Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
File: qJbB4UyG5u9bFnJPcRdnbschSVc.mft (raw, json)
Hash identifier: pKiUlyF1mES+2pdwTX7Qqdf9Ij5NGLq29zvF0J0Wsmk=
Subject key identifier: 6A:69:34:0B:BB:BB:49:F6:C1:A1:56:A2:DC:5C:20:C4:09:1C:C4:1C
Authority key identifier: A8:96:C1:E1:4C:86:E6:EF:5B:16:72:4F:71:17:67:6E:C7:21:49:57
Certificate issuer: /CN=a896c1e14c86e6ef5b16724f7117676ec7214957
Certificate serial: 019840625568541A790547BA2E4A331DECFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
Manifest number: 15FF
Signing time: Fri 25 Jul 2025 07:00:42 +0000
Manifest this update: Fri 25 Jul 2025 07:00:42 +0000
Manifest next update: Sat 26 Jul 2025 07:00:42 +0000
Files and hashes: 1: nHAl3SgY4EfLu7utGVmeJZcr1_s.roa (hash: lrIHVcXwhi/Eq6CWKi+Aq4ByD1FHp2btPHqZK4Ez+BE=)
2: qJbB4UyG5u9bFnJPcRdnbschSVc.crl (hash: oo9aCqd6K3/LgjjXQK2LVW2Xacyx7Tsq2ECMaxOKyb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:62:55:68:54:1a:79:05:47:ba:2e:4a:33:1d:ec:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a896c1e14c86e6ef5b16724f7117676ec7214957
Validity
Not Before: Jul 25 07:00:42 2025 GMT
Not After : Jul 26 07:00:42 2025 GMT
Subject: CN=6a69340bbbbb49f6c1a156a2dc5c20c4091cc41c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9d:4f:b3:e0:c4:71:d7:26:be:67:cd:3b:4f:
1f:5e:ea:ad:31:3b:21:31:dd:97:15:1d:85:32:7c:
be:6c:a9:99:07:73:71:96:b2:4b:c6:5b:e9:83:ee:
06:8b:db:1d:8d:5e:38:9d:48:4a:51:93:34:e4:7f:
54:04:3d:de:f0:a9:2c:17:5c:d9:93:cd:e0:03:e8:
5b:bc:51:22:68:7e:f0:6f:8a:56:10:01:21:1c:86:
be:18:24:d5:80:4c:11:8b:fe:47:0b:1d:fa:d9:b3:
48:c1:c6:4f:81:c5:55:c3:5e:32:3f:6c:9e:5d:e1:
72:df:0d:cb:ca:83:bf:7e:cc:66:56:91:87:b3:08:
95:2b:19:03:b0:19:5d:9f:4a:b9:b3:43:78:31:76:
f2:db:fd:06:2a:83:6f:02:ad:5c:2f:10:e9:05:63:
c0:d6:5d:d5:a2:07:53:10:d0:9e:09:2f:b5:88:1b:
30:89:0c:0e:ae:05:64:c0:69:b8:be:86:c5:81:f0:
27:5e:9a:66:17:18:30:8e:de:39:7b:cc:9e:38:b7:
4a:d5:7b:65:64:5a:cb:38:c8:6c:b0:34:1c:f1:54:
5a:10:ae:55:54:3d:88:b0:1b:61:1d:ed:aa:fe:af:
ef:9e:ea:b8:5a:76:e4:e3:1b:e2:30:b7:9d:b6:17:
ac:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:69:34:0B:BB:BB:49:F6:C1:A1:56:A2:DC:5C:20:C4:09:1C:C4:1C
X509v3 Authority Key Identifier:
keyid:A8:96:C1:E1:4C:86:E6:EF:5B:16:72:4F:71:17:67:6E:C7:21:49:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:39:10:50:d2:cf:75:df:4f:06:11:e0:cd:e7:6c:69:e7:93:
12:00:89:31:bf:38:44:16:23:43:76:35:93:a8:8a:aa:bb:4e:
4d:c2:40:ec:ee:a2:19:51:51:f1:93:c2:4a:7a:8f:3c:c7:9f:
b3:12:29:63:f8:71:bb:58:33:bc:8d:1d:b6:e7:2b:b5:ce:5e:
3e:ab:c7:62:09:e8:93:84:63:b2:33:a0:61:c9:25:6a:e3:a3:
8e:cf:28:3c:47:cd:71:5c:ce:90:29:6c:eb:c6:5c:ba:92:02:
32:6b:41:47:bb:74:2f:49:b5:b8:99:7f:8f:72:a9:df:eb:8c:
da:b2:e5:c2:49:04:d1:d6:e7:0d:54:18:68:40:f4:ec:24:c9:
c6:86:0b:69:8f:af:73:b3:ac:85:bd:70:1a:87:f7:97:43:a9:
ec:91:ea:cc:fb:27:92:fc:26:2c:1c:fc:fd:0e:73:4f:f4:9b:
95:2d:cf:e4:5f:6b:97:fb:33:17:0f:26:3d:35:46:ac:2b:95:
b7:fe:d4:a2:24:a2:13:39:7b:e7:74:e9:e0:56:08:54:17:0f:
7a:ea:24:87:7f:c0:6c:48:6c:20:00:e7:30:c2:4f:43:41:96:
25:c5:fd:e0:03:ba:b4:f5:19:f7:df:04:29:04:ba:51:83:ab:
94:76:00:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:52:15 2025 by rpki-client