Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
File: qjX5B-x9v5xluBWqPXICtt-uMUg.mft (raw, json)
Hash identifier: bwCjFBv9EuH9MFqjy/YoLakBoUYxSJsOm3T6h109kFU=
Subject key identifier: 37:62:87:44:73:83:31:5E:A0:37:04:04:20:CA:4B:1C:33:C0:25:87
Authority key identifier: AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
Certificate issuer: /CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Certificate serial: 0197B6A09299FE2EC1164FFFE7CCB071D258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:01:05 +0000
Manifest this update: Sat 28 Jun 2025 13:01:05 +0000
Manifest next update: Sun 29 Jun 2025 13:01:05 +0000
Files and hashes: 1: DxU6Tj_sH9i6nYuhG62Zr3rykbI.roa (hash: m10v06RZq7QrBohirh1LPManMxgfja3ZfQ1j9hj5ZLI=)
2: kZG65yjYhzWbyjVxS5nDngYTn7o.roa (hash: NxEcj6vOgWy2wxB1Tg6EXlBHbNa6oBK7xEqZZsDpfQk=)
3: qjX5B-x9v5xluBWqPXICtt-uMUg.crl (hash: HbhhTg4QvES7S9Uc4h9lJ5Erk8bIK7mJy/XNpySI6PU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:92:99:fe:2e:c1:16:4f:ff:e7:cc:b0:71:d2:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Validity
Not Before: Jun 28 13:01:05 2025 GMT
Not After : Jun 29 13:01:05 2025 GMT
Subject: CN=376287447383315ea037040420ca4b1c33c02587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c0:4d:98:bf:2c:f9:2f:00:72:ab:d6:26:27:
1d:0b:32:a6:e6:0e:9d:04:68:f5:cc:99:10:6c:f4:
e7:5e:da:2f:2a:74:63:ab:a7:bb:8b:04:04:8b:55:
01:23:fd:d5:de:86:7f:66:49:a1:7c:3c:9e:47:3e:
75:9e:62:3b:e2:30:60:83:7a:88:5d:25:d1:48:8a:
c1:11:dd:d1:bd:4d:34:58:08:cf:c3:01:db:20:c0:
b9:d2:f6:fb:76:b1:4d:24:37:91:40:70:52:b7:38:
58:5a:f8:fd:8c:7f:e8:eb:2f:83:22:04:fd:f6:36:
ff:63:ec:ca:ba:17:75:a2:96:eb:dd:1b:3d:36:47:
28:ca:9f:f9:27:26:2d:e4:ec:38:72:de:ad:c0:4f:
af:6a:82:18:44:e2:18:ca:b7:be:38:e8:44:8c:ac:
eb:5d:cd:c9:34:a4:d7:18:30:84:23:1e:bb:65:5f:
5b:10:15:25:f3:60:4a:4a:82:c7:04:56:d2:f4:13:
6b:9d:a6:2e:5f:1b:a4:b7:8b:a7:6c:6a:24:32:fb:
cc:88:a0:7a:54:74:7d:f0:5c:8b:17:ba:ef:04:62:
b7:40:b3:c3:e8:98:11:1b:a6:b4:bc:3a:ba:81:e3:
b9:a5:bc:35:dc:60:b4:16:80:51:11:62:b3:65:be:
c4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:62:87:44:73:83:31:5E:A0:37:04:04:20:CA:4B:1C:33:C0:25:87
X509v3 Authority Key Identifier:
keyid:AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:69:3b:e1:d5:05:70:ac:46:7b:1d:3e:01:37:e3:a8:95:d5:
ae:92:f1:f3:4b:5a:36:fb:07:e1:01:98:07:69:fe:f6:ff:97:
1a:85:f0:b5:df:58:6a:e4:34:40:33:06:7e:33:26:7c:6b:6f:
c6:0a:77:64:1e:fa:03:48:b3:97:89:15:2b:45:60:ab:da:7f:
30:5f:bb:f8:e4:62:62:ba:b7:9e:6b:30:e5:4e:a1:28:1b:4a:
6c:f1:cf:4f:0c:95:17:b1:ab:e9:7d:d4:1f:1f:ca:9e:81:63:
0c:c4:3a:52:95:c3:79:04:76:08:6b:4d:45:85:0e:19:ae:fd:
66:f5:d7:a7:7d:d5:80:76:f2:1c:2a:98:27:1c:d8:a8:1d:84:
90:7c:7f:d6:3e:e2:f2:0b:25:d2:10:aa:f3:b3:5c:56:f5:05:
a7:1a:ff:76:6b:23:07:3d:b8:10:d1:8e:ab:cd:9f:53:6d:2e:
80:cc:ad:57:2e:62:19:02:f4:f1:e2:a5:c6:80:eb:79:e1:dc:
09:21:45:43:f4:ab:9a:16:b9:0f:55:c5:cd:0d:89:90:f3:05:
c9:29:17:ea:fd:ab:ee:d2:e5:03:b3:fc:b9:ee:3b:6f:03:8a:
b7:36:b7:32:48:75:1e:d2:a3:3f:eb:ed:28:20:eb:07:cb:08:
4d:7c:6e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:46:07 2025 by rpki-client