Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.mft
File: qWpTYQ2O9mShJ1txquq7KFEEwk8.mft (raw, json)
Hash identifier: zOcF0vQRzJaP5hs7E5KrSmSLK/toZKZuvz01BIJLM3g=
Subject key identifier: 7A:70:C8:53:ED:26:C6:B9:5E:12:C7:65:28:06:85:98:ED:D7:B8:86
Authority key identifier: A9:6A:53:61:0D:8E:F6:64:A1:27:5B:71:AA:EA:BB:28:51:04:C2:4F
Certificate issuer: /CN=a96a53610d8ef664a1275b71aaeabb285104c24f
Certificate serial: 0197B6A13D2779A37789A344B67365CC6A4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qWpTYQ2O9mShJ1txquq7KFEEwk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:01:49 +0000
Manifest this update: Sat 28 Jun 2025 13:01:49 +0000
Manifest next update: Sun 29 Jun 2025 13:01:49 +0000
Files and hashes: 1: qWpTYQ2O9mShJ1txquq7KFEEwk8.crl (hash: u8VncGL5MQxYjORX+0wcVbsU21XLC9Jb2zx1VWBqFAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qWpTYQ2O9mShJ1txquq7KFEEwk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:3d:27:79:a3:77:89:a3:44:b6:73:65:cc:6a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a96a53610d8ef664a1275b71aaeabb285104c24f
Validity
Not Before: Jun 28 13:01:49 2025 GMT
Not After : Jun 29 13:01:49 2025 GMT
Subject: CN=7a70c853ed26c6b95e12c76528068598edd7b886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8c:50:cb:fe:10:02:7c:5e:fa:47:4a:72:c3:
1f:7a:2f:7c:a5:53:ea:fc:b4:3b:05:f4:dd:b0:68:
ce:0b:f6:b5:9c:3c:30:aa:f3:dc:02:a5:82:45:a8:
65:81:6e:b0:9f:05:da:65:40:f0:c0:aa:95:f4:e5:
6a:16:d2:da:65:04:9d:8a:26:a9:ee:6b:ee:d2:e4:
ed:29:cb:11:f2:b9:01:bd:eb:78:72:cb:71:1b:48:
c5:b5:5e:14:45:77:00:ba:26:f5:69:e9:dc:b4:1f:
fa:70:74:6c:8b:f2:c9:10:2c:28:d8:e9:72:ad:28:
85:86:ac:62:1d:b4:5e:be:7c:5f:5c:35:aa:33:da:
27:45:19:64:60:15:d2:57:10:51:ad:d1:33:be:ef:
fb:de:1e:6a:b8:f3:2b:e0:35:ae:6b:63:4b:91:41:
96:2a:11:63:28:1c:3a:7c:fd:ae:19:9b:90:ea:f1:
2d:a3:2d:63:73:f2:bc:e1:11:38:42:5d:38:57:1a:
e4:25:d0:40:e3:79:9d:9e:37:29:68:71:53:c0:4a:
f4:28:05:ff:6a:ca:64:ce:8f:a7:7e:c4:6c:65:f9:
bf:74:37:a5:95:64:4c:b9:1a:28:b0:b6:ce:22:48:
d2:ab:aa:18:74:77:37:9a:4a:c2:fb:2e:6e:09:8d:
5c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:70:C8:53:ED:26:C6:B9:5E:12:C7:65:28:06:85:98:ED:D7:B8:86
X509v3 Authority Key Identifier:
keyid:A9:6A:53:61:0D:8E:F6:64:A1:27:5B:71:AA:EA:BB:28:51:04:C2:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qWpTYQ2O9mShJ1txquq7KFEEwk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:bc:9f:f9:be:ad:ab:f7:f7:83:17:30:1d:8b:af:67:49:c4:
6d:22:2f:b5:bd:e5:a7:be:33:0e:c1:14:83:0f:71:0e:70:c6:
ba:17:7e:17:60:37:d9:52:c8:72:50:29:83:39:bb:4c:4e:5f:
df:f0:4f:34:3b:fe:04:5f:78:cd:d1:b9:db:6b:46:97:78:97:
25:60:bb:a6:a5:39:b9:cd:6e:a7:53:9a:ac:1d:1b:4f:27:43:
d5:4a:8c:91:3e:a9:7b:a8:13:e2:44:33:66:36:c3:68:99:58:
b0:48:ea:d6:63:f5:24:f5:f5:80:3c:80:a4:a7:b2:e1:6c:51:
9f:cd:39:fc:a6:8c:00:de:4a:6b:ca:71:8d:a9:5e:4c:5f:d8:
84:3b:e3:46:2c:15:23:9c:0a:b0:ec:a6:af:ca:f4:5b:c7:52:
0d:08:5d:45:74:c5:95:9a:1f:46:a4:7f:5a:62:6a:79:3f:02:
8f:b3:b2:6c:26:3b:0e:fd:e5:1d:f9:3b:8a:91:d5:96:57:61:
43:52:39:eb:3e:2d:d7:dc:38:93:4f:0d:78:5d:54:91:5d:2d:
9e:1b:77:f3:a4:c8:51:7f:19:21:99:a7:9c:60:d4:e9:2d:1c:
17:31:51:b4:76:19:31:7f:3b:48:18:61:52:3e:34:71:4f:2b:
20:81:af:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:27:05 2025 by rpki-client