Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
File: qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft (raw, json)
Hash identifier: tggbeknJAk7UA+/Jyim4g7/3nqHQWZqMueA5BUMt3DU=
Subject key identifier: 96:6E:32:8B:B9:A4:B0:6D:E6:29:4C:D1:C0:76:37:54:38:FE:62:40
Authority key identifier: AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
Certificate issuer: /CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Certificate serial: 0197C982775F2AD6E45C48404407438CF484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
Manifest number: 15BD
Signing time: Wed 02 Jul 2025 05:01:00 +0000
Manifest this update: Wed 02 Jul 2025 05:01:00 +0000
Manifest next update: Thu 03 Jul 2025 05:01:00 +0000
Files and hashes: 1: 6IkTOlXjuiMiUAcYz6JmNLyjzkI.roa (hash: lvYkGWBMeYPfRVhHecKPB+lCXAgyiJ169VcA0wekGsU=)
2: e4TuQp4c2N02mdWdlxAx2GM5rFg.roa (hash: TkgW2WEclpl44YPmskP1q4vEinXMPrmbVI0ndJ9d/ec=)
3: qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl (hash: QR5IO3C4qVpnvSIZRbhVuRDdP48jIEWCb3LALqm+Z4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:82:77:5f:2a:d6:e4:5c:48:40:44:07:43:8c:f4:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Validity
Not Before: Jul 2 05:01:00 2025 GMT
Not After : Jul 3 05:01:00 2025 GMT
Subject: CN=966e328bb9a4b06de6294cd1c076375438fe6240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:73:5b:1c:56:40:35:16:b1:81:53:52:ca:19:
45:ef:3a:db:48:08:31:e1:20:b7:c2:c7:b8:a7:67:
85:26:a5:73:94:e1:df:13:0e:ee:81:4b:ad:91:cc:
e8:7f:00:67:f5:37:07:b6:5d:bd:11:e0:41:16:77:
62:c3:3a:63:d0:43:c5:90:90:15:4c:6f:9d:4f:55:
82:0b:3e:11:65:b7:7b:6b:f8:70:f1:1f:f5:a5:3a:
cd:8e:6f:50:77:17:b4:9b:67:9b:f2:34:8d:98:21:
fb:05:4f:96:74:4a:37:6a:be:ec:75:1c:20:e7:61:
cc:68:4e:c8:0c:05:c1:cb:31:84:d5:f5:b8:74:14:
5a:06:78:3a:36:0f:dd:0e:70:a0:76:59:08:db:50:
4e:07:47:a5:ba:54:b0:cb:4a:42:f3:c1:32:73:bc:
77:00:d8:b9:59:78:db:0e:0d:c7:90:94:d3:32:68:
ee:34:58:99:22:16:1c:34:ac:61:ad:cf:1b:6b:7b:
6f:79:70:27:7b:cf:1b:8d:90:fa:35:d2:40:d2:ea:
d3:ef:d7:95:9c:de:5f:a9:73:4c:17:f0:cc:55:b6:
7e:0b:49:08:7f:a3:49:3e:45:0c:e9:15:06:8f:31:
66:ea:68:18:a3:3c:87:fb:54:ab:9b:77:ad:5f:87:
5f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6E:32:8B:B9:A4:B0:6D:E6:29:4C:D1:C0:76:37:54:38:FE:62:40
X509v3 Authority Key Identifier:
keyid:AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:99:5c:c6:43:4f:12:83:a5:1c:43:f3:0d:33:d5:2c:c8:69:
81:64:b5:15:8b:c2:c2:9e:37:4d:2d:69:9d:1f:36:2b:a8:85:
5d:88:de:45:ac:9e:ff:4f:f0:a2:ef:7c:d1:72:66:d8:07:92:
61:f1:83:92:aa:f6:c6:d7:98:c2:a1:8d:62:f1:47:74:65:40:
82:f9:ba:7a:a2:e2:7f:76:08:50:d3:6f:6b:0f:ea:64:c8:f8:
0f:cc:53:9e:82:de:31:8f:3d:4e:05:a4:02:90:c2:37:94:f4:
ca:f4:df:5e:30:4c:ad:a3:8b:d7:45:24:dc:48:09:06:27:32:
98:b7:6b:5e:bb:61:f0:c3:1a:45:83:a2:bd:bb:59:dc:44:d6:
1a:9e:90:0b:39:12:70:45:b4:00:df:50:59:2c:d3:8f:f6:b4:
2f:64:f0:53:95:c7:07:c8:5c:04:df:86:42:6e:04:e4:de:70:
78:be:b0:39:ac:ed:02:2a:53:22:82:83:e6:5d:2d:df:98:b2:
7f:c5:d0:46:7f:61:14:20:b1:b0:c7:6c:91:ea:13:e6:59:f1:
84:7b:9b:fd:03:7d:ee:02:8e:86:64:ee:e2:b1:d1:da:ea:1a:
25:66:53:e5:a7:8f:7d:7a:61:38:ce:57:d4:00:c4:9b:8d:1d:
c6:71:6f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:05:36 2025 by rpki-client