Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
File: qeC20TzRHzYRT6mEAzgElByC8UM.mft (raw, json)
Hash identifier: wb4x7XtS5CCDNl8Ls38ZHVuwKH5eT4TJRSKvhdr4yys=
Subject key identifier: C0:5D:90:90:16:7B:68:DA:78:F3:64:43:E3:12:10:A9:EF:09:12:00
Authority key identifier: A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43
Certificate issuer: /CN=a9e0b6d13cd11f36114fa984033804941c82f143
Certificate serial: 0198537B7AC3AD426E618D0824624D25B4B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
Manifest number: 11E1
Signing time: Tue 29 Jul 2025 00:00:57 +0000
Manifest this update: Tue 29 Jul 2025 00:00:57 +0000
Manifest next update: Wed 30 Jul 2025 00:00:57 +0000
Files and hashes: 1: lO3U7O5xn_SH8biBa02wbaj6rwE.roa (hash: Ur2/ddmmedYhTdeyhrYUxfNHrSlslVFvOy6wD+8Tc1U=)
2: qeC20TzRHzYRT6mEAzgElByC8UM.crl (hash: 9cnYR2IwBUxMmi1ivLPeENX7IdatjbY6b0wvbcWGP4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:7a:c3:ad:42:6e:61:8d:08:24:62:4d:25:b4:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9e0b6d13cd11f36114fa984033804941c82f143
Validity
Not Before: Jul 29 00:00:57 2025 GMT
Not After : Jul 30 00:00:57 2025 GMT
Subject: CN=c05d9090167b68da78f36443e31210a9ef091200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:36:71:e2:ba:29:82:73:70:45:0a:6e:bf:f0:
a9:05:7b:81:49:bb:b6:05:29:da:83:36:54:66:93:
06:a3:3f:3e:c6:a2:84:11:4b:9c:e5:b4:35:76:38:
93:f0:46:30:da:06:67:84:2a:1c:21:33:c6:d7:4f:
fc:09:cb:98:af:28:12:49:b3:20:79:d5:bf:93:04:
2f:e9:b9:e2:5b:fb:51:f3:07:42:c6:fa:ca:db:87:
da:eb:98:fe:d5:38:e1:ff:2c:34:bc:d2:a6:2d:5a:
fc:7b:a2:72:52:d2:29:0e:f8:f0:e3:f4:c1:7a:5d:
e9:26:97:47:ff:70:48:e7:e1:06:11:c2:bf:1e:d2:
3d:d0:76:21:7f:a0:70:7e:d6:45:a4:29:ae:c9:47:
92:f4:76:16:32:e2:79:73:f5:c5:8a:46:56:0d:d9:
24:8d:31:18:cc:34:de:2c:8b:2d:d1:7e:57:e4:f6:
28:89:91:ba:c7:55:38:17:8a:98:8d:d6:1e:20:cb:
95:0b:af:08:b6:27:8e:38:4d:e0:05:bd:80:ac:86:
28:7c:43:34:f9:17:db:03:4d:1c:7c:45:c5:df:72:
44:66:d0:bf:54:8d:ca:6d:60:ff:62:b2:ec:c5:e7:
1c:6c:cb:c9:89:03:6e:2f:d9:00:5a:46:20:1d:d1:
ec:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5D:90:90:16:7B:68:DA:78:F3:64:43:E3:12:10:A9:EF:09:12:00
X509v3 Authority Key Identifier:
keyid:A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:76:bd:23:87:61:37:47:db:1d:2d:d0:bb:cc:f0:04:20:8c:
fe:f9:0b:5a:d0:13:d4:61:56:53:70:19:2f:b3:bf:63:36:3a:
11:cc:75:11:ec:2e:d7:f1:29:9f:e4:7a:29:b5:28:10:d1:03:
22:59:d9:89:a1:9a:74:74:8d:cf:9b:70:61:59:df:ef:8c:a7:
ab:e4:9e:a0:d0:dd:fb:17:de:cf:31:d5:e0:da:b2:d5:f5:06:
df:2f:20:89:55:0b:32:6a:eb:06:91:da:a6:1c:3d:ce:8b:8b:
1e:ed:ca:e2:2e:59:3c:a4:30:6a:cd:07:d1:a6:4f:64:74:c2:
cf:24:80:93:85:41:0a:d7:af:85:22:a3:ce:e8:95:2d:9a:94:
8c:b6:ca:da:5d:8a:1a:23:4d:4b:ef:01:4d:13:8b:5e:ce:bb:
fe:c7:a5:ef:6f:b5:0d:bb:0e:79:19:16:30:36:dc:02:bd:55:
11:be:99:8b:41:93:a8:e1:f9:da:5c:e7:cb:af:be:49:2f:19:
86:cf:42:4a:07:54:ac:c4:28:ab:94:75:44:84:30:db:4c:d4:
ab:df:b2:ac:72:6f:cd:a7:61:5f:ea:ea:6a:33:b6:e3:9a:d6:
5b:32:fd:c6:ed:e6:e1:b1:c0:86:45:d2:6c:96:d0:94:e1:83:
89:00:0c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:49:43 2025 by rpki-client