Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
File: sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft (raw, json)
Hash identifier: s3tKIZC/pkb/fmbcpU4cjP/z5U5bmCCLjA6HOPEG9fM=
Subject key identifier: BB:17:15:3C:0A:CC:D9:C3:98:42:AE:3D:5A:EE:01:D6:41:6E:DC:F5
Authority key identifier: B2:A4:8A:F3:D9:69:31:BD:90:C3:BF:D5:5F:1F:A3:04:7B:35:60:14
Certificate issuer: /CN=b2a48af3d96931bd90c3bfd55f1fa3047b356014
Certificate serial: 0197B7EA870FDF49708C8C8E6528C9783322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
Manifest number: 0FE8
Signing time: Sat 28 Jun 2025 19:01:29 +0000
Manifest this update: Sat 28 Jun 2025 19:01:29 +0000
Manifest next update: Sun 29 Jun 2025 19:01:29 +0000
Files and hashes: 1: snSOZMPfK49AItHHPweedqu08i4.roa (hash: pOp6DYxwdd50QS7EO4q/xTqIWe4F0C/r3RXRy+6+GXo=)
2: sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl (hash: aXj+tGAsMPhUu/T7M0NZLtmHMSMwT0A+5u3mj3a2/0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:87:0f:df:49:70:8c:8c:8e:65:28:c9:78:33:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2a48af3d96931bd90c3bfd55f1fa3047b356014
Validity
Not Before: Jun 28 19:01:29 2025 GMT
Not After : Jun 29 19:01:29 2025 GMT
Subject: CN=bb17153c0accd9c39842ae3d5aee01d6416edcf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ab:b2:6e:a2:13:8e:d5:5d:5b:f4:a9:84:24:
23:fa:8c:50:a4:ab:fc:7d:78:c3:41:cd:56:8a:7f:
ef:3b:80:e0:18:82:4b:27:0b:a4:3b:80:f9:e9:f0:
28:1b:74:b7:b7:03:cd:b4:3c:a4:2b:ba:ea:9d:c8:
ba:e2:eb:b2:48:56:71:17:35:51:2b:aa:65:6c:c3:
74:46:4c:9a:a5:f4:ba:8c:4d:03:a0:03:40:2d:50:
26:dd:8b:c2:25:70:c7:f8:7d:55:c8:e0:b3:a2:3c:
0b:cb:4b:ee:f6:e0:d6:47:13:38:30:30:b6:94:36:
c4:62:47:17:65:45:30:87:15:bf:bf:42:bf:1e:5a:
2e:f0:4d:14:ec:ed:e9:dc:d4:b4:3a:b5:a5:de:da:
a9:26:c3:1b:aa:cb:f3:68:91:29:25:65:ae:7b:12:
db:f9:0d:e5:cb:21:a3:1c:b0:9d:29:07:3e:7b:0a:
6c:04:a6:b2:c7:e5:c2:05:57:55:0d:6c:1a:06:94:
d9:4d:02:88:65:a9:a6:d7:f6:e3:a0:7e:4c:54:53:
05:10:0c:83:a0:21:f9:f0:68:3b:88:0a:e0:61:65:
9a:61:4a:4d:11:34:cb:f1:aa:dd:87:21:b9:82:70:
ac:0f:1d:83:d8:4e:0a:96:80:7d:40:93:48:91:f7:
a0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:17:15:3C:0A:CC:D9:C3:98:42:AE:3D:5A:EE:01:D6:41:6E:DC:F5
X509v3 Authority Key Identifier:
keyid:B2:A4:8A:F3:D9:69:31:BD:90:C3:BF:D5:5F:1F:A3:04:7B:35:60:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:43:a9:eb:24:24:f1:7c:37:82:b6:2d:e0:2f:03:1a:17:92:
2c:06:cd:f7:a0:77:1c:e2:1b:d8:7f:93:f3:a0:e8:0e:6e:84:
8a:8c:77:0c:ae:4e:74:a3:2b:ab:1d:17:1d:a5:bc:f1:a1:c5:
29:97:c9:1e:d3:00:8c:ad:56:9f:fc:30:8e:fb:2a:ee:10:42:
a4:07:e4:59:ab:db:95:7b:8b:df:39:30:29:0e:d0:14:60:62:
5b:36:63:76:10:1c:33:e9:36:c2:f2:1f:6b:d6:ce:71:21:b7:
ff:0c:40:fa:75:1f:94:fb:ae:1a:83:58:36:59:0a:9c:70:6b:
23:61:52:f8:a6:8e:09:95:3c:12:4d:89:a3:b7:b1:76:14:32:
5e:86:03:49:1e:9f:aa:9e:33:69:f8:43:3d:90:24:1b:e0:dd:
0c:ab:d4:f6:8c:45:c5:f0:f5:45:74:00:dc:5d:87:97:3f:4f:
5e:af:fc:c7:a3:bf:12:5c:1b:b1:8b:e9:02:41:9f:90:3a:a0:
b9:9a:1d:3a:26:60:81:a9:5e:ee:4a:2c:fd:be:85:14:e5:5f:
d2:66:8b:09:9e:cb:c0:0e:f5:52:37:0d:07:72:4c:2d:31:61:
19:9a:62:d9:b9:d2:3c:33:3a:04:6b:d6:1d:71:df:16:cf:77:
81:c7:20:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:12 2025 by rpki-client