client