Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
File: qS5dl54DJTmZRrI5CCLTDx0vNeE.mft (raw, json)
Hash identifier: wMCm4gltn9EDeZTivViXgFqvI2ffXqrrzLDXxvcRd98=
Subject key identifier: CE:8D:A6:12:15:44:9D:1B:5C:78:6F:7E:F1:75:70:B2:78:C5:4F:81
Authority key identifier: A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1
Certificate issuer: /CN=a92e5d979e0325399946b2390822d30f1d2f35e1
Certificate serial: 0197B93405362DFF9DF24B7EDFB7598F0CCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
Manifest number: 6B
Signing time: Sun 29 Jun 2025 01:01:23 +0000
Manifest this update: Sun 29 Jun 2025 01:01:23 +0000
Manifest next update: Mon 30 Jun 2025 01:01:23 +0000
Files and hashes: 1: JQJmD49tR8jandeFHJ1IkrOGoDQ.roa (hash: qBRt18tQW7myUfjqyk6Za7F1LghK7qoZn+vndFJYSpM=)
2: qS5dl54DJTmZRrI5CCLTDx0vNeE.crl (hash: PIJCJGDFrpEbX1t6fkfqVYByzsngQk1pa2qMZLimQKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:34:05:36:2d:ff:9d:f2:4b:7e:df:b7:59:8f:0c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92e5d979e0325399946b2390822d30f1d2f35e1
Validity
Not Before: Jun 29 01:01:23 2025 GMT
Not After : Jun 30 01:01:23 2025 GMT
Subject: CN=ce8da61215449d1b5c786f7ef17570b278c54f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d6:ff:b5:40:f0:8b:57:b4:49:e2:11:0a:61:
9b:18:7f:82:db:a6:ea:32:3d:9d:ee:90:39:75:2c:
5e:da:46:82:d4:16:03:80:1b:18:10:92:6d:d4:76:
0b:7f:f9:89:ea:84:78:4f:0f:47:37:a9:ff:05:4a:
c0:a2:95:c5:ab:07:28:7d:06:31:04:d7:58:be:6b:
8e:97:be:d2:56:36:1d:6d:25:98:6e:fa:dc:b0:4c:
56:68:d2:70:ec:40:69:f4:e2:50:d4:9d:fe:85:63:
51:31:84:15:29:19:55:d5:b4:fe:f9:9b:ca:3c:d6:
d4:61:57:16:14:75:a1:bc:c5:99:3e:0c:98:1f:8b:
da:d8:7c:d6:bf:26:d1:a3:cf:c0:70:b2:7f:19:ce:
e6:b4:d4:9f:dd:d9:19:fe:6a:65:ab:6a:1a:c0:d3:
25:96:e0:ba:50:98:7b:ae:53:35:ea:05:97:d6:dd:
f3:66:0d:5f:cd:46:0f:2b:17:89:91:86:a3:07:9e:
c9:f8:09:95:9b:de:a7:37:09:68:b4:e2:0f:8b:f1:
47:1a:fe:16:a9:b4:e1:aa:c7:97:33:a3:7f:25:39:
b5:af:12:69:b1:2a:e5:e3:ce:0f:a8:de:82:9a:72:
9c:2d:3a:b7:c0:f7:ce:6f:cb:03:b6:4f:22:6a:0e:
23:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8D:A6:12:15:44:9D:1B:5C:78:6F:7E:F1:75:70:B2:78:C5:4F:81
X509v3 Authority Key Identifier:
keyid:A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e7:b2:4c:87:4e:9f:a4:7a:cc:1e:23:db:84:84:20:81:3f:
4c:d9:34:08:39:0f:ed:ef:ca:24:df:91:75:f2:52:03:36:c2:
aa:54:cd:48:57:57:26:e4:a3:05:75:7d:9e:52:bb:81:2f:b6:
29:bb:8b:06:e0:f7:7e:6b:8e:12:7e:3a:a2:f6:52:cf:b6:f6:
1c:42:d0:df:d1:4e:37:ae:46:14:51:2d:77:a2:1e:f2:3e:e8:
e8:ac:9c:28:82:63:a5:bb:ea:a2:8b:2c:d8:58:8a:17:5d:19:
15:ba:00:ca:d7:0f:29:5f:3d:0a:a4:20:c8:68:a2:43:3e:72:
7d:f3:f1:f0:96:14:7f:36:ba:6e:7b:71:4c:cf:48:46:88:b3:
19:c3:ec:24:df:1e:af:96:5f:6b:3e:94:92:6d:14:c9:b2:44:
91:7f:8f:9d:04:29:a1:88:2a:31:fc:47:24:e2:92:40:84:49:
50:bc:65:79:47:7b:db:89:2c:49:e8:db:46:a3:75:5d:52:29:
03:b7:3b:5e:32:ee:60:e8:a0:83:8e:96:a0:df:f8:dc:b2:eb:
0f:36:a1:35:66:0e:2b:89:2c:bd:e3:f8:e7:ee:95:fe:4d:71:
cf:4a:dc:5a:2e:2b:5d:8a:fd:e3:cb:71:59:5c:8d:d5:a3:d4:
1c:48:a7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:25:36 2025 by rpki-client