Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft
File: rQt55LWcX82kk6IK0Y6UVYWdAxs.mft (raw, json)
Hash identifier: YQpSsvFGtpQajSf4zVl1TtdErBAA5qcYOkpwbWYdr0s=
Subject key identifier: 01:C4:FC:21:79:38:D0:9A:2B:0F:94:23:29:A4:2E:D2:75:83:CF:2B
Authority key identifier: AD:0B:79:E4:B5:9C:5F:CD:A4:93:A2:0A:D1:8E:94:55:85:9D:03:1B
Certificate issuer: /CN=ad0b79e4b59c5fcda493a20ad18e9455859d031b
Certificate serial: 0197B70ED4640D36CF33BAF000D74D067E2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQt55LWcX82kk6IK0Y6UVYWdAxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 15:01:31 +0000
Manifest this update: Sat 28 Jun 2025 15:01:31 +0000
Manifest next update: Sun 29 Jun 2025 15:01:31 +0000
Files and hashes: 1: rQt55LWcX82kk6IK0Y6UVYWdAxs.crl (hash: c4Ttut5k/SNfslcn6IDCvTyWwopIxeql579c3jRefec=)
2: u-TIzzCbIsSdGOd1CtfNEcgemko.roa (hash: DN7JFzlpz7Go6ldmAhoYI+Qwq1vNoGjP9zoXjX6dqwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQt55LWcX82kk6IK0Y6UVYWdAxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:d4:64:0d:36:cf:33:ba:f0:00:d7:4d:06:7e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0b79e4b59c5fcda493a20ad18e9455859d031b
Validity
Not Before: Jun 28 15:01:31 2025 GMT
Not After : Jun 29 15:01:31 2025 GMT
Subject: CN=01c4fc217938d09a2b0f942329a42ed27583cf2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2f:f1:16:48:7c:d2:b5:bb:03:fe:a0:1e:36:
b5:46:ab:09:8c:15:ef:46:9b:a8:d3:8d:cd:c9:63:
85:88:00:ac:52:28:a2:8d:f6:fa:64:25:e5:e6:44:
68:69:15:7e:3f:e2:8e:c9:7e:26:f7:35:2d:ae:85:
74:6f:d7:34:6c:31:ac:9a:21:71:69:7b:c0:3c:5e:
32:18:7b:be:d3:27:ca:f5:80:4a:41:5b:b5:bd:a2:
30:c5:ee:5e:e4:7b:89:7f:ec:2f:a2:5f:4d:ba:1b:
e3:23:7f:fc:ec:10:b2:7a:34:02:24:42:0e:4e:c6:
95:94:58:25:48:d1:32:3d:78:47:bb:05:c0:71:94:
46:48:05:5a:55:da:b0:91:52:cd:13:19:07:6d:de:
67:ab:a4:a8:f4:69:97:b9:50:ad:93:8b:ca:36:3c:
d5:cc:49:f8:23:28:7a:f9:93:73:f3:6d:b4:6c:42:
d8:bd:0f:3b:e9:ed:e4:06:10:f5:c2:80:22:5e:55:
f0:ea:1a:c3:29:2c:95:10:59:66:03:20:b0:1c:8c:
cf:86:12:df:eb:37:2f:f8:3c:64:91:99:08:71:b5:
3c:54:a1:c3:d8:2e:cc:f4:ef:a9:28:e6:5d:df:9c:
75:5f:e9:fc:58:50:a3:e5:a6:bd:19:a7:1d:12:ca:
64:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C4:FC:21:79:38:D0:9A:2B:0F:94:23:29:A4:2E:D2:75:83:CF:2B
X509v3 Authority Key Identifier:
keyid:AD:0B:79:E4:B5:9C:5F:CD:A4:93:A2:0A:D1:8E:94:55:85:9D:03:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQt55LWcX82kk6IK0Y6UVYWdAxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d4:8a:e4:72:02:83:c9:ef:3c:e4:c1:13:11:6e:94:38:8a:
62:3c:87:b6:b1:53:01:16:9d:0a:29:ea:cf:af:89:cb:1d:65:
e9:2f:47:61:fb:3b:ca:5d:22:fd:8f:ec:fa:8e:17:50:98:03:
0f:5f:2a:ef:b5:47:0d:fe:5e:5c:4a:16:6d:7a:4e:0b:47:8e:
db:1e:fe:a6:1a:b0:b7:06:63:6d:48:4f:be:87:e8:3f:6f:02:
3d:da:c1:bd:47:3a:b5:51:ff:b2:b9:63:db:03:39:01:52:93:
7d:a3:cf:67:5a:40:96:31:ae:42:07:5f:00:b2:ca:dd:e7:de:
64:96:da:00:cd:77:08:44:fd:34:30:b0:a6:98:a7:43:f9:d5:
0d:13:73:20:26:34:cf:52:6a:74:e5:01:2b:85:f5:57:50:ab:
1d:88:5c:79:71:0f:74:21:0f:68:59:3b:db:8c:74:93:40:7b:
c8:f0:2d:e8:a5:20:c9:e3:50:a0:16:f2:07:29:df:70:3e:16:
5e:6f:f1:4f:39:fe:a9:e6:5a:48:5f:09:19:a8:b4:62:6a:4e:
9f:be:dc:7b:98:77:7d:9e:1f:89:36:0a:87:b3:b6:66:df:19:
7e:95:79:36:0c:a4:0c:86:f3:b3:a1:b7:f6:2c:fd:0f:e4:c8:
34:77:2c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:07:08 2025 by rpki-client