Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
File: qD8d69XUeEhD-qKIsuAciFBsHMk.mft (raw, json)
Hash identifier: 3ckO4zsLmXTXbbYezS7TMoymjgsprtHekm7c42zhBUQ=
Subject key identifier: 53:0B:53:A5:36:50:25:DC:B8:21:24:18:86:65:CF:DD:3D:E6:2A:E8
Authority key identifier: A8:3F:1D:EB:D5:D4:78:48:43:FA:A2:88:B2:E0:1C:88:50:6C:1C:C9
Certificate issuer: /CN=a83f1debd5d4784843faa288b2e01c88506c1cc9
Certificate serial: 0197B70F0E0FD24B250FF550B0FC5F9894B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
Manifest number: 1412
Signing time: Sat 28 Jun 2025 15:01:46 +0000
Manifest this update: Sat 28 Jun 2025 15:01:46 +0000
Manifest next update: Sun 29 Jun 2025 15:01:46 +0000
Files and hashes: 1: BZ13VNeYDJ675QrTvza6Su89fFQ.roa (hash: 1LD0YSVmtKovTGtmhUY3CjQg1PtKAp7I1QWK9ijZOII=)
2: qD8d69XUeEhD-qKIsuAciFBsHMk.crl (hash: IxkOMbNb7fFMFDmIRuCtcfE3Hnov0bY6JJCJF2F0Ks4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:0e:0f:d2:4b:25:0f:f5:50:b0:fc:5f:98:94:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83f1debd5d4784843faa288b2e01c88506c1cc9
Validity
Not Before: Jun 28 15:01:46 2025 GMT
Not After : Jun 29 15:01:46 2025 GMT
Subject: CN=530b53a5365025dcb82124188665cfdd3de62ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a9:45:53:a5:8d:27:50:6b:1b:41:be:b1:22:
d9:8b:38:5e:23:41:02:b4:10:c4:27:74:1f:20:2a:
1d:b6:c1:09:22:21:13:4c:88:06:d3:ee:f5:67:9f:
79:40:1e:fe:2f:66:6f:ce:44:9c:2d:fb:d2:34:22:
54:c4:be:01:31:dd:19:7f:76:96:d8:dc:0e:ba:64:
81:d4:19:58:25:6a:44:8b:76:b7:32:1e:bd:ed:19:
6d:a2:8d:b7:1a:0d:85:5d:ce:bf:14:48:6a:db:1f:
d7:72:07:e9:38:c3:6b:d3:6f:87:e5:05:ba:88:10:
06:1e:e9:72:72:3a:a3:e3:72:4d:49:96:01:e4:0c:
5f:11:21:6d:7d:d0:55:04:2d:67:dd:0e:10:72:f7:
58:ac:68:ee:bf:95:2a:27:0b:ac:37:d6:3b:d5:c0:
40:15:f6:bd:36:23:02:06:39:b0:34:e4:08:3c:b5:
f2:0e:f0:94:a0:31:4b:86:0d:1f:4e:c8:80:cb:8e:
1e:14:10:37:52:86:10:61:a1:0d:ac:c3:9a:15:3c:
fe:9a:e8:20:e8:6c:98:9b:8d:0a:fb:bf:27:04:b0:
21:2d:ad:e0:4f:66:c5:6c:62:ce:3b:9d:88:3a:be:
d2:da:a2:b5:85:94:4b:5f:b9:b8:09:a2:74:3c:5d:
77:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0B:53:A5:36:50:25:DC:B8:21:24:18:86:65:CF:DD:3D:E6:2A:E8
X509v3 Authority Key Identifier:
keyid:A8:3F:1D:EB:D5:D4:78:48:43:FA:A2:88:B2:E0:1C:88:50:6C:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:86:12:5c:e7:dc:f6:6a:40:4a:45:f4:5c:a4:f9:a5:f1:bf:
c4:c4:6a:10:db:82:c9:75:52:c3:59:e6:3e:1e:a6:ee:11:db:
41:c3:2f:35:9d:33:c5:00:96:04:73:d8:fa:ef:ac:78:0c:8e:
ad:ca:d4:ed:e0:b5:95:65:5f:db:80:48:f8:c3:42:fb:84:b1:
91:1e:f6:57:1a:fe:d8:4d:29:da:66:d9:04:21:47:f8:e7:04:
f2:1f:51:c3:c0:f3:0b:18:70:29:50:29:2f:23:2b:2b:ef:de:
dd:5e:bb:7d:a5:4e:06:69:8b:47:68:ff:6d:6a:90:f7:08:f8:
1e:e2:a1:44:2c:02:a4:ae:ad:34:09:db:12:c0:94:b3:03:97:
1e:da:05:22:dc:98:71:97:f9:a5:96:78:21:5f:0c:17:79:fd:
c2:75:31:cb:40:68:32:61:86:22:59:aa:16:1d:58:8e:ee:d5:
4e:38:90:d4:5c:16:9d:2e:0a:0f:c6:0e:d2:2e:59:2c:e9:84:
c9:08:2f:b2:4d:41:53:29:19:75:83:52:4c:02:82:be:40:fc:
a6:8c:54:eb:46:58:f2:7f:de:4a:2b:27:68:7e:f6:cb:46:bf:
d4:af:f6:a0:99:0f:cf:8a:e2:2f:d5:e7:87:8e:18:62:09:9d:
ed:aa:b4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:05:55 2025 by rpki-client