Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
File: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft (raw, json)
Hash identifier: k6zNp7Lxzxx+5PUY7Z92MNm08s4AQfWtkGLuvC2QijI=
Subject key identifier: 57:B3:B7:BA:D5:9E:EE:16:A2:6F:CF:2A:8E:2A:AD:CC:55:2C:22:B8
Authority key identifier: A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
Certificate issuer: /CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Certificate serial: 0197B88EB797692CB7B9AD1540346ACCC758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 22:00:50 +0000
Manifest this update: Sat 28 Jun 2025 22:00:50 +0000
Manifest next update: Sun 29 Jun 2025 22:00:50 +0000
Files and hashes: 1: N5E83UpLjMoi8mpIjadF8EBEZHc.roa (hash: cZc2s8T64g7zUGVGUfnt3YLhqIDpL+dicIuuj0vLjiE=)
2: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl (hash: jwlXXbOxYd7OzjGuZYTh8vlWvJH/nQdBagsy6ORJWc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:b7:97:69:2c:b7:b9:ad:15:40:34:6a:cc:c7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Validity
Not Before: Jun 28 22:00:50 2025 GMT
Not After : Jun 29 22:00:50 2025 GMT
Subject: CN=57b3b7bad59eee16a26fcf2a8e2aadcc552c22b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ae:8e:61:15:04:89:13:32:5d:5b:11:47:e3:
12:ed:fe:eb:6e:3a:59:82:a8:90:e4:90:b3:61:b7:
4c:24:9b:a0:8f:19:a9:22:b8:df:44:42:87:8d:be:
27:3f:d2:0f:3b:02:d1:dd:21:70:40:15:c0:4e:a4:
ff:79:c2:be:a7:8d:71:51:a5:da:3e:d7:6a:2b:7f:
1a:5b:1c:a1:bb:2a:81:3d:74:a2:44:5e:ce:8c:74:
c4:b3:28:aa:f8:48:be:5b:09:e0:04:b3:e6:14:d7:
73:4f:33:fe:da:5d:36:da:32:a5:50:41:96:d3:32:
fa:f5:06:5c:c3:87:2a:3b:b4:71:a3:a8:7a:d4:a4:
cd:d5:13:e3:ea:af:89:bf:f3:a1:e0:3e:06:9c:93:
d6:b1:c7:84:c7:fb:fe:6c:29:77:10:d7:e9:68:7c:
c6:36:80:36:5f:a2:15:32:4c:bb:e0:e4:c0:78:ba:
96:91:81:48:fe:76:32:8b:6b:c6:64:41:d5:02:56:
4f:00:81:fc:65:f1:e3:0e:d7:d9:6f:c9:86:8b:09:
bd:7c:06:29:c2:1c:5f:44:98:2f:85:97:87:cf:9c:
4a:a3:7b:85:da:48:4c:68:f6:76:3c:e3:5b:f5:5e:
c0:b9:47:3c:a5:45:83:d8:bf:a1:ce:90:c1:10:f5:
75:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B3:B7:BA:D5:9E:EE:16:A2:6F:CF:2A:8E:2A:AD:CC:55:2C:22:B8
X509v3 Authority Key Identifier:
keyid:A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:39:10:ac:40:e2:ac:4c:13:f2:ee:d5:bb:65:a8:14:62:12:
5c:46:d5:0c:74:5e:ac:a8:b8:4c:01:2c:18:93:6d:80:75:9d:
fa:88:60:fe:1f:a7:e7:2d:e6:38:33:f8:da:60:c5:87:cf:85:
58:65:da:b7:8b:0d:c7:8e:8f:2a:30:d7:7f:34:a3:21:6c:0e:
a2:1d:42:7c:6c:11:a2:b3:ef:d9:60:f1:d3:da:b5:38:84:f8:
23:d2:0c:dd:5b:3e:be:9d:a0:7c:a4:08:0f:b0:04:7c:74:02:
da:69:6e:5e:be:27:72:ad:1c:f3:eb:32:06:df:d9:f0:ad:dc:
21:fa:9f:8f:74:47:3d:23:a2:bd:b6:bb:7c:a4:28:18:44:19:
34:3d:a8:07:b3:94:68:d8:25:ab:03:ff:c3:45:e8:e5:eb:95:
d6:8c:0b:75:18:69:d8:b0:1b:0c:c3:b6:e6:8b:80:0c:bc:bf:
b4:69:d9:f8:97:cc:64:9f:28:1e:a7:8f:bc:67:cc:b1:80:4f:
80:0d:b2:1f:11:00:e2:ca:b1:a1:c5:f4:99:bf:12:37:37:e2:
7e:35:68:48:45:5c:8a:23:06:b9:e3:5d:f6:14:14:52:50:67:
ab:58:9e:77:66:63:b9:17:87:eb:68:b0:d5:21:1a:3b:1f:11:
68:14:1d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:08:13 2025 by rpki-client