Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
File: qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft (raw, json)
Hash identifier: qQP7VCbkWavIgNecFXdr11AoJMdPNxrJ16XgCpoc5yc=
Subject key identifier: 65:88:03:84:24:E7:B0:C1:B8:5C:8A:8F:93:BB:51:B6:B5:30:C1:4B
Authority key identifier: A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6
Certificate issuer: /CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6
Certificate serial: 0197B77CE9D7B234EAECC6F4D99F75506090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
Manifest number: 1098
Signing time: Sat 28 Jun 2025 17:01:46 +0000
Manifest this update: Sat 28 Jun 2025 17:01:46 +0000
Manifest next update: Sun 29 Jun 2025 17:01:46 +0000
Files and hashes: 1: 1-AU6Gnoq31NHxflgGui7pQnafXQ.roa (hash: EGLLwW1ofOs0SYvfXY13qswF8cFAf0RF4OYVmpVNmog=)
2: JyKT5t-tp9Ns-zQBDf52afbSU90.roa (hash: vZDex2xJzEBhdxg8YwQEm5MoYizntTQWWZeFLfZB0Ls=)
3: qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl (hash: gyT1yHqbOTyvDEcRQExG5OGmuZfwuWb+IgYeyRhZAQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:e9:d7:b2:34:ea:ec:c6:f4:d9:9f:75:50:60:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6
Validity
Not Before: Jun 28 17:01:46 2025 GMT
Not After : Jun 29 17:01:46 2025 GMT
Subject: CN=6588038424e7b0c1b85c8a8f93bb51b6b530c14b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c5:3a:4d:47:f9:15:64:38:f2:af:e7:8e:8f:
d3:e6:9d:96:a3:6b:76:35:14:8f:34:53:31:2b:69:
64:f7:75:80:cd:3c:28:fc:4e:64:d1:ea:36:33:5a:
8c:55:b6:82:dc:df:fc:af:8a:72:21:ac:5f:74:7b:
e7:5b:e3:db:fc:1f:f6:f3:9f:38:8a:60:42:79:9a:
7e:8e:cc:b9:ab:f1:aa:26:d1:a9:4b:61:c2:fe:93:
d0:66:52:56:af:27:78:0b:53:12:d8:e3:07:28:90:
f2:30:40:59:12:08:68:d0:d9:a6:87:f9:7d:15:b8:
b0:d6:a1:ed:ae:91:3d:26:2b:54:ac:26:2a:9a:ac:
28:a0:04:b2:8d:a1:46:2d:e1:bc:f0:fb:60:58:be:
72:53:36:36:2f:3d:74:bc:fe:00:a5:1c:49:a4:4d:
89:39:fe:4a:7a:5c:8f:e0:0b:c0:3d:48:9a:76:2d:
3d:c6:7b:fe:47:41:be:64:3b:f0:71:23:c5:48:23:
d8:ba:60:b7:99:90:68:05:5c:25:8e:f8:7b:7f:eb:
d5:11:dc:dd:32:e6:77:27:14:0a:45:54:c7:d8:5d:
ea:5b:10:c1:0d:39:bc:59:48:3e:72:f6:f2:ab:42:
d8:30:05:47:4b:e6:91:b0:a0:96:6d:12:67:5d:cc:
b6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:88:03:84:24:E7:B0:C1:B8:5C:8A:8F:93:BB:51:B6:B5:30:C1:4B
X509v3 Authority Key Identifier:
keyid:A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ef:56:a6:e2:d5:9a:50:df:e4:bb:22:17:43:9b:52:c2:9f:
87:aa:fe:aa:d4:85:39:78:a5:2a:98:20:3d:3b:b3:ca:94:c0:
e6:61:d7:33:4a:17:80:84:80:22:44:da:06:1f:46:c2:00:67:
ed:08:89:c6:e9:b1:b9:7e:35:c6:54:f0:ea:58:ef:f8:d5:74:
2a:8e:2d:f5:3d:35:50:9b:1c:0e:e9:70:d2:b9:49:1c:57:4d:
d6:8f:5c:87:6b:f0:af:f1:77:56:52:bc:d1:0c:52:52:dc:38:
d5:d4:50:58:d3:c7:e9:ba:46:0c:95:b6:3a:60:29:12:31:d6:
a5:d4:cd:40:e8:7d:95:33:af:0b:ae:f8:d6:f1:c6:49:ad:b5:
9b:09:fa:8e:5b:af:7f:c7:89:44:99:d5:58:6e:51:1b:7c:b0:
90:ff:f7:7a:ee:26:f4:d2:ec:4f:58:69:3c:31:b2:00:2a:25:
ae:d9:2e:4c:40:fc:ac:25:72:cf:04:57:e7:4d:3f:c0:7f:2b:
cf:65:fa:85:e8:95:ea:67:d3:04:73:2a:65:56:93:95:ee:e0:
68:47:34:25:2e:60:61:fc:1f:44:6c:d2:a2:b2:f4:f4:66:d0:
f6:39:2e:4c:b8:8d:60:2a:cf:3e:ad:67:9b:e0:d1:f3:33:4f:
93:18:b7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:34 2025 by rpki-client