Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
File: q8ETx66mtxSgYOn3w-cVaeYD05U.mft (raw, json)
Hash identifier: pzQ/Wc1eImTCpqvrD61yN9q2n40LZIh3AQISCpSrFBc=
Subject key identifier: 11:09:1B:19:DF:54:F1:C0:03:84:A9:21:AA:97:CA:3B:6B:7A:A0:06
Authority key identifier: AB:C1:13:C7:AE:A6:B7:14:A0:60:E9:F7:C3:E7:15:69:E6:03:D3:95
Certificate issuer: /CN=abc113c7aea6b714a060e9f7c3e71569e603d395
Certificate serial: 0197B8C5BEDBD21FC4B13AF6A7CDE4C848C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8ETx66mtxSgYOn3w-cVaeYD05U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
Manifest number: 0CA5
Signing time: Sat 28 Jun 2025 23:00:56 +0000
Manifest this update: Sat 28 Jun 2025 23:00:56 +0000
Manifest next update: Sun 29 Jun 2025 23:00:56 +0000
Files and hashes: 1: Q7n8gF3ZYVbGL83zzh2dQnmawHc.roa (hash: nZCFM7j2sE+1KCmTTykVW0xazn9X/ppTbL+++Wr3NQI=)
2: q8ETx66mtxSgYOn3w-cVaeYD05U.crl (hash: y3gFncSWyrHa35xxy6I5QC56cBUsD8/lVXiJaiZJ8jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8ETx66mtxSgYOn3w-cVaeYD05U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:be:db:d2:1f:c4:b1:3a:f6:a7:cd:e4:c8:48:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc113c7aea6b714a060e9f7c3e71569e603d395
Validity
Not Before: Jun 28 23:00:56 2025 GMT
Not After : Jun 29 23:00:56 2025 GMT
Subject: CN=11091b19df54f1c00384a921aa97ca3b6b7aa006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:19:db:e8:e4:bc:42:ab:45:62:14:0f:c3:c5:
80:d8:1c:67:9f:38:d9:fb:8a:ac:11:f2:7e:bc:c1:
c0:6b:93:ce:6f:d6:58:23:c0:4e:9a:e1:c3:39:69:
6e:6e:4b:77:c2:27:02:dd:bb:a9:af:db:dc:3c:3b:
74:61:f3:17:8d:5c:ee:de:86:b3:32:c2:50:fb:4f:
d2:c7:ea:00:9c:40:12:70:b2:c1:76:d5:da:97:13:
f1:f4:c3:6e:dc:18:10:27:69:d0:f6:4f:06:0c:a5:
35:04:28:dd:52:9a:63:44:65:73:e4:c2:83:aa:28:
69:45:c2:a2:a0:a5:b0:0f:a7:7c:f5:3c:76:cc:28:
12:04:14:1a:24:ea:74:0b:12:be:f3:e7:d3:38:30:
10:a4:3d:7d:db:2c:27:2d:eb:e8:f6:70:5a:3c:56:
ae:9c:45:3f:7e:89:04:cc:fb:f8:e4:c8:6c:fa:92:
2e:e6:89:2c:bd:ca:f0:2a:d1:55:c0:0a:ec:65:7f:
98:4b:ea:c7:0e:2a:57:ec:55:80:d3:37:6e:f6:d6:
4a:2d:8a:be:42:1a:92:91:67:71:e4:c7:6e:a1:68:
9f:ef:16:57:11:5b:50:2b:e9:38:20:e9:36:7d:65:
f5:f9:d9:49:7a:45:3e:de:77:94:f4:ae:0f:a0:f9:
85:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:09:1B:19:DF:54:F1:C0:03:84:A9:21:AA:97:CA:3B:6B:7A:A0:06
X509v3 Authority Key Identifier:
keyid:AB:C1:13:C7:AE:A6:B7:14:A0:60:E9:F7:C3:E7:15:69:E6:03:D3:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8ETx66mtxSgYOn3w-cVaeYD05U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:9e:d7:81:27:47:31:87:97:15:03:7c:aa:75:0e:16:ae:89:
bb:72:a7:b3:da:0a:99:3a:3b:90:01:a5:81:56:9c:81:a2:b4:
54:4e:a9:83:45:4b:f5:cd:8b:e9:b1:7a:ca:94:21:61:d5:b0:
d0:89:5f:ac:b1:0a:53:1b:8a:a2:f1:a3:9d:4f:4a:01:78:1b:
d6:86:67:6a:bd:fa:3b:43:48:90:bf:db:9f:37:b0:78:60:a2:
1e:f5:1c:d7:4a:75:fc:b7:5e:9e:fe:1d:94:b3:ab:1b:dd:2f:
93:aa:94:76:46:83:db:8a:7a:0e:23:69:09:63:bf:c5:d5:69:
4e:20:37:16:10:cb:25:02:6f:b5:01:27:87:8c:e5:f6:c6:0f:
93:2f:a9:1d:5e:18:4c:7e:8b:8f:3a:7a:ba:28:90:3b:31:96:
69:f1:8c:3f:02:0a:3a:25:d6:38:00:a8:31:d3:23:43:67:50:
1f:66:73:32:f0:3f:7f:b8:e2:b2:ba:14:11:83:22:b4:ae:4a:
04:c8:18:ef:98:ad:9a:09:23:8f:ba:9d:20:64:f8:38:cf:39:
ea:4d:b3:93:84:20:00:3f:04:05:15:cf:34:19:55:1b:e1:de:
13:ee:dd:81:80:1f:36:82:69:33:fc:82:80:78:6a:0d:98:b0:
0b:9c:f8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:22:58 2025 by rpki-client