Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
File: qSskQKfHot_PLkIW2oo73mi5uJg.mft (raw, json)
Hash identifier: NWsMO78KtDLbfCEbZ/GHGF6UhzKL3pGqW8lPvBQmHKg=
Subject key identifier: 71:9A:93:E7:7F:FB:EA:5F:33:1C:8D:89:C9:26:57:F4:03:3E:69:4A
Authority key identifier: A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98
Certificate issuer: /CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898
Certificate serial: 0197B7EA5B9D85D3992AAB2565760E77210F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
Manifest number: 1549
Signing time: Sat 28 Jun 2025 19:01:18 +0000
Manifest this update: Sat 28 Jun 2025 19:01:18 +0000
Manifest next update: Sun 29 Jun 2025 19:01:18 +0000
Files and hashes: 1: _n0xC-sidbdSFPfTnRV-lr4kGic.roa (hash: ++bpQemmXYA46AzwIRn3gko69y6uULCJsSLSxSSwsGM=)
2: qSskQKfHot_PLkIW2oo73mi5uJg.crl (hash: VjdM/KiBeyt/X1Ja3+LHy+AolXx5Nsh+RNI6b+V8stk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:5b:9d:85:d3:99:2a:ab:25:65:76:0e:77:21:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898
Validity
Not Before: Jun 28 19:01:18 2025 GMT
Not After : Jun 29 19:01:18 2025 GMT
Subject: CN=719a93e77ffbea5f331c8d89c92657f4033e694a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bb:1f:d8:d5:de:78:9b:0f:fa:77:59:6f:c9:
eb:7d:e5:0e:f4:aa:3f:31:a5:e5:10:7b:61:0f:1a:
65:9a:0e:85:7e:18:b8:54:f4:2d:71:bb:fe:7e:30:
8e:1a:e2:51:8d:7f:0b:1b:86:67:a2:bf:7b:ad:31:
c5:33:4e:d3:df:97:7c:10:9f:a4:54:e2:53:af:ed:
1d:a2:4b:02:61:0a:1a:2c:a1:3e:6e:b3:0b:c3:82:
5a:b7:19:89:a0:dc:fd:32:6f:53:51:40:75:db:91:
6f:b8:fd:c4:1a:9c:87:f7:db:9e:c2:d7:34:e5:c9:
f3:da:24:77:0c:07:04:bb:c2:78:a6:0d:d2:1d:51:
3f:a7:c6:57:86:7a:7e:e5:07:de:82:3a:96:64:ca:
eb:77:f5:0c:a3:d0:72:49:cd:55:15:80:62:79:2f:
1b:16:4c:1d:73:c6:67:7a:02:34:ab:f8:57:b6:a1:
a4:8b:da:e1:6e:b4:83:94:7a:3e:19:76:ef:cd:05:
ad:97:d6:77:ea:d4:f3:e3:81:a1:97:79:38:a6:df:
16:31:89:27:3a:04:79:09:fa:19:2a:12:36:23:72:
e8:aa:6a:ef:54:0f:b0:91:34:a8:9c:54:9c:90:e1:
dc:e4:36:cf:00:52:08:4c:ae:1a:ac:d1:87:11:ea:
7f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9A:93:E7:7F:FB:EA:5F:33:1C:8D:89:C9:26:57:F4:03:3E:69:4A
X509v3 Authority Key Identifier:
keyid:A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d2:82:5e:79:bd:05:f7:0f:22:d4:c3:59:30:98:2c:c5:3a:
97:67:2c:2b:52:63:85:b7:1e:9b:01:6f:d1:ee:12:13:4c:ee:
01:8f:3c:5f:ef:19:92:53:ba:09:5f:0c:2f:bb:b2:6b:62:90:
f5:37:e8:40:7b:41:51:02:8a:42:bd:0b:61:d5:5e:58:1a:be:
d0:44:ff:0f:fd:2e:a7:fd:53:f8:25:31:e4:1b:7a:80:97:c2:
9a:6b:e2:21:06:73:4b:ba:ee:36:b2:6d:6f:94:c2:ee:a7:14:
d4:4d:ff:9a:43:04:46:c9:b8:35:41:a7:1a:ad:c2:87:3e:b6:
89:7e:40:49:6d:86:1b:89:0a:20:a9:b8:4d:f9:7c:1c:59:5f:
c2:a4:2c:66:ff:5e:22:9b:53:43:85:7d:2f:81:0b:5c:56:36:
b7:a1:5a:b3:ab:2b:ac:7d:3c:ac:a0:ec:44:11:53:8a:ca:66:
4f:08:b5:b3:f1:f1:e6:bf:f3:00:f9:f2:5d:1f:0c:8d:e7:43:
9e:6d:7d:fb:aa:8d:00:55:aa:7f:c7:49:bd:72:9a:5e:a7:09:
46:4d:8a:bd:70:c1:ec:98:1b:72:ed:d0:bd:70:11:51:74:5b:
84:99:97:73:ef:d4:98:d8:44:92:2b:14:e8:4c:1b:1e:62:8e:
75:92:76:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:05 2025 by rpki-client