Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
File: qPAjGPLOly5yQIzMx9MgrzDNKw0.mft (raw, json)
Hash identifier: sYjZKk6Nx95mYmG3BTxW8377dYn3Vh3j91uGmGglC0c=
Subject key identifier: 18:A0:CE:52:AB:44:F3:07:6F:9E:6B:0E:A6:B4:B8:10:4A:4B:3B:7A
Authority key identifier: A8:F0:23:18:F2:CE:97:2E:72:40:8C:CC:C7:D3:20:AF:30:CD:2B:0D
Certificate issuer: /CN=a8f02318f2ce972e72408cccc7d320af30cd2b0d
Certificate serial: 0197B7457934F24789327DDA3E7DA1071FF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
Manifest number: 14AA
Signing time: Sat 28 Jun 2025 16:01:12 +0000
Manifest this update: Sat 28 Jun 2025 16:01:12 +0000
Manifest next update: Sun 29 Jun 2025 16:01:12 +0000
Files and hashes: 1: _RYA60WhNQpChcuS-ZhpeHNn3Ro.roa (hash: /o7/5SeEgngQyysQsPfhFgp/4dtDLAhE3JTXwNG/WOo=)
2: qPAjGPLOly5yQIzMx9MgrzDNKw0.crl (hash: nG6uhItxDvXOKLj0fmdoueewIOAerWJliufFhFQ/IJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:79:34:f2:47:89:32:7d:da:3e:7d:a1:07:1f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f02318f2ce972e72408cccc7d320af30cd2b0d
Validity
Not Before: Jun 28 16:01:12 2025 GMT
Not After : Jun 29 16:01:12 2025 GMT
Subject: CN=18a0ce52ab44f3076f9e6b0ea6b4b8104a4b3b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:15:96:5b:75:02:2d:cf:94:fc:44:6a:9d:fc:
33:b9:54:ab:9c:78:8b:c7:06:4f:59:38:85:14:86:
d5:3a:20:ee:3a:3a:2d:a3:7e:31:c0:80:63:f8:b4:
d4:25:be:b3:8d:9e:8e:9b:6d:a2:63:f6:39:0e:da:
09:d3:97:f1:dc:a4:cf:64:76:42:fe:23:41:cf:81:
46:f5:39:f1:56:96:2c:24:fa:a6:24:0d:76:3c:53:
e9:95:e7:02:c8:42:56:45:2b:49:a2:4a:e8:50:f7:
8d:78:44:7a:da:8f:31:b5:7b:9c:96:68:e7:e7:ba:
69:fe:27:fa:bc:7d:8c:ee:07:49:dd:99:e0:53:65:
43:de:9f:4b:0d:80:ac:ab:8b:01:20:01:cb:55:4f:
5a:52:15:fb:24:bd:7c:13:f0:01:dd:f6:f7:65:5c:
35:9a:32:28:ce:6c:b6:0a:6c:4f:e8:4f:26:a7:55:
1e:26:1f:83:6e:ae:34:a6:1c:ed:9f:42:0d:31:63:
9a:99:91:b6:bf:a2:ad:07:61:09:70:b7:d0:f9:95:
c8:d1:9a:83:16:b0:1b:23:65:cf:7b:c0:55:0d:8a:
92:f4:e1:3b:0d:ae:43:23:34:1b:20:07:73:6f:06:
b9:ec:77:01:84:54:09:4e:53:ec:82:43:22:61:31:
bb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A0:CE:52:AB:44:F3:07:6F:9E:6B:0E:A6:B4:B8:10:4A:4B:3B:7A
X509v3 Authority Key Identifier:
keyid:A8:F0:23:18:F2:CE:97:2E:72:40:8C:CC:C7:D3:20:AF:30:CD:2B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:1c:33:ee:59:18:fe:14:71:33:ba:3d:d3:f1:30:c4:88:61:
e1:4f:f5:d1:2b:63:2a:ca:63:68:42:c9:1c:db:8c:dc:24:fe:
6a:32:f2:2d:38:b3:9e:ec:dc:77:5a:eb:12:9e:39:de:37:94:
ba:81:84:69:5a:bc:fd:d3:57:4b:95:42:79:00:16:3b:00:8d:
dd:8e:92:dc:55:b7:89:1e:e7:64:d0:91:c3:f9:7e:84:3e:8c:
16:62:ca:18:10:76:1f:d4:13:00:40:24:4b:7c:bf:4d:3e:6d:
e7:56:53:e9:dd:d7:4d:f5:eb:64:9c:f4:fd:30:d5:b4:72:67:
8a:46:a0:11:98:a7:09:97:a4:fa:4b:c6:4b:6f:ca:06:5a:25:
61:17:74:db:87:fd:11:21:02:38:be:e6:de:60:98:38:c8:30:
d3:27:ab:49:bf:d2:35:a6:bc:73:9b:a1:fb:43:97:81:ae:1b:
71:50:ce:f3:fe:4b:fc:6b:71:10:c7:81:14:27:5b:ba:1b:5d:
b4:5a:13:3d:73:5f:c5:d3:5a:bb:93:36:6c:87:1e:47:59:4a:
53:9b:2d:4e:56:77:de:9c:72:0d:e2:10:0b:52:6c:1c:05:68:
07:0f:e6:76:25:c6:6d:03:37:dc:3d:bd:88:9d:2f:e4:46:73:
cc:a1:60:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:27 2025 by rpki-client