Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
File: pqSmiq_slSLanKyAC0MkzNfWxaU.mft (raw, json)
Hash identifier: 72sZtRj+uqm8x8ThChA6PRmWW7RAEhto4PslZ3nletM=
Subject key identifier: F2:2B:92:7F:1B:3F:55:7A:7D:91:9A:B2:38:CF:0D:31:64:54:73:7D
Authority key identifier: A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5
Certificate issuer: /CN=a6a4a68aafec9522da9cac800b4324ccd7d6c5a5
Certificate serial: 0197B7B36175B3AC8B167ED44B80ABC6E7AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
Manifest number: 0728
Signing time: Sat 28 Jun 2025 18:01:15 +0000
Manifest this update: Sat 28 Jun 2025 18:01:15 +0000
Manifest next update: Sun 29 Jun 2025 18:01:15 +0000
Files and hashes: 1: FERbP680nVn9-OXBaT2aTWtd8aw.roa (hash: zQlyYeEOYC4qxko+i8oAsMpuMceTMqew9h1oxgQMJNU=)
2: pqSmiq_slSLanKyAC0MkzNfWxaU.crl (hash: pROVEhq/ZzjmmE3Ni5i/3SG6IMYpCnmmseeZatAkWRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:61:75:b3:ac:8b:16:7e:d4:4b:80:ab:c6:e7:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a4a68aafec9522da9cac800b4324ccd7d6c5a5
Validity
Not Before: Jun 28 18:01:15 2025 GMT
Not After : Jun 29 18:01:15 2025 GMT
Subject: CN=f22b927f1b3f557a7d919ab238cf0d316454737d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:72:fe:7d:58:b2:b1:b6:d1:37:22:db:7b:f2:
80:f4:31:4c:cf:a7:2f:74:ff:80:c1:e1:6d:15:84:
3a:32:7f:50:c8:3a:8e:ad:23:73:67:3d:19:c0:10:
42:d4:7a:35:60:2f:6e:93:95:10:6d:fe:75:86:f9:
76:09:52:24:7b:93:97:d8:a1:dc:79:db:0c:f8:5d:
fa:06:07:08:0b:b1:85:12:20:04:80:25:ec:25:ea:
f1:e8:a4:15:50:18:6b:6e:e1:00:53:05:8c:c3:12:
2e:23:3d:d4:89:6c:4a:90:3e:69:3c:f1:fd:62:96:
4f:51:65:48:04:71:1a:d8:fb:d6:dc:72:aa:db:cb:
d7:0f:41:5f:cc:a6:41:6a:d2:b4:41:53:ea:6f:1a:
50:3a:af:a2:2d:62:de:95:94:85:be:da:74:00:64:
40:54:a1:c4:5b:38:e1:34:26:71:b9:dd:62:39:34:
4b:91:c5:f1:ad:11:b2:96:98:ed:25:72:43:53:78:
2a:fc:bc:9d:5d:99:f2:e0:2a:0a:b4:e3:26:a8:b3:
fb:5f:50:fd:54:0a:70:17:10:9c:6b:73:f9:0d:6b:
e9:94:9d:3e:05:1f:5e:b0:33:27:51:f7:99:5c:18:
a3:44:66:b9:3b:d9:8e:e2:0b:19:70:5f:b8:e2:5a:
63:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2B:92:7F:1B:3F:55:7A:7D:91:9A:B2:38:CF:0D:31:64:54:73:7D
X509v3 Authority Key Identifier:
keyid:A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:05:bc:1f:65:7b:45:ce:3a:1f:df:8e:6d:ee:1f:f0:3e:d0:
c7:da:a9:4b:94:63:f5:9d:e9:a0:2c:00:25:24:fe:64:89:bd:
f3:78:af:22:8f:9e:e6:1f:b5:a9:2e:29:43:7f:0b:d5:da:d9:
96:68:e0:11:55:6b:d3:63:6f:14:dc:fd:39:af:e7:e2:98:41:
96:71:01:1d:23:9b:07:09:a7:76:86:69:8f:b8:e5:b4:8f:9b:
5f:c3:47:24:65:c8:14:f0:9b:52:08:cb:e3:96:44:4e:b7:1e:
63:7c:f9:a5:b8:28:ad:82:bc:65:0c:e8:a6:83:b2:88:dd:7a:
9c:86:a4:8b:52:f5:4b:b3:7b:53:0b:b9:54:7f:9f:87:fb:3e:
ad:13:3b:76:25:bc:ed:d3:20:bd:a9:c2:fb:38:0f:37:1a:a2:
c3:8f:ba:2c:53:0e:01:1a:f9:7f:6f:66:8b:d3:1c:83:49:13:
c9:81:4f:f6:24:84:53:a3:96:38:bb:2a:2c:a8:f6:5b:9c:37:
1c:09:9d:f2:90:e3:a2:a9:37:83:16:5e:75:ee:f5:8b:f3:b7:
52:21:d2:04:80:52:5d:db:fe:7b:a9:e5:73:2d:74:fc:60:eb:
86:ff:73:cf:6e:37:67:d1:b9:2a:1e:5c:60:e9:0d:80:a0:fe:
b7:62:29:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:20 2025 by rpki-client