Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
File: qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft (raw, json)
Hash identifier: fM+ZZx2dlQ2ZuspTmkjylVRg72GlHtZF78doEzhUFSw=
Subject key identifier: 58:27:6D:08:46:17:08:04:3F:A4:D5:0A:CA:FC:AB:83:C5:0B:EF:78
Authority key identifier: A9:68:AD:F1:20:A7:4A:5D:10:80:9C:FD:3C:B6:81:4F:C8:9B:1F:46
Certificate issuer: /CN=a968adf120a74a5d10809cfd3cb6814fc89b1f46
Certificate serial: 0197B70E4D39AE6F7CDC4DD1D019B5C9A392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
Manifest number: 086B
Signing time: Sat 28 Jun 2025 15:00:57 +0000
Manifest this update: Sat 28 Jun 2025 15:00:57 +0000
Manifest next update: Sun 29 Jun 2025 15:00:57 +0000
Files and hashes: 1: Ln1C_YgxE2WGWgP1KdQJY5Zikas.roa (hash: 3EUFd8IxwHmwZnC3ljBW7KIOpmaBqqwxBLml7yaPCxE=)
2: qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl (hash: gNdjMtRG5JJc8GHfElVUWu6ZFrcAhX9APkLRo33dmPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:4d:39:ae:6f:7c:dc:4d:d1:d0:19:b5:c9:a3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a968adf120a74a5d10809cfd3cb6814fc89b1f46
Validity
Not Before: Jun 28 15:00:57 2025 GMT
Not After : Jun 29 15:00:57 2025 GMT
Subject: CN=58276d08461708043fa4d50acafcab83c50bef78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d8:a3:fe:64:61:f9:62:3a:af:87:3a:e6:ff:
32:82:e0:ef:15:b8:73:7e:b2:c1:79:cc:50:69:90:
78:7c:9b:7d:a0:ce:8a:1a:28:d1:d1:a9:fb:49:76:
4d:a1:30:95:dd:25:69:80:77:57:be:7f:10:5a:35:
a4:f5:e9:4e:c5:d4:62:e0:0b:77:69:c6:f2:46:e0:
b8:03:d6:8b:71:f3:7a:25:ee:37:ae:96:0a:63:0c:
ac:34:fc:eb:c0:58:a4:f7:97:73:3a:01:5a:90:8e:
cd:e1:49:f0:e1:b5:fe:fe:26:11:32:72:04:70:46:
23:47:07:c2:32:cb:6b:ea:9d:77:8b:00:c9:d0:fa:
67:74:a7:54:d5:98:47:ab:dc:e5:41:25:4e:d2:e4:
88:6b:64:ce:86:b3:83:5d:fc:6f:d4:22:ee:d1:c1:
5d:c0:13:1c:55:65:fc:38:d2:5c:9d:62:52:19:76:
e7:9d:58:2f:49:60:fb:85:82:10:ad:7f:26:07:23:
32:ff:f4:76:30:59:7b:9c:e2:16:a1:36:d2:40:57:
65:56:4e:09:c7:13:e8:2a:14:53:af:b0:87:90:e2:
9e:2f:b1:f8:84:02:8b:ff:01:7e:64:cc:27:4f:a4:
81:b3:e1:44:04:5d:fc:58:4c:18:fe:c0:64:19:53:
ba:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:27:6D:08:46:17:08:04:3F:A4:D5:0A:CA:FC:AB:83:C5:0B:EF:78
X509v3 Authority Key Identifier:
keyid:A9:68:AD:F1:20:A7:4A:5D:10:80:9C:FD:3C:B6:81:4F:C8:9B:1F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d8:ea:53:52:af:04:ee:b4:4e:e2:90:e3:89:d1:69:e8:9b:
21:9c:b4:29:c2:92:a1:04:ea:ae:a2:30:29:00:dd:4c:24:6c:
87:3e:9f:94:c6:5f:57:2b:c3:d3:aa:4e:d1:2b:a3:1a:83:11:
77:09:9c:f0:97:0b:26:62:d8:0d:a3:74:5a:0d:3f:0a:f7:68:
1a:03:4b:56:8b:d3:7e:58:74:46:a7:89:b9:39:4b:ae:75:51:
59:57:01:fd:9f:54:2f:21:12:18:64:98:21:73:4a:de:3f:40:
ca:c4:43:c5:96:8e:99:57:a3:af:34:a8:d1:f6:ef:e5:c1:cd:
b9:e9:c1:fe:90:e9:d1:16:5c:c0:63:01:a8:9f:30:73:f8:f9:
08:8f:82:7c:89:ab:9e:90:3d:1e:d0:23:15:bc:77:82:94:c0:
71:e4:4c:8a:78:28:72:df:cd:60:8c:1d:29:c0:8a:14:a5:af:
77:bc:14:8d:90:eb:36:d8:ab:5d:33:99:72:fd:92:a2:c6:d3:
c9:b1:d0:f9:7f:56:8f:cb:64:b6:06:91:ec:01:cd:e7:50:11:
42:47:ce:7b:0c:b9:22:e2:3d:40:e7:5f:d8:e9:43:bc:bc:b4:
3c:ef:d4:13:27:15:84:d6:11:00:e5:67:ec:00:b2:ce:4e:76:
fd:98:7d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:41 2025 by rpki-client