Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
File: qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft (raw, json)
Hash identifier: SWrpqHybenuuQkYA5Xn/UaXeoH4PT3f2P53XSv55jsI=
Subject key identifier: 75:65:62:AD:B4:1C:67:1C:37:8C:B7:55:3B:8F:5D:A1:25:25:9D:1A
Authority key identifier: A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74
Certificate issuer: /CN=a93616365693fb6502cb4d687bb66747b1a2fd74
Certificate serial: 0197B7EA427346A744442FABDF77B751A16A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
Manifest number: 1093
Signing time: Sat 28 Jun 2025 19:01:12 +0000
Manifest this update: Sat 28 Jun 2025 19:01:12 +0000
Manifest next update: Sun 29 Jun 2025 19:01:12 +0000
Files and hashes: 1: dvh6dEQn3L0Lue4PHisFZ5z30t4.roa (hash: YZ3UChYkMOxFSMlqaHDcH6csBlA5vkgT+POe5BlyoUo=)
2: qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl (hash: MneGxzgy9bVlHIJS6jITJU3CvJyg/l+bZ0kE2PDxhqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:42:73:46:a7:44:44:2f:ab:df:77:b7:51:a1:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93616365693fb6502cb4d687bb66747b1a2fd74
Validity
Not Before: Jun 28 19:01:12 2025 GMT
Not After : Jun 29 19:01:12 2025 GMT
Subject: CN=756562adb41c671c378cb7553b8f5da125259d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:03:35:d7:a5:33:60:bd:28:8c:78:14:0d:3e:
8e:6c:f7:b5:10:a2:8a:d1:b1:43:d7:ab:be:de:84:
2f:20:af:98:ac:bf:45:d4:a4:f4:8a:c4:6d:50:9e:
f5:f4:68:9c:1f:ef:1b:9f:d1:35:4a:4f:77:cc:de:
87:93:c9:57:ab:07:99:39:03:d3:f2:27:b9:47:a2:
b0:8c:ce:87:c4:06:7b:29:37:94:87:61:a2:19:5d:
83:bb:42:43:d9:0a:0a:2a:32:d6:10:e3:77:31:c8:
42:ba:41:fd:d2:b8:4f:49:6e:55:82:61:60:ec:9a:
6e:96:9e:8b:15:e9:5e:18:f4:c5:b7:1c:5a:6b:ea:
b8:6d:0f:33:c4:75:f5:3d:34:82:e8:ef:26:27:2c:
40:4e:8a:8f:10:1a:d0:ec:02:f7:ff:0d:75:d5:5f:
8d:b8:b7:f4:b3:47:ab:e7:ba:3a:9f:b4:5f:8a:30:
8a:9a:b3:78:49:d3:03:0c:02:77:24:06:38:ca:31:
79:c4:5f:4c:2b:37:35:f9:97:2c:71:52:b1:de:40:
59:df:3d:52:63:ba:13:14:37:e4:cf:87:eb:84:08:
f7:44:5f:d2:52:04:14:ee:bb:08:74:fd:97:db:79:
35:7d:b5:16:f8:00:61:e2:b7:6d:52:80:6b:a2:40:
5b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:65:62:AD:B4:1C:67:1C:37:8C:B7:55:3B:8F:5D:A1:25:25:9D:1A
X509v3 Authority Key Identifier:
keyid:A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:3a:3f:2c:e2:c9:25:44:69:f1:0a:cd:7f:7e:99:71:a8:d1:
21:cc:28:3b:f5:5d:a6:67:c0:e7:5c:22:ee:b8:a8:a3:65:af:
5c:fc:f9:0e:20:cf:62:c3:bc:11:80:73:37:41:14:e6:75:7b:
05:34:20:9e:d5:a3:76:8a:64:ad:80:f7:af:8f:db:ba:94:29:
f9:75:ee:dc:b9:4e:04:56:3a:7d:a0:71:a4:5f:84:2d:f0:69:
27:18:a7:b5:e6:05:5a:e9:d9:9e:b1:a0:8b:67:4e:b2:a5:ae:
a9:63:52:c0:ad:aa:f3:58:40:ae:df:24:e8:46:41:6b:32:ad:
c0:17:34:92:4f:49:b0:56:fc:68:0b:44:80:bd:48:3c:80:9b:
c7:97:38:14:22:ce:fc:56:15:55:a5:34:72:f7:48:db:5b:8c:
47:4b:08:af:ab:b2:6d:d3:b2:01:08:fe:25:ce:3b:c6:08:31:
c3:72:66:24:ad:22:ac:22:eb:82:77:95:45:f5:e8:61:7c:9a:
71:77:dc:63:29:28:ef:01:ec:1f:41:60:fc:53:2a:b8:af:83:
08:9f:1d:ff:af:ec:6f:65:53:f6:18:24:56:f6:93:d4:b9:58:
7b:3f:2f:74:a2:0d:2b:63:fd:52:33:c4:14:68:35:63:68:50:
fe:f6:5a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:02:03 2025 by rpki-client