Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
File: qexXvIRk_sLpobCY_840whqvnKY.mft (raw, json)
Hash identifier: E6KgwmDUzm5Cka5/WRfcSaUhWsQckPFTHHEkxoOxkVI=
Subject key identifier: 75:02:E3:96:E6:70:F0:03:99:95:A2:2D:EE:85:82:46:97:89:3A:2C
Authority key identifier: A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6
Certificate issuer: /CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6
Certificate serial: 0197B88EC30F38090CD82F5BEA4072D859D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
Manifest number: 15BE
Signing time: Sat 28 Jun 2025 22:00:53 +0000
Manifest this update: Sat 28 Jun 2025 22:00:53 +0000
Manifest next update: Sun 29 Jun 2025 22:00:53 +0000
Files and hashes: 1: 1-CZEw8pGGdh9Gwph40yHsdoq1ag.roa (hash: C4R2UwFpzsqxbaKGdNIAuHg0NhGWKQyDYz9JMjta9y4=)
2: KkLe_YT5Uk0GdABl6GPnDWFGMNQ.roa (hash: aAELh0L1Pt+xus/0OHPywPbhavPNQTpi8tpROW9r5vw=)
3: bvkEOSa8BWLrsJXoOS6vPdUb-3o.roa (hash: avVdlCWpdgw57lZLBjVHwn93ctSM7J2JECKH0ZE6DSs=)
4: qexXvIRk_sLpobCY_840whqvnKY.crl (hash: L72ZmjOe7L2kKCsankAtwDe8ZJzJJIxKvRm/Ddl4Rc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:c3:0f:38:09:0c:d8:2f:5b:ea:40:72:d8:59:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6
Validity
Not Before: Jun 28 22:00:53 2025 GMT
Not After : Jun 29 22:00:53 2025 GMT
Subject: CN=7502e396e670f0039995a22dee85824697893a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:56:13:23:81:26:ac:e5:16:45:e4:a8:ab:8b:
bb:6c:eb:71:2b:a0:d5:4f:7d:fc:f4:ce:3e:4f:e1:
d7:da:83:28:a7:42:8a:1b:c0:70:82:e8:b1:4e:34:
ac:4b:e6:af:13:df:b8:04:bc:96:02:0f:0f:15:4a:
4a:08:65:45:6c:6a:b3:40:2f:27:fd:a2:d8:7e:fe:
aa:24:80:f8:c8:75:30:f8:fa:23:88:b1:01:d1:3e:
3f:c8:27:84:e8:87:ef:f4:52:2f:8e:ee:3e:17:ec:
36:0d:5c:2b:d1:62:35:c2:85:9a:d3:61:b7:9b:f9:
af:12:f3:b3:1e:02:45:cd:e2:c0:23:c4:e0:33:3e:
36:67:78:50:63:55:13:24:64:93:4f:34:0f:d7:ea:
aa:80:78:a2:7a:a1:dd:ca:c6:08:aa:55:10:cc:ac:
a4:ff:f5:12:64:11:b6:2c:ef:c3:88:60:e6:74:3a:
cf:bc:5f:5f:2d:0b:50:04:52:da:d6:52:06:80:50:
50:d2:49:b5:ac:0b:cb:5c:e9:db:96:5e:c9:8f:06:
01:30:46:3d:51:68:80:a6:e1:07:55:9f:20:d9:81:
b0:3a:7d:0f:80:d2:48:2c:72:54:4a:60:d3:10:7d:
e5:5f:76:7d:2b:cd:c3:bd:77:11:15:32:25:eb:3b:
cc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:02:E3:96:E6:70:F0:03:99:95:A2:2D:EE:85:82:46:97:89:3A:2C
X509v3 Authority Key Identifier:
keyid:A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d3:1a:0e:80:f0:e2:47:17:57:c1:4c:aa:46:f4:6a:fb:62:
e2:3f:03:cd:c9:0f:e7:55:26:49:46:21:93:96:53:ce:e9:2e:
06:c1:85:0d:67:ba:84:a0:bc:cd:dd:82:e4:58:68:47:0b:a9:
92:61:1a:a5:fc:73:8f:4e:52:88:c2:15:10:a3:d0:65:66:9c:
3b:c7:f4:5a:b3:cb:01:e5:b4:ed:e2:95:0c:6a:ce:7f:9f:fe:
65:6e:cc:6c:e7:ab:3d:59:0e:71:9b:be:fa:26:f3:98:48:63:
c5:c0:8f:e7:9b:e3:a1:34:8b:9c:2c:fe:74:94:3a:4b:b8:46:
28:3b:7e:f2:f2:bb:bd:93:36:87:bf:7e:34:d0:27:e4:52:8b:
67:1c:54:1a:05:24:e1:d6:2c:71:13:bb:3e:22:69:03:dd:cb:
7b:7f:0b:4c:17:1b:5f:aa:48:34:89:ff:7f:45:01:11:5e:82:
5b:57:13:fd:f8:ac:cd:9e:2a:d1:d5:6e:20:d9:66:39:af:6f:
b2:64:a3:62:bd:8b:29:d1:c2:1e:c8:9a:06:fb:b3:fc:a0:c3:
d3:d1:7c:eb:31:50:14:44:cd:bb:c6:df:c6:64:a2:83:a9:e2:
da:71:5f:3a:69:18:37:6c:b6:08:75:04:67:94:1a:6d:2b:18:
89:ff:4c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:50:11 2025 by rpki-client