Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
File: Qj2TBU8GPPiikYYXNfkAWauewWk.mft (raw, json)
Hash identifier: NCKfMp7Z+I4Enl8/FeG6wZt4lhH7v1mf6itn/mh/pJw=
Subject key identifier: A9:96:F5:2E:BB:05:E9:C5:5B:3C:87:3E:01:EB:51:E4:21:51:E0:89
Authority key identifier: 42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
Certificate issuer: /CN=423d93054f063cf8a291861735f90059ab9ec169
Certificate serial: 0197B6A0E104243CE6ACE8D495DF9418C8EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 13:01:26 +0000
Manifest this update: Sat 28 Jun 2025 13:01:26 +0000
Manifest next update: Sun 29 Jun 2025 13:01:26 +0000
Files and hashes: 1: Fxqjt6X76bxQBXWwSZ7TE0DXZ4E.roa (hash: 1w4Y/QhTTxCziVVyNTfr4p7dQVzXdB6YpDvNxykMieU=)
2: Khu0iUVuTs8ZYAwuEt_S3XCnJdE.roa (hash: 0AzGfOb5OfWgiAbeRL3c+g44yXgjZKIdXOkCd1IWoeo=)
3: MwggIWb8xKY_Gmyt-jhjyCB3Knk.roa (hash: 2e03nmncmnuNRXI/WbH4mmPniZO75Z2kJ+MSZTXtduk=)
4: Qj2TBU8GPPiikYYXNfkAWauewWk.crl (hash: 8i23hx8fQMMdIUz0K6fNg4zzzWuZBHLLj5OMSXu7yGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:e1:04:24:3c:e6:ac:e8:d4:95:df:94:18:c8:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423d93054f063cf8a291861735f90059ab9ec169
Validity
Not Before: Jun 28 13:01:26 2025 GMT
Not After : Jun 29 13:01:26 2025 GMT
Subject: CN=a996f52ebb05e9c55b3c873e01eb51e42151e089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3a:81:0c:00:ad:b1:91:30:e1:a1:dd:8a:6d:
38:8c:16:4b:07:9f:e9:6d:d4:5f:05:ad:6e:40:35:
dd:93:3a:6a:79:36:be:b0:0e:ec:b0:dd:0b:37:a9:
d9:e2:99:f6:17:0a:23:18:7a:1d:af:9d:f5:1f:29:
11:99:cf:ea:d6:41:6b:ff:81:90:9d:39:df:c4:8a:
87:1e:18:4d:43:f2:e0:af:e6:ad:eb:9a:9a:dc:1c:
c6:ae:68:3f:ee:89:b7:fd:17:14:ea:e0:5c:d3:09:
48:e9:26:02:19:9b:99:5f:d6:15:eb:66:ca:7d:19:
ce:c0:f7:06:60:7f:04:29:30:4c:0f:8c:a4:0f:18:
b6:5d:9d:8f:e9:79:fd:78:ee:16:18:28:06:1b:b1:
7a:40:a4:8c:56:e3:dd:a2:cd:5f:d4:83:f3:1e:00:
53:91:33:e5:5d:a1:9c:0a:96:43:e9:41:20:38:3d:
e4:26:7a:30:ba:15:e9:80:3a:14:59:d1:c9:b1:da:
29:21:3d:dd:e6:9d:66:f2:16:dd:5c:2b:4b:ea:32:
46:83:07:31:7e:13:32:b9:f5:32:86:54:de:71:77:
1d:98:9a:29:dc:ec:83:1b:21:3c:f5:3b:ca:a8:a9:
a9:25:27:0e:82:76:a7:c1:c2:a1:c5:4d:e4:a6:8c:
12:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:96:F5:2E:BB:05:E9:C5:5B:3C:87:3E:01:EB:51:E4:21:51:E0:89
X509v3 Authority Key Identifier:
keyid:42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a1:f0:99:d4:1e:1c:84:67:6e:9b:dc:70:30:32:a4:10:6f:
41:e1:72:09:b4:ec:df:3c:24:d1:53:4c:d6:31:d7:2e:7f:6e:
46:56:95:3c:04:ed:3a:e0:d8:fe:1e:d3:64:55:26:ef:a5:d5:
32:44:81:bb:ac:ae:c8:63:99:70:13:bc:3e:ac:92:71:d9:e7:
62:2b:94:24:d2:f1:5c:fe:f9:38:d1:5b:d4:16:bd:29:f2:da:
ae:20:0e:57:fe:c8:e4:db:c1:11:3e:60:54:11:59:3a:59:60:
32:12:6f:9e:5f:7d:bb:d5:39:5e:41:16:8f:f4:d5:7e:d0:46:
5b:52:79:44:95:45:b0:20:9d:04:ec:d0:27:d9:7f:a1:31:07:
72:bd:be:e1:b2:2a:28:6f:34:eb:4a:26:04:9e:c8:21:7f:b2:
7b:84:2b:eb:bd:1a:03:b1:1d:35:d1:b4:cd:29:db:61:cb:0b:
dd:39:d6:aa:a5:f6:f8:53:f0:52:1f:3b:35:f6:e2:25:66:60:
e5:66:3a:98:aa:a8:41:97:5d:b7:c5:c0:0a:e3:39:d1:15:69:
6a:27:22:82:e5:ce:12:6d:b6:c6:21:49:48:f1:c7:07:d5:4c:
62:0f:9e:fe:7a:fd:e7:12:16:25:d5:b3:42:32:3d:8a:2f:09:
16:e4:b4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:14:46 2025 by rpki-client