Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
File: Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft (raw, json)
Hash identifier: XjRB8KXw1MxXsopGk9FRSm/jIZT0QUJVqWQmswAvZoM=
Subject key identifier: 0B:90:93:34:57:B8:C2:59:B5:A8:F8:BE:39:57:FD:ED:BF:74:21:4D
Authority key identifier: 43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8
Certificate issuer: /CN=439e4321cf218b9265d563b5bea51dbf1766cec8
Certificate serial: 0197B6A0F93C56EDDEE42686D982A43CBFFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
Manifest number: 02CD
Signing time: Sat 28 Jun 2025 13:01:32 +0000
Manifest this update: Sat 28 Jun 2025 13:01:32 +0000
Manifest next update: Sun 29 Jun 2025 13:01:32 +0000
Files and hashes: 1: Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl (hash: zBAAdPV/ZpZTGUHN80uQFpDGJKyjMH1axnpjQsjDbYk=)
2: nK8r6BW7X2Id54DEAsyFnRHZOsA.roa (hash: ++ZMcQT7NmyLhSBPeMlDbkE+/3o7EgGxMfB7gUiQzt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:f9:3c:56:ed:de:e4:26:86:d9:82:a4:3c:bf:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439e4321cf218b9265d563b5bea51dbf1766cec8
Validity
Not Before: Jun 28 13:01:32 2025 GMT
Not After : Jun 29 13:01:32 2025 GMT
Subject: CN=0b90933457b8c259b5a8f8be3957fdedbf74214d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:04:6f:74:1a:70:5a:17:8a:6b:3d:7c:a2:df:
dd:7d:be:7d:1a:cd:16:7d:de:79:91:16:cc:8d:4d:
9e:a4:ad:8e:82:72:40:8d:20:74:4c:aa:c7:11:6c:
60:b3:b0:e7:9a:df:e4:a9:96:5e:1a:a9:e4:b1:43:
61:ae:ec:ad:35:f2:cb:0f:a6:ce:00:fa:30:75:c7:
2d:f6:56:8e:5c:c1:51:a9:ee:ed:1e:b8:2a:88:80:
cf:61:34:54:7d:95:74:0e:8e:2f:38:b0:cc:ff:b5:
cd:0e:db:25:88:53:f8:4a:88:49:0a:1d:97:6b:63:
b3:73:a5:9f:53:85:9b:36:e7:a6:37:50:b8:fa:cb:
d9:0c:06:8b:2f:bc:88:f2:f8:ff:19:54:4d:cf:fb:
18:b6:2a:1e:95:73:88:cb:04:f3:9d:c1:c3:0c:95:
28:53:f6:58:c0:a6:7c:98:d5:bd:3b:a1:20:a9:72:
2e:81:c3:13:d2:29:61:1d:60:f0:0c:e8:34:e5:88:
71:4b:de:77:ce:a9:b3:3e:0a:90:91:67:f8:55:16:
42:26:42:25:44:d2:bd:91:45:0b:5d:5f:ba:6e:3d:
5b:38:13:d1:72:d0:dc:13:9d:34:b6:53:71:7a:8b:
c8:9b:45:75:ec:31:3e:0d:a9:d4:d1:cc:c1:d4:9c:
9c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:90:93:34:57:B8:C2:59:B5:A8:F8:BE:39:57:FD:ED:BF:74:21:4D
X509v3 Authority Key Identifier:
keyid:43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d2:eb:b0:1e:18:09:d9:15:d4:88:27:3e:23:af:d9:57:bd:
98:d0:5f:b6:6f:c7:4b:e1:7f:d4:e6:00:f5:46:e0:68:30:2c:
2a:80:45:8b:0b:c8:64:07:b3:2a:fe:9f:24:fe:ed:0b:90:eb:
df:78:2a:0d:a4:47:b8:f3:51:05:79:96:cb:0e:91:50:42:63:
56:71:fa:8e:9a:40:e8:db:ef:70:13:b6:2b:b6:89:54:bb:01:
39:48:87:98:e9:b5:96:58:be:01:f4:8f:74:43:d0:f4:31:e1:
06:bb:83:bd:69:ed:da:6e:6b:94:8d:02:51:87:15:82:9f:9d:
a5:24:59:c8:be:74:3e:27:ca:5c:32:d1:58:5d:79:fb:9d:27:
00:88:9a:41:bb:dc:f4:c6:67:1b:de:8a:d2:74:6e:5b:23:ff:
e3:4e:7b:b0:22:fa:12:53:e1:a5:55:ba:85:7c:ce:8c:79:37:
e1:a1:29:58:17:74:32:7c:19:70:7f:7e:fb:97:42:69:4c:8f:
f4:68:41:5f:19:9f:71:0b:2a:15:a6:5b:01:ee:60:92:a4:8b:
39:fa:b3:0b:fd:81:9c:c3:ac:39:dd:45:3e:30:cb:18:ab:5b:
d3:da:1c:0d:39:a4:8d:7d:f0:0e:39:8f:17:7f:4e:d1:20:9c:
68:69:5b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:26:18 2025 by rpki-client