Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
File: qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft (raw, json)
Hash identifier: PC6IMmNAdhCSuYxHcdwHIDAfDnrBSvOiV796RXIF+zQ=
Subject key identifier: E0:EF:97:1B:25:D2:83:1D:9A:B3:FE:E2:D1:06:1C:C6:A9:6B:A2:C9
Authority key identifier: A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6
Certificate issuer: /CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6
Certificate serial: 0197B7EAC71848B0DEAD98BA824D719A7C28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
Manifest number: 1556
Signing time: Sat 28 Jun 2025 19:01:46 +0000
Manifest this update: Sat 28 Jun 2025 19:01:46 +0000
Manifest next update: Sun 29 Jun 2025 19:01:46 +0000
Files and hashes: 1: F-LIYuBdyXdsWgfHqfWysJKiWXU.roa (hash: VqoafOC7jzXc0AkcNCpssMEPfK7J5Kse2STPQ5Iw9TU=)
2: RHzpUiuiNY0XEXcS875xUQAmg2o.roa (hash: 6vPYA2Rs4cYHy6RhBB/Rp48XNVrguqaU80TWpEOz0XU=)
3: qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl (hash: 2D8HXe9//S0zah4/FFzwAXmsKzMdwNy3FRPI1hPgrLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:c7:18:48:b0:de:ad:98:ba:82:4d:71:9a:7c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6
Validity
Not Before: Jun 28 19:01:46 2025 GMT
Not After : Jun 29 19:01:46 2025 GMT
Subject: CN=e0ef971b25d2831d9ab3fee2d1061cc6a96ba2c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:69:76:12:04:69:c7:98:8b:de:8b:b5:e4:96:
a7:b3:2f:4b:2e:88:71:7f:61:f3:ce:1e:54:42:ef:
f8:53:5c:2f:e4:21:37:3d:cd:29:7f:6e:f0:91:9f:
93:c5:6d:2d:6c:99:22:fe:a7:6d:74:84:07:7e:53:
cc:c4:8c:48:b4:44:5a:cc:05:b3:76:f4:5c:68:29:
ad:e3:8e:93:2c:79:57:d9:18:94:d5:b1:2e:5c:c2:
ee:73:78:a5:05:72:8e:ab:af:ba:fc:1a:33:aa:0a:
27:81:a0:03:8d:aa:42:9a:ae:3c:44:a4:aa:56:1f:
81:a2:e7:ee:2f:58:7d:91:51:af:b2:b0:c9:cf:f0:
be:b3:77:d3:f1:f6:70:17:cc:96:2b:f8:77:78:29:
c1:69:e7:e2:e5:18:8b:f0:81:4b:03:5b:1f:8e:48:
26:43:67:e5:c9:4d:4a:f8:1e:ea:0e:5e:0b:5d:e8:
f8:d4:2f:2d:51:3d:f5:70:37:af:6f:8d:46:21:45:
eb:9a:52:87:52:a9:0b:aa:4e:60:32:80:f3:60:e4:
f7:4b:a9:ac:35:54:37:f7:30:83:ae:dd:48:60:fa:
8f:31:d7:58:d3:16:94:26:94:5c:d1:7a:a7:e5:e4:
d2:65:3a:9c:66:ae:0c:e8:cf:ce:a5:20:70:98:51:
2f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:EF:97:1B:25:D2:83:1D:9A:B3:FE:E2:D1:06:1C:C6:A9:6B:A2:C9
X509v3 Authority Key Identifier:
keyid:A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:56:f6:c9:53:c1:36:aa:f7:f0:ef:5a:45:e0:57:ab:c6:9d:
e4:34:1d:fc:3e:9e:1e:a2:86:5e:af:4a:3c:28:d2:7c:c9:dd:
ad:ab:f5:e9:32:76:7b:5a:b1:ce:7a:d2:9c:61:96:69:d8:c8:
2b:31:a1:5d:db:6a:3c:62:0c:00:dc:19:f6:ba:01:12:5d:de:
b1:6e:0f:72:31:af:fd:c3:99:7c:58:c5:34:b8:d3:ab:a8:84:
a9:d3:c7:c4:67:1d:20:bc:c8:f3:80:f3:e4:09:71:2e:ab:5a:
9f:e8:3a:f0:00:81:d5:22:03:2d:01:53:67:5f:ee:c9:30:b8:
81:7b:a1:73:67:58:77:ee:b0:fc:5c:ba:2f:b9:04:aa:11:7b:
dd:84:04:e2:b3:eb:42:b2:e1:a2:f4:78:b8:ea:b1:63:9d:2b:
0a:6f:cc:22:62:4c:7c:f2:23:0f:e7:28:be:8c:3f:da:f0:8b:
10:1e:cb:4f:cb:97:79:6c:e2:4b:87:d3:2a:59:d5:46:4d:d2:
7f:24:3a:5f:c2:bc:44:42:9b:bc:ba:84:92:8c:29:aa:fc:23:
63:19:8d:c5:b7:03:d0:5f:96:90:87:5f:36:97:4e:0d:b6:87:
39:70:aa:5c:40:f3:e0:cd:1f:a1:7a:c9:f4:a3:92:5e:c3:3c:
62:0d:cb:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:29:45 2025 by rpki-client