Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
File: qIrVRvGg74z3XJKnSL1chjYuIJs.mft (raw, json)
Hash identifier: vyRoPcmixn21RWy3ZMVgE/aa0n8ib/Qw11Kck2vkclE=
Subject key identifier: A8:34:CB:30:45:98:B1:4F:AA:E4:BF:2E:93:A8:51:0B:82:A9:59:F7
Authority key identifier: A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B
Certificate issuer: /CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b
Certificate serial: 0197B8210CCC5AC65D44A47E7A48626867C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
Manifest number: 0F62
Signing time: Sat 28 Jun 2025 20:01:03 +0000
Manifest this update: Sat 28 Jun 2025 20:01:03 +0000
Manifest next update: Sun 29 Jun 2025 20:01:03 +0000
Files and hashes: 1: Y18PuvKbRb3I33NFZERrmAggZBw.roa (hash: ulNop87p1OPj11wBSOeR/0XOStdPoDj14N+Cgskicec=)
2: qIrVRvGg74z3XJKnSL1chjYuIJs.crl (hash: YSLFIKfx8qXfgjdkn6uN4sR/jKlhHLDSGQJlXuTaJYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:0c:cc:5a:c6:5d:44:a4:7e:7a:48:62:68:67:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b
Validity
Not Before: Jun 28 20:01:03 2025 GMT
Not After : Jun 29 20:01:03 2025 GMT
Subject: CN=a834cb304598b14faae4bf2e93a8510b82a959f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f3:b4:62:f5:32:c6:d8:a1:96:25:30:0a:c0:
e0:d4:81:18:20:95:15:91:03:1b:29:bb:e1:4b:00:
e8:42:7a:ee:1f:d7:36:81:45:78:f4:ff:aa:ea:8f:
13:27:67:ef:e7:f7:de:51:b8:e5:1a:7b:2b:55:f2:
54:d7:f0:ac:3e:53:6b:40:f3:6a:cf:04:c2:67:f2:
87:2c:6b:6c:68:40:6a:a0:ec:9f:72:43:b6:c8:22:
85:0d:f1:27:d7:aa:b0:0e:e8:7d:b9:7e:10:b9:ff:
6c:68:e1:b3:c1:84:d2:24:90:19:2f:81:05:fb:4f:
b4:a1:39:fe:8c:25:a2:a6:96:ef:b8:0e:a8:48:88:
dd:d4:6c:43:6d:bb:de:c8:9c:5f:1a:1e:07:95:d5:
78:cc:98:cd:34:c1:a2:14:18:48:5b:6e:67:75:57:
a8:a7:15:bc:9f:36:1b:01:27:0e:f0:c7:42:5b:05:
d4:49:07:f9:20:40:49:5f:c6:8f:c4:d7:29:42:95:
3d:48:52:c5:3c:0d:31:1d:f0:88:92:87:2c:5b:a1:
c9:6e:c2:72:97:2a:4f:f4:31:7c:37:16:87:45:30:
41:34:38:d9:51:51:a5:fa:79:39:54:78:58:f9:8b:
6f:dc:c1:ca:09:ff:0b:42:f1:57:9e:e0:24:2e:e4:
17:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:34:CB:30:45:98:B1:4F:AA:E4:BF:2E:93:A8:51:0B:82:A9:59:F7
X509v3 Authority Key Identifier:
keyid:A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:69:47:29:d9:9b:94:3a:f3:9d:49:dc:68:f5:af:c8:0c:01:
80:b2:c9:b6:c8:06:d0:a9:c1:7b:2c:c8:e5:77:92:c5:ce:c9:
59:e4:03:5f:dd:32:41:8c:2a:f0:9b:47:ff:45:c1:7c:68:73:
da:80:00:1e:20:72:4a:eb:e2:bf:a5:77:90:49:ec:c2:35:92:
9c:a1:4b:80:16:10:a5:6b:ce:17:54:31:c3:a0:1d:c6:b7:61:
7c:1e:01:95:fa:67:94:2a:7c:4a:03:ee:2e:3a:02:0d:62:77:
08:8f:d5:c7:53:05:ad:f0:6b:19:6c:c3:91:73:f5:54:e5:97:
4f:aa:39:4a:80:d6:3d:28:05:de:f9:0f:ae:76:16:e3:6d:af:
e1:40:18:83:1e:ef:86:03:b4:ba:ad:2a:5d:53:bc:c3:b5:f6:
4f:a4:23:bf:d3:2c:1c:d2:f0:5d:18:ee:77:aa:2a:31:32:c7:
4a:80:a2:09:f2:19:2a:f5:10:0c:8e:4c:1d:3a:06:af:0d:19:
09:dd:ee:b4:ac:0c:05:c8:c5:2d:98:88:3c:19:7e:6f:37:1d:
38:bd:d9:16:a1:06:46:c0:ba:8b:44:62:16:50:bb:3a:7f:3e:
b1:84:0a:5c:06:cb:b0:28:bc:86:75:62:76:03:da:c6:85:38:
82:e5:a4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:08 2025 by rpki-client