Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft
File: qS3HvbydCXM23mJDtVCrFzN16jk.mft (raw, json)
Hash identifier: WCKG7U9uID+ZP7nsEH33AbFkpb2RaJtFd0ckYdFLuAU=
Subject key identifier: E3:60:A2:2C:C6:67:82:A1:FC:1F:94:91:01:D6:56:31:60:DF:91:FF
Authority key identifier: A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39
Certificate issuer: /CN=a92dc7bdbc9d097336de6243b550ab173375ea39
Certificate serial: 0197B6D7609865EB4ECD11157535245F329E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft
Manifest number: 0CD8
Signing time: Sat 28 Jun 2025 14:00:57 +0000
Manifest this update: Sat 28 Jun 2025 14:00:57 +0000
Manifest next update: Sun 29 Jun 2025 14:00:57 +0000
Files and hashes: 1: DGt82DR6xw_Ywh3-AvmkhvWCcVM.roa (hash: Xe6PXCoxFN3TxuAuxssMLTkZiOn7w8CCGbAYJjxvzp8=)
2: ICTqfYBG-REglE6QLqLm2DMr9nE.roa (hash: tDqSslkp4cv0xRmwxWP8ihUEHojImR31lIwN5aeFXMA=)
3: UxnwQU-ZGAuotd8bwz7nlEVCsKA.roa (hash: WlUQqIFYI5VcIHzcu2H+hLq92ENL7s5Vno3Whj19yac=)
4: qS3HvbydCXM23mJDtVCrFzN16jk.crl (hash: vAuhBs+0yBNkhKLtI1OMIHpe3QD2F5kdO28oWnw/RwM=)
5: z4IiemcHS1pMiHT-EsPFFeOITkw.roa (hash: 0Cm5tDp/8EqZeA3+YLY/lnsQEFVnqQEXb0poa3VHvws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:60:98:65:eb:4e:cd:11:15:75:35:24:5f:32:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92dc7bdbc9d097336de6243b550ab173375ea39
Validity
Not Before: Jun 28 14:00:57 2025 GMT
Not After : Jun 29 14:00:57 2025 GMT
Subject: CN=e360a22cc66782a1fc1f949101d6563160df91ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:83:ac:7c:c4:16:7d:99:03:85:24:da:88:95:
52:3a:92:57:65:13:70:52:96:b2:cb:a9:62:89:10:
2c:19:91:b8:53:fb:f3:aa:31:f8:95:c5:0d:b5:8a:
70:90:cf:59:fe:9d:0f:e4:88:6b:18:f1:5a:88:cd:
da:e5:fa:54:26:f6:3e:72:54:8f:f9:52:50:d3:31:
1d:35:7c:78:f3:68:9f:60:7b:68:b4:88:59:7f:9f:
f6:d4:30:e0:0f:aa:29:be:07:b9:3a:d1:23:c1:6b:
31:03:61:ac:ec:ff:43:91:73:af:28:1d:30:6d:df:
e9:d1:49:eb:1d:9f:82:06:5d:bb:a4:74:63:67:ac:
be:2a:ef:73:2b:23:53:41:b5:62:5b:ab:0a:44:6b:
85:9f:39:27:be:fb:75:31:83:fb:5e:00:ef:39:35:
c4:c4:a9:4a:4f:14:d8:15:f1:dc:c5:cd:07:ec:6a:
44:b3:91:34:48:d3:5e:9f:37:91:1f:b1:ad:2f:d9:
06:50:c6:72:9b:26:d8:5b:5b:d4:7b:e2:75:dc:85:
c9:42:aa:2c:3c:49:ee:0e:70:d1:b3:0d:1d:50:e9:
3d:9e:c5:cb:cd:a2:58:06:4f:e7:bb:aa:ec:ac:48:
01:44:d3:b7:d2:38:69:ac:5e:14:2f:26:5b:ac:72:
75:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:60:A2:2C:C6:67:82:A1:FC:1F:94:91:01:D6:56:31:60:DF:91:FF
X509v3 Authority Key Identifier:
keyid:A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ac:47:cc:62:83:15:8b:be:4d:1e:60:64:73:0b:bb:8a:30:
fd:73:0b:68:af:9a:32:3b:6b:50:08:a0:65:06:0e:e6:71:3d:
6d:19:ba:3a:03:1a:8e:73:cf:25:89:1f:52:af:d2:ea:85:db:
fd:fb:91:5e:4a:be:49:c7:59:8f:e6:83:67:5a:99:6c:9f:90:
4b:8e:2a:43:1a:f0:6d:5a:c2:f7:e3:13:58:c2:06:82:e3:97:
05:0c:2b:ae:b1:b9:61:2b:f6:31:7f:74:6a:98:7f:c4:b1:04:
d6:36:85:6c:1a:10:89:cf:51:8b:33:7e:74:10:33:70:e7:23:
99:89:40:6d:27:44:7c:1c:75:48:fd:46:3f:d8:82:17:3d:be:
c8:51:b4:b9:12:1e:74:40:1f:bf:79:59:4a:9c:91:b3:08:68:
06:5a:6f:6f:cf:4c:39:c5:dc:b5:75:c5:ec:8f:0a:d2:65:5e:
c0:9a:71:be:59:84:90:35:4b:de:fb:10:c2:56:b0:cb:eb:08:
52:c0:f4:ff:3d:87:b1:72:1c:a1:bd:9a:e7:8e:9c:9c:f0:8a:
02:d3:13:cb:a6:1d:a1:d3:7e:d3:09:54:dc:05:17:54:ab:fd:
5f:b7:b2:95:1a:24:44:38:a1:e7:64:82:14:da:d3:b8:ab:19:
63:41:88:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:12:56 2025 by rpki-client