Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
File: qJbB4UyG5u9bFnJPcRdnbschSVc.mft (raw, json)
Hash identifier: uvEfqioOX6e2cn/pGFWyAUqPOPlf9h3hrzHxZ+SSTdA=
Subject key identifier: 0C:65:1F:D2:CF:A4:0B:ED:00:B8:D9:14:89:D3:40:3A:BA:6B:31:44
Authority key identifier: A8:96:C1:E1:4C:86:E6:EF:5B:16:72:4F:71:17:67:6E:C7:21:49:57
Certificate issuer: /CN=a896c1e14c86e6ef5b16724f7117676ec7214957
Certificate serial: 0197B7458D518362A2D6938A0F426BFA78B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 16:01:18 +0000
Manifest this update: Sat 28 Jun 2025 16:01:18 +0000
Manifest next update: Sun 29 Jun 2025 16:01:18 +0000
Files and hashes: 1: nHAl3SgY4EfLu7utGVmeJZcr1_s.roa (hash: lrIHVcXwhi/Eq6CWKi+Aq4ByD1FHp2btPHqZK4Ez+BE=)
2: qJbB4UyG5u9bFnJPcRdnbschSVc.crl (hash: grEP6eU1/WwFUS4tR1PNaKKCltROkmwLjN6brmke5vE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:8d:51:83:62:a2:d6:93:8a:0f:42:6b:fa:78:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a896c1e14c86e6ef5b16724f7117676ec7214957
Validity
Not Before: Jun 28 16:01:18 2025 GMT
Not After : Jun 29 16:01:18 2025 GMT
Subject: CN=0c651fd2cfa40bed00b8d91489d3403aba6b3144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:58:6e:f6:41:7e:40:1a:f6:f8:a7:09:92:2d:
6a:1b:52:21:54:39:bb:73:df:48:11:8b:4d:60:03:
41:3a:b0:8b:a3:35:b4:8f:12:c2:bf:56:76:94:2f:
6d:c1:90:46:cf:90:ae:ec:bd:be:66:2a:33:c9:49:
71:9e:82:d8:7b:5c:39:db:21:c1:bf:02:87:08:8f:
ff:16:71:a1:a0:f5:09:e6:1d:cd:42:eb:f8:d2:b5:
45:a5:a8:7b:6a:04:c6:d2:b4:6e:94:11:e7:9b:30:
1c:35:c8:41:39:93:60:63:53:e9:7e:f9:c4:5b:3e:
09:d0:87:b6:42:aa:ec:a7:70:72:24:73:3b:21:56:
12:0f:b9:2a:19:eb:d4:d8:0c:1f:0d:bb:78:19:22:
80:15:9b:60:72:9c:7e:68:7d:1d:51:3a:d1:4e:ce:
64:46:2c:a8:e9:ce:8c:99:8b:89:60:d9:e6:45:1f:
d6:cb:c3:f1:7e:88:cc:79:fd:80:a0:10:bc:53:76:
17:8c:7f:d7:ec:14:dc:a1:e0:cc:b9:b8:90:5c:75:
b1:e1:43:af:9b:5e:fe:5a:0f:7d:85:d5:3a:8c:86:
df:b5:57:2a:f9:7b:31:2c:f3:3f:bd:58:d8:34:3c:
50:c2:a9:3b:d9:ca:31:df:c1:a9:7c:7f:24:09:1e:
89:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:65:1F:D2:CF:A4:0B:ED:00:B8:D9:14:89:D3:40:3A:BA:6B:31:44
X509v3 Authority Key Identifier:
keyid:A8:96:C1:E1:4C:86:E6:EF:5B:16:72:4F:71:17:67:6E:C7:21:49:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:0f:90:2b:45:06:79:c8:4c:41:a5:b8:fc:2a:36:a0:24:ff:
0f:f4:e2:93:0d:78:1b:ea:79:35:84:1d:00:3a:36:93:f7:42:
5d:19:a3:22:f4:0c:01:a6:ef:bc:93:93:24:00:b9:78:fb:73:
dd:4f:66:bf:e3:a8:f6:d0:38:04:19:09:5b:a7:d9:e8:ba:6f:
54:48:aa:30:4c:fa:a5:73:c1:19:ac:cd:64:29:63:eb:a0:a9:
d9:ee:42:15:e7:61:27:00:29:96:ca:b8:eb:ca:72:76:ac:be:
5b:a8:56:23:85:61:b7:a2:5a:4b:b9:49:27:61:cc:71:fc:3c:
f9:d4:20:99:55:3b:45:50:a3:76:b9:e0:82:48:3a:f2:04:42:
1f:e9:29:5c:2b:2f:da:9d:d3:bd:7b:73:70:8a:f2:39:9a:06:
c0:58:9b:22:1e:ce:0b:86:fd:23:3c:65:8b:28:3e:50:07:69:
8c:d2:88:19:97:a6:50:90:47:aa:38:6a:2e:28:f2:22:bf:80:
c1:2a:5b:a4:b4:55:ca:3a:42:ad:4e:23:fa:c2:45:70:cf:68:
d4:0c:a3:a1:9b:c8:5e:ab:b4:df:ef:30:7b:d6:b0:30:62:45:
b0:26:42:4d:38:3a:73:33:03:cc:29:b5:32:a7:80:c7:2d:37:
f3:3d:ba:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:42 2025 by rpki-client