Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
File: Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft (raw, json)
Hash identifier: W8+XYMfwbHtrgX1NHwMDWSQkR3Hrb/x/Bb31banhUps=
Subject key identifier: 93:28:95:BD:FE:62:D5:A7:A6:81:4E:6A:13:99:FF:FD:5D:93:FA:81
Authority key identifier: 43:1F:14:80:65:1F:1B:33:8B:E2:63:41:E2:DB:3A:0A:A3:B3:44:EB
Certificate issuer: /CN=431f1480651f1b338be26341e2db3a0aa3b344eb
Certificate serial: 0197B77C51D63093CA819D2ED9112583AA11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
Manifest number: 0496
Signing time: Sat 28 Jun 2025 17:01:07 +0000
Manifest this update: Sat 28 Jun 2025 17:01:07 +0000
Manifest next update: Sun 29 Jun 2025 17:01:07 +0000
Files and hashes: 1: 3ZVx610sqQi3jR1aN5jm4CubkNI.roa (hash: ailedL7i/J97fdockeVNWVcnZPHz5O3htVX32ZMAjHU=)
2: Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl (hash: d7MMNqkYRutBUtMLrcfXA13sDKMYH7wmryKx4dZITGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:51:d6:30:93:ca:81:9d:2e:d9:11:25:83:aa:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=431f1480651f1b338be26341e2db3a0aa3b344eb
Validity
Not Before: Jun 28 17:01:07 2025 GMT
Not After : Jun 29 17:01:07 2025 GMT
Subject: CN=932895bdfe62d5a7a6814e6a1399fffd5d93fa81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a6:ba:71:3f:c7:8d:cc:e0:27:d5:03:1e:00:
e3:49:e5:54:65:38:95:e8:a5:99:2c:f3:08:39:a0:
78:85:74:02:cf:bb:2b:4a:bc:18:cd:2f:0d:98:e0:
11:2e:fe:7b:ff:78:f7:d5:9b:9a:74:31:51:03:fa:
6b:ca:38:3a:69:4e:08:b4:3c:3f:66:5c:9a:bd:6d:
61:c3:2e:1e:48:9a:11:d5:41:ce:83:e5:c9:ea:1d:
db:84:73:f2:66:f0:c9:a3:f5:0c:76:18:8c:4b:60:
aa:28:d0:d3:a1:9e:34:5a:b1:09:3d:bd:ae:13:6b:
48:29:16:50:32:fc:de:93:20:b7:dd:01:3a:dc:23:
4a:47:94:3b:c6:d3:b3:11:5e:f3:95:01:01:b7:8a:
cf:02:f4:5d:82:53:ab:e6:ce:75:a9:50:e5:3f:34:
d3:d9:0c:c4:b8:63:b1:32:a0:84:b0:75:a3:76:41:
5e:0a:ac:2c:a5:3f:6d:fb:ac:08:1a:e1:7f:0e:94:
b1:5b:8e:85:8d:a2:4b:dc:20:7e:08:86:a4:ef:d6:
24:79:27:d3:49:35:64:86:94:61:68:96:40:49:05:
fd:45:2a:3b:25:6f:68:1f:7a:53:8e:cb:18:59:c2:
8d:b1:45:3e:e1:1e:19:14:0f:8d:0d:91:cb:fb:a6:
3d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:28:95:BD:FE:62:D5:A7:A6:81:4E:6A:13:99:FF:FD:5D:93:FA:81
X509v3 Authority Key Identifier:
keyid:43:1F:14:80:65:1F:1B:33:8B:E2:63:41:E2:DB:3A:0A:A3:B3:44:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:14:33:35:cd:ae:c9:f9:f3:81:71:a8:34:d5:0b:11:4c:9e:
42:cc:8a:83:ad:70:ab:e6:4b:9d:9c:eb:ce:8a:4e:90:4f:2f:
d5:02:13:e2:39:52:52:0c:a7:c5:9d:ef:52:ab:8e:0c:79:b2:
7d:75:7c:fd:4e:f1:8a:13:e1:13:cc:39:02:a0:04:b8:63:91:
94:f6:ad:ee:c9:ff:18:37:48:bb:68:3a:57:7c:4f:b1:7f:10:
54:a4:f8:94:8a:31:36:49:08:aa:ab:2b:1b:5e:ed:7e:1c:da:
c5:12:e2:13:4a:8d:58:6d:bb:73:e7:f1:a8:3b:fc:54:1c:16:
8d:a5:25:5b:b4:ba:ea:b0:4d:4d:88:4a:31:89:9b:dd:a1:19:
d1:3c:64:f3:59:d6:04:cc:68:1f:b9:60:63:16:d3:c9:a0:ee:
c9:5a:91:19:5b:4e:b2:ee:93:ba:ab:57:92:4e:1c:9d:cb:66:
32:bb:3f:51:05:69:3f:92:2f:63:ce:d6:9d:83:ec:a3:ca:e1:
09:35:27:ef:76:b2:33:e4:ae:27:33:86:20:f2:63:43:db:3a:
ce:5c:af:d6:4b:fb:45:82:a2:00:56:0f:af:25:9b:92:34:59:
c6:56:fb:89:b9:51:d7:92:1e:73:10:e3:cb:d5:78:0f:e7:44:
69:bc:4a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:23:11 2025 by rpki-client