Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft
File: q08Em20XYCv3tI0QTQja8BQx28I.mft (raw, json)
Hash identifier: AoSbGww5TjQdEpqG4su5CLnxol6NXIqZoJ4q860feTY=
Subject key identifier: FB:24:06:91:A7:AD:D1:B5:6C:4E:EA:3E:0A:07:74:7E:38:66:99:4E
Authority key identifier: AB:4F:04:9B:6D:17:60:2B:F7:B4:8D:10:4D:08:DA:F0:14:31:DB:C2
Certificate issuer: /CN=ab4f049b6d17602bf7b48d104d08daf01431dbc2
Certificate serial: 01984A77AC1220474F2F3A3B912DE6B2EB4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q08Em20XYCv3tI0QTQja8BQx28I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 06:00:13 +0000
Manifest this update: Sun 27 Jul 2025 06:00:13 +0000
Manifest next update: Mon 28 Jul 2025 06:00:13 +0000
Files and hashes: 1: kWd4hi-OyYBjozDmbmhqQmpA6Pw.roa (hash: ZCQPM7gY7pbLQQubJYcs97+7fXVoiPmIY9e2vsVxbNM=)
2: q08Em20XYCv3tI0QTQja8BQx28I.crl (hash: DWYzyv9p3I4vDePDc7L0uSFGzNBABd8ahA63PGohqBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft
rsync://rpki.ripe.net/repository/DEFAULT/q08Em20XYCv3tI0QTQja8BQx28I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:ac:12:20:47:4f:2f:3a:3b:91:2d:e6:b2:eb:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab4f049b6d17602bf7b48d104d08daf01431dbc2
Validity
Not Before: Jul 27 06:00:13 2025 GMT
Not After : Jul 28 06:00:13 2025 GMT
Subject: CN=fb240691a7add1b56c4eea3e0a07747e3866994e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c1:b9:59:48:f5:67:a6:4f:9c:64:e3:b5:4d:
d8:b6:3f:65:cb:73:07:dd:f2:c1:17:b3:42:f9:9f:
d4:f0:f5:65:21:65:74:5d:f5:7c:ad:68:63:0f:f7:
a0:b7:8c:e2:0d:68:9b:f2:ef:ec:0d:b7:4b:d6:b6:
c7:1a:44:13:9c:09:6c:94:ac:32:74:ab:61:01:d2:
80:23:45:94:f3:dd:61:8b:54:e4:a6:55:a9:72:fc:
07:63:56:d7:e1:cb:cc:25:2f:64:a5:56:26:7c:8e:
49:67:eb:6f:ef:f5:1a:f6:e4:87:a3:9c:a0:ef:86:
c1:f5:de:7c:7a:bf:f5:82:6f:95:66:91:fc:c2:e6:
23:e6:a8:23:58:51:de:8d:81:ef:7f:4b:d0:be:10:
cb:79:29:f9:72:b2:95:a3:a7:e9:59:ea:94:a7:00:
e4:d9:e9:08:33:7c:7a:85:d5:97:1f:5e:b8:c3:81:
56:65:0f:25:3e:ed:5b:17:be:d6:b3:ed:73:17:ad:
e5:9b:c2:4a:89:6e:20:90:ef:50:25:a3:36:0b:98:
fa:59:40:90:16:d2:6a:17:1b:01:d9:21:9e:56:3f:
89:c6:b1:92:11:2a:ee:0c:bd:9e:0d:8a:67:d7:4c:
4f:12:06:b5:4e:04:95:2e:2b:05:70:47:24:0d:18:
05:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:24:06:91:A7:AD:D1:B5:6C:4E:EA:3E:0A:07:74:7E:38:66:99:4E
X509v3 Authority Key Identifier:
keyid:AB:4F:04:9B:6D:17:60:2B:F7:B4:8D:10:4D:08:DA:F0:14:31:DB:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08Em20XYCv3tI0QTQja8BQx28I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:12:32:76:9a:29:e2:ce:8d:1b:83:6b:7d:f7:f1:93:27:bb:
0b:d9:37:20:af:7a:1a:9b:b8:89:ef:c3:0e:a1:11:b0:0e:a4:
a8:8f:c2:66:b2:40:37:b3:fc:88:de:aa:31:0a:d4:7f:bb:94:
19:80:c9:08:e0:b4:ee:f3:42:9e:7b:7e:02:d2:03:7e:a1:c1:
8a:7a:8a:55:f6:2a:ef:98:b3:e8:9f:2c:1d:e8:4e:66:c7:83:
64:5b:80:2a:87:f6:56:fa:46:aa:59:f6:a0:49:29:0f:53:42:
97:ef:d9:23:42:42:a3:3f:e0:e2:14:fc:2e:26:54:36:b1:de:
ba:b1:54:24:1c:a9:86:0e:4a:f9:11:ab:be:ba:80:f2:ad:c6:
d9:59:df:fc:00:7a:c3:76:5b:ac:16:7f:7c:3a:c9:16:9d:89:
dc:3d:75:5b:9a:ff:c4:de:a2:f7:53:ec:bd:42:24:05:21:ea:
0c:7d:26:04:cb:47:37:4f:0e:5a:69:0e:81:0f:0c:b7:de:64:
81:ae:f1:12:66:a9:12:09:09:f1:88:c2:71:c5:a5:e8:62:b8:
8a:17:54:89:25:71:da:f8:1a:59:74:61:87:5e:b7:31:00:fc:
86:de:96:a4:12:4d:73:f6:88:4f:60:36:4c:7f:38:dc:89:2f:
f1:7e:e3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:34:52 2025 by rpki-client