Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.mft
File: qQ2awu8R1UaTddbebGv3IRKeO3E.mft (raw, json)
Hash identifier: Pu4rBzOARJfpufC5WZMo2nQmq3qiv1wK9RfXmFyRFoM=
Subject key identifier: F3:48:C1:AC:BB:4C:30:11:1D:89:34:D3:A1:AD:53:5C:E0:8E:53:97
Authority key identifier: A9:0D:9A:C2:EF:11:D5:46:93:75:D6:DE:6C:6B:F7:21:12:9E:3B:71
Certificate issuer: /CN=a90d9ac2ef11d5469375d6de6c6bf721129e3b71
Certificate serial: 0197B9A1C4D8C8479DE0C05F71BD546F3252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ2awu8R1UaTddbebGv3IRKeO3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.mft
Manifest number: 14F6
Signing time: Sun 29 Jun 2025 03:01:16 +0000
Manifest this update: Sun 29 Jun 2025 03:01:16 +0000
Manifest next update: Mon 30 Jun 2025 03:01:16 +0000
Files and hashes: 1: qQ2awu8R1UaTddbebGv3IRKeO3E.crl (hash: e7j4v//50tOvIBlHe8zxgqojT+35MWZRDW+Rl2rZQIk=)
2: yuW5WVwgNaxBxObKx0w_CE3bdf0.roa (hash: bxzeDx/FJJDZscd0BPoaz8SHe0rmx/Qll6/QwchRolI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQ2awu8R1UaTddbebGv3IRKeO3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:c4:d8:c8:47:9d:e0:c0:5f:71:bd:54:6f:32:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90d9ac2ef11d5469375d6de6c6bf721129e3b71
Validity
Not Before: Jun 29 03:01:16 2025 GMT
Not After : Jun 30 03:01:16 2025 GMT
Subject: CN=f348c1acbb4c30111d8934d3a1ad535ce08e5397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:63:b6:27:51:b1:a0:b0:44:4e:f0:25:fe:5a:
13:a7:c2:54:32:ee:fd:80:4a:84:c9:30:77:97:b7:
32:25:6c:df:aa:d4:cd:be:65:df:08:e7:31:0c:f9:
30:63:b7:e5:ed:ef:d0:a1:6f:a0:e1:be:3b:15:1a:
90:9f:c3:d1:9a:d7:ab:16:b7:91:5c:0a:d8:f1:1d:
39:9d:8d:91:b0:b3:e3:d4:a4:21:db:57:be:60:09:
63:aa:1c:39:bc:03:87:8a:c0:9a:74:d2:20:30:2b:
41:6d:5f:64:ac:aa:93:38:40:19:e9:52:38:75:ca:
df:b2:0f:b4:99:a5:54:ff:ed:3f:a5:62:47:cf:d2:
d6:5c:66:91:1b:c5:dc:74:e6:d9:e9:1b:7a:8b:1f:
14:24:74:9c:87:25:32:05:4a:85:73:cc:01:d6:3a:
d7:a7:e2:22:78:0b:48:15:f0:3f:2b:f0:f2:7f:b2:
d3:43:6c:1f:92:07:e2:b9:04:43:1f:b4:29:73:19:
1d:52:1a:aa:ce:e1:22:95:78:28:ed:c7:7c:c5:b9:
1f:7e:1b:dd:4e:e6:5c:1b:3a:4c:20:fa:05:45:9d:
38:ba:49:c3:dc:8a:04:5b:40:69:e1:a9:c9:0a:78:
7a:97:b9:9e:86:3d:78:de:21:fa:36:c6:f9:44:4a:
ee:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:48:C1:AC:BB:4C:30:11:1D:89:34:D3:A1:AD:53:5C:E0:8E:53:97
X509v3 Authority Key Identifier:
keyid:A9:0D:9A:C2:EF:11:D5:46:93:75:D6:DE:6C:6B:F7:21:12:9E:3B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ2awu8R1UaTddbebGv3IRKeO3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:8a:84:48:30:ef:41:86:86:9b:86:2e:6b:79:3d:19:79:77:
94:af:5b:b5:a7:fa:30:c7:0b:0c:be:64:d9:d9:cd:9c:da:f3:
48:37:76:9c:b2:57:4c:a9:02:e4:f5:5f:7c:c0:1a:77:0e:9b:
30:1f:01:ee:97:41:3c:10:92:2f:ba:f6:77:3a:37:db:1d:27:
43:44:86:7c:f9:e2:b6:b0:22:3f:17:4d:90:ec:4b:45:ce:47:
9d:6d:47:bc:04:3e:c6:83:6a:f6:57:15:ef:57:ff:20:71:3b:
45:c4:39:6e:16:96:08:96:9b:cd:9b:29:5d:a5:73:de:c3:2d:
26:b8:92:bf:07:dc:e1:d8:c5:9d:39:77:b6:e7:4a:0e:2e:ee:
9b:70:67:bc:4a:f0:92:0d:e7:f4:e7:30:28:ee:98:28:a5:b1:
51:38:9b:f1:80:f3:06:2f:64:75:6d:92:51:ee:31:75:8a:aa:
e6:18:a9:c3:f0:a0:8d:b2:88:a9:fb:bd:5a:84:82:8e:44:5b:
f7:15:54:78:04:e0:d8:2d:5a:f0:c9:61:41:57:b9:51:e2:cb:
38:9f:30:0f:36:e5:05:a1:ef:95:9b:e9:c4:e8:45:41:fd:e2:
5e:56:3b:c3:2d:b3:8e:e7:a3:48:09:0e:23:c9:58:bb:6c:18:
5a:b6:74:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:57:53 2025 by rpki-client