Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
File: qIAb4jY_IRvS9XgYrer5wNvhS9s.mft (raw, json)
Hash identifier: cfBvWyOBdTpSrmQe9d6yFbNUh7OveTo9ple4a269xfc=
Subject key identifier: 38:D8:4A:3A:67:49:BC:BC:FA:F2:3A:F2:8B:28:49:42:4E:57:8D:48
Authority key identifier: A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB
Certificate issuer: /CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb
Certificate serial: 0197B77C9116E8FB2A5800D59C0D2412B38A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 17:01:23 +0000
Manifest this update: Sat 28 Jun 2025 17:01:23 +0000
Manifest next update: Sun 29 Jun 2025 17:01:23 +0000
Files and hashes: 1: Ioovps5s613OBdQzBzryR2Ja3A0.roa (hash: ATzykv0spHuFN9BLvq9b09tLyJhBjFr/aCEbExY3CKs=)
2: aQTW2xIeYuZvcEH7gsYJNqz73Xs.roa (hash: ga2DmH5h7HfJ0XIXHVbsof3jQ3Sa9KHt/wMuvsxWtEk=)
3: qIAb4jY_IRvS9XgYrer5wNvhS9s.crl (hash: sNeMRD2yB/dsi3TU8EVOIeO/6Gx4HCywYN1mGVuk8Sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:91:16:e8:fb:2a:58:00:d5:9c:0d:24:12:b3:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb
Validity
Not Before: Jun 28 17:01:23 2025 GMT
Not After : Jun 29 17:01:23 2025 GMT
Subject: CN=38d84a3a6749bcbcfaf23af28b2849424e578d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:52:21:b9:63:be:ae:57:38:24:2e:03:2f:c1:
e7:55:62:f4:bd:c0:ab:e2:fc:85:70:a2:2f:b6:4a:
ff:8a:62:b7:07:af:85:d1:e4:63:8e:b1:c6:73:ed:
19:d3:1c:cd:1f:84:21:ed:1d:ae:2c:fb:2e:d7:d1:
96:41:c7:9b:60:8e:dd:06:0a:77:27:c3:b5:82:1b:
05:7e:61:07:58:ca:d6:fe:a7:3d:07:e0:34:8b:d6:
2c:13:66:9f:a2:61:48:a5:dc:2a:a0:05:b9:dc:ce:
83:28:9a:5f:55:f3:8e:d8:6c:f0:51:33:8b:d7:0e:
97:28:93:2b:5e:03:0f:71:a3:de:73:49:f3:ba:61:
85:2b:b5:10:5e:f0:b2:c5:09:c6:62:00:8c:24:f1:
23:c0:73:6d:d0:a2:c3:18:36:2d:4b:a9:87:a4:6a:
b8:d1:ff:bd:c7:ec:60:0e:21:52:46:5f:ed:a3:3c:
fd:cc:87:9a:ce:30:94:68:58:46:9d:ce:8a:1a:b7:
0f:35:80:b8:a5:c2:f3:25:15:e5:e0:a1:1f:b0:d3:
51:0d:ec:aa:f7:39:03:04:0a:d2:de:d6:43:56:86:
8b:af:ef:a2:d4:9a:e1:6f:e7:78:f4:c1:bb:eb:32:
60:a1:f5:b1:32:15:d1:75:04:11:9d:0a:7c:60:2b:
8d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D8:4A:3A:67:49:BC:BC:FA:F2:3A:F2:8B:28:49:42:4E:57:8D:48
X509v3 Authority Key Identifier:
keyid:A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:3c:84:33:3d:01:cf:a9:0c:40:12:5b:80:4d:36:7a:98:30:
7a:10:bf:8e:62:d4:0f:f0:07:25:76:11:35:11:eb:0d:ff:28:
7a:94:11:1c:a2:9e:07:42:96:48:16:09:c2:16:1e:d3:9b:66:
fb:d6:be:49:ac:71:de:c7:29:91:2a:76:c4:f4:7d:2c:d3:9d:
66:0f:fc:b5:60:e7:08:96:16:b1:d6:18:fb:a5:26:f1:cf:72:
6c:98:fe:c5:12:99:58:47:ed:eb:c9:b4:b3:95:8e:31:d3:fb:
ee:02:73:c3:3c:08:6c:5b:76:73:cb:e3:8d:99:b0:fb:d9:e5:
a0:6c:35:61:c2:61:34:58:aa:89:2d:5c:8a:09:aa:91:43:69:
5d:55:9e:f6:d6:4c:11:24:a2:a2:35:cd:a4:ac:a0:bf:94:77:
de:3c:95:fe:8a:df:68:f1:ce:1f:9e:32:d5:10:80:d3:c8:53:
5b:0f:0c:73:5b:e8:b0:b4:9c:d0:d1:f9:5c:bd:b4:01:b0:cc:
3a:c9:9a:88:9c:08:99:f0:d1:9d:d1:af:6d:cd:46:db:25:34:
b7:52:85:13:c4:e9:6b:87:e5:c9:18:3f:9f:44:7e:5c:aa:e8:
aa:62:ba:e1:f8:f9:59:73:56:7f:e4:f6:2b:74:78:68:b1:aa:
f7:23:5a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:24 2025 by rpki-client