Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
File: 0xQt8vZwlAzPWksnoNDJh-zIhlY.mft (raw, json)
Hash identifier: kWVVSd7hWqlKD4ykTfyWuzZRhsfndhp58QwozwodIZM=
Subject key identifier: EF:F4:D2:19:CE:D3:2B:11:FA:94:78:8B:2B:95:FB:20:A0:62:5A:F5
Authority key identifier: D3:14:2D:F2:F6:70:94:0C:CF:5A:4B:27:A0:D0:C9:87:EC:C8:86:56
Certificate issuer: /CN=d3142df2f670940ccf5a4b27a0d0c987ecc88656
Certificate serial: 01984DE68CAD9EDD323B2FB569A2F00EEFFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
Manifest number: 0314
Signing time: Sun 27 Jul 2025 22:00:11 +0000
Manifest this update: Sun 27 Jul 2025 22:00:11 +0000
Manifest next update: Mon 28 Jul 2025 22:00:11 +0000
Files and hashes: 1: 0xQt8vZwlAzPWksnoNDJh-zIhlY.crl (hash: R6ancXA4Oe8ZwflhljUCaRk7SmZUs0EYPNFaHiBYeH8=)
2: DxWkaJkNeo1GnfX8PTB6m_7NDo8.roa (hash: 1C13Qsc+uAlJmXy/kak788lVFXMyWIaA+AZiv7RcjGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:e6:8c:ad:9e:dd:32:3b:2f:b5:69:a2:f0:0e:ef:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3142df2f670940ccf5a4b27a0d0c987ecc88656
Validity
Not Before: Jul 27 22:00:11 2025 GMT
Not After : Jul 28 22:00:11 2025 GMT
Subject: CN=eff4d219ced32b11fa94788b2b95fb20a0625af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9d:64:f5:14:82:1c:8c:6f:4b:bd:da:59:7f:
b8:50:a5:c3:1e:69:20:99:ff:48:59:d9:5b:64:b9:
c3:27:9f:e0:76:9b:95:2d:3a:8c:02:e4:dc:8b:62:
18:f9:eb:1d:34:55:a4:9a:05:28:2b:4e:07:8f:dc:
e2:3e:d0:ab:23:c1:b8:7f:95:52:c4:ff:82:33:70:
b3:1f:0c:a5:0a:b7:cf:0a:70:7e:85:0f:97:18:1d:
9c:40:b6:01:38:0f:db:11:88:d0:81:e1:9c:31:49:
02:30:9c:5e:c1:52:9e:63:f0:10:0e:8b:80:21:88:
46:4b:89:b0:c6:1a:e1:bc:48:91:9d:e0:69:d5:b4:
41:a4:fa:f0:7a:82:c2:34:50:c4:23:0f:db:01:27:
48:c9:84:8c:76:75:a7:c2:e3:db:96:12:a5:14:49:
92:56:b5:7c:e3:0a:89:5d:9f:eb:1d:8e:21:7b:76:
ba:9f:b1:62:0e:3a:ef:21:97:7e:0a:f0:93:42:b0:
bc:89:cf:38:4a:cf:4e:ff:37:5f:25:c6:7b:e2:37:
09:ea:93:23:2b:96:02:ef:cc:85:d5:4a:19:63:0d:
55:e4:02:16:bf:97:a1:9d:d6:05:54:c2:3b:54:79:
e0:d3:81:c6:61:95:27:6e:6d:6e:00:93:c5:81:4b:
d9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F4:D2:19:CE:D3:2B:11:FA:94:78:8B:2B:95:FB:20:A0:62:5A:F5
X509v3 Authority Key Identifier:
keyid:D3:14:2D:F2:F6:70:94:0C:CF:5A:4B:27:A0:D0:C9:87:EC:C8:86:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:79:4e:8c:c7:a9:ce:5d:be:d7:fa:6a:90:d8:ef:7e:7b:66:
2b:9a:c3:5c:ac:20:b1:9f:1e:34:d9:8b:0d:5a:a8:c5:fa:c1:
99:68:49:24:30:93:c0:d8:12:a8:2e:ad:71:62:9d:47:1f:fd:
84:74:4f:ec:96:83:98:b0:de:2b:42:e6:54:04:eb:d7:52:18:
af:84:80:1b:24:a6:39:2a:ad:9a:bb:b6:d7:d4:8d:ec:ce:07:
2e:e1:98:3e:9e:1c:9d:a0:75:2c:22:38:ed:f2:dc:1c:6b:48:
09:ef:19:27:b5:c5:e9:d9:50:98:34:72:cd:06:e9:3e:20:ff:
5c:41:d7:5d:ee:33:7c:7a:0f:1c:9c:39:12:a4:21:88:63:2f:
e6:76:d3:c0:a2:76:e0:e4:5e:12:2f:6e:8e:dd:15:0a:ca:b7:
33:f3:bf:d4:13:44:64:2e:32:24:87:93:40:41:af:dc:08:e3:
45:a4:f4:fc:ba:ee:f6:e7:07:eb:35:24:05:f2:28:ff:bd:2a:
e0:19:dc:2d:f4:b0:54:af:f0:a4:c3:c3:c7:49:67:80:c5:ff:
89:f5:bf:37:2f:18:1f:46:e4:a5:7f:4c:ec:8b:dc:cc:92:ec:
72:b4:a7:76:51:02:bb:16:a2:a7:9b:49:67:f6:fc:7c:9e:68:
2e:3b:6a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 05:48:32 2025 by rpki-client