Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
File: qFOfk1XT63eLG7juJyMyYBGhIps.mft (raw, json)
Hash identifier: LSNLKFY/H/6BusK3Jj6SiIejD0sLabhjVKVpgIN+OZk=
Subject key identifier: D9:F1:41:D4:DE:20:7B:34:49:8B:6D:DA:D9:2F:8D:F1:39:FF:68:2F
Authority key identifier: A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B
Certificate issuer: /CN=a8539f9355d3eb778b1bb8ee2723326011a1229b
Certificate serial: 0197B9341B1406DECA8A1D9A3B01820A77DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
Manifest number: 1547
Signing time: Sun 29 Jun 2025 01:01:29 +0000
Manifest this update: Sun 29 Jun 2025 01:01:29 +0000
Manifest next update: Mon 30 Jun 2025 01:01:29 +0000
Files and hashes: 1: ShowtNM2m2UKeBL8F3fZYKX41FQ.roa (hash: fLdZxXolLRuOUGV4tUzHHqmQm+iuYEtRLW2OEHSE+Js=)
2: qFOfk1XT63eLG7juJyMyYBGhIps.crl (hash: XDOyioUu8C4UhVv3JmWpejzscL+jz7JH3G228R3wmZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:34:1b:14:06:de:ca:8a:1d:9a:3b:01:82:0a:77:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8539f9355d3eb778b1bb8ee2723326011a1229b
Validity
Not Before: Jun 29 01:01:29 2025 GMT
Not After : Jun 30 01:01:29 2025 GMT
Subject: CN=d9f141d4de207b34498b6ddad92f8df139ff682f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:48:72:80:f3:03:c4:c6:e1:a1:f5:c3:c0:04:
cf:1f:d4:d5:11:81:07:9a:b0:0d:e8:91:a2:90:2d:
a0:52:84:a2:0a:6d:b3:91:66:61:0f:2c:45:47:cb:
f6:0b:89:8e:27:68:0b:3e:09:94:d7:09:99:7a:f6:
69:91:5f:72:bc:8d:97:22:77:4d:dd:45:9b:40:74:
a9:2d:03:82:53:f9:47:34:ae:c4:55:74:c4:99:3a:
6e:3b:46:03:80:61:db:93:6c:b3:43:1f:3f:4a:f3:
36:e6:89:6d:08:61:6a:c6:31:d5:c5:de:7c:3e:34:
da:cd:3a:c8:33:95:f2:bb:17:c7:6f:e5:35:02:29:
e9:c3:20:fe:04:8d:4d:e2:0f:52:5c:6b:ef:97:4f:
ad:3f:a9:e5:da:bd:90:1e:d8:61:0a:7a:60:a5:db:
52:f2:43:bb:cf:c9:c0:68:cb:a5:29:56:4e:81:b7:
ea:42:1c:71:43:51:24:c4:6c:67:27:1d:ef:99:af:
6b:c8:8e:35:8e:57:1d:ca:66:ce:db:ed:b7:d7:af:
ef:d1:5b:5e:e0:9b:45:53:7b:da:4c:ff:56:50:3f:
bc:9d:6e:16:f1:e7:b2:e8:32:8b:31:0b:69:84:f7:
ba:c8:81:36:5f:bf:fd:9e:8f:0d:ea:19:7f:e1:a6:
56:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F1:41:D4:DE:20:7B:34:49:8B:6D:DA:D9:2F:8D:F1:39:FF:68:2F
X509v3 Authority Key Identifier:
keyid:A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f6:7b:f1:d8:bb:5a:78:4f:c2:8b:b0:52:9e:a7:55:dd:b7:
07:32:44:e4:6c:f9:b0:e9:bf:f4:19:ed:83:46:87:06:5f:ea:
20:77:3e:50:39:15:f0:44:c7:93:6a:e9:c3:09:0e:6d:bd:d1:
e3:c7:53:83:75:e1:1c:06:de:15:92:3b:11:8a:78:29:10:c9:
4e:cc:77:d6:2e:a0:8c:b9:6a:61:36:fb:b7:84:50:49:82:fe:
1a:c2:bc:5c:a9:2b:2b:40:86:d1:83:0e:19:84:7c:49:93:46:
68:47:f2:a2:8b:5b:dc:39:4f:43:01:5b:32:a9:33:78:b7:6f:
af:e5:5e:6a:f4:35:41:a9:92:02:ad:d3:60:e8:f5:4b:c0:1b:
83:02:6c:3a:ca:ba:86:8d:e5:e1:f9:f3:d1:e2:7b:c4:cb:7f:
2a:6d:e9:87:d1:89:3d:00:31:ff:ba:3e:8e:cf:4c:72:cc:69:
9c:30:af:31:8f:e2:f9:bd:9e:ce:b8:3f:e9:74:70:6c:cc:b3:
37:04:b3:57:ab:c8:17:06:a2:8e:65:37:68:6a:a1:41:f2:40:
f0:d4:f2:1c:d4:16:08:88:4c:34:76:7e:b8:45:07:58:da:77:
71:d9:62:2a:27:11:91:2c:b9:f4:c8:fd:25:37:cd:3a:76:c8:
4f:4f:8d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:16:38 2025 by rpki-client