Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
File: qJKcs0O9888gTEBa8KVTPqSwkzw.mft (raw, json)
Hash identifier: n+V2cfvoB5q4RePvFbltt7dlbj/oEp/e2SZVsstgtG4=
Subject key identifier: 1B:31:17:87:18:C8:CB:3A:42:74:BC:51:C6:F3:22:7D:84:73:CE:C7
Authority key identifier: A8:92:9C:B3:43:BD:F3:CF:20:4C:40:5A:F0:A5:53:3E:A4:B0:93:3C
Certificate issuer: /CN=a8929cb343bdf3cf204c405af0a5533ea4b0933c
Certificate serial: 019750EAD275121781193415C51DC4C11AB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
Manifest number: 0AF5
Signing time: Sun 08 Jun 2025 19:00:55 +0000
Manifest this update: Sun 08 Jun 2025 19:00:55 +0000
Manifest next update: Mon 09 Jun 2025 19:00:55 +0000
Files and hashes: 1: 8nlWTKhyMjB_CH2EMsOrSJHd2IE.roa (hash: mJ1SJpAndBJG+LB/ssF0bKHufcREx+RUY5ZeHveZh6w=)
2: qJKcs0O9888gTEBa8KVTPqSwkzw.crl (hash: 7gcLof26W0pS4q2fLmVk+qj4/kNxnWuvz16aMnsmL7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:ea:d2:75:12:17:81:19:34:15:c5:1d:c4:c1:1a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8929cb343bdf3cf204c405af0a5533ea4b0933c
Validity
Not Before: Jun 8 19:00:55 2025 GMT
Not After : Jun 9 19:00:55 2025 GMT
Subject: CN=1b31178718c8cb3a4274bc51c6f3227d8473cec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9a:3e:34:29:76:8c:a6:30:e2:fd:ee:cf:db:
dd:ff:a0:77:3a:1f:36:ba:51:4b:7d:1e:23:58:47:
74:3a:76:3a:db:38:58:b3:f9:72:15:70:cc:e7:41:
18:bd:ed:63:28:09:18:db:aa:af:de:f5:fb:b1:10:
8b:43:ba:17:e9:cc:75:bb:d3:ab:d2:26:00:db:c3:
3f:8e:30:62:a4:23:f6:f3:8b:3e:54:b6:86:9f:6d:
df:cd:b0:91:ad:fd:6d:11:3e:00:73:99:c3:5a:a1:
e6:67:46:af:bc:80:a6:6d:83:a6:e2:f7:fe:99:7d:
5a:79:c8:11:e5:28:dd:6f:13:b9:92:82:63:5d:0a:
09:6d:d2:56:90:c2:e3:62:ff:62:2b:76:c0:b4:75:
c9:71:ee:3b:52:8e:e5:a0:2c:0a:5e:c5:b0:1f:de:
e8:68:8c:a1:8e:4f:76:85:01:48:01:a6:ad:5c:a9:
f1:3d:15:23:2c:0a:8a:27:7d:23:23:ed:99:ac:c7:
e8:07:d7:50:b7:d3:2c:86:72:81:20:73:c1:d7:6d:
1b:ae:95:e7:93:8c:ba:4c:65:17:54:1b:9d:9d:39:
7b:a8:db:9c:14:1e:cf:73:47:3d:22:6c:96:8d:57:
39:07:b8:23:37:66:6f:1a:f0:46:94:3e:e6:0c:22:
77:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:31:17:87:18:C8:CB:3A:42:74:BC:51:C6:F3:22:7D:84:73:CE:C7
X509v3 Authority Key Identifier:
keyid:A8:92:9C:B3:43:BD:F3:CF:20:4C:40:5A:F0:A5:53:3E:A4:B0:93:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:00:91:89:55:f3:fa:11:fa:7f:b0:04:b5:15:2c:7b:ff:11:
48:b9:cb:01:90:af:76:7a:83:ce:a3:48:88:b8:6b:f3:97:af:
d3:9d:98:1b:bc:1d:ef:ec:87:5f:74:13:d3:49:a4:36:5c:6d:
d3:81:cd:9c:50:08:c4:26:b3:0c:5d:54:e0:f1:e8:a6:f4:19:
f2:9d:ea:9d:cc:d3:bb:2f:c4:78:ca:b7:71:72:3d:5c:36:ac:
20:4b:47:d7:a8:36:8e:75:48:76:7c:ef:ac:43:74:43:4e:cb:
96:84:a4:1f:ea:f5:9b:ae:a3:4b:d8:6a:6b:a8:ca:10:f1:a9:
64:ea:da:18:41:44:8f:42:12:17:79:4d:15:34:9e:4f:04:b6:
31:ae:d2:b9:ec:e1:17:03:f3:53:f3:f0:79:9b:34:85:c1:63:
36:52:4d:9b:e7:a2:5b:1c:d4:f3:31:f7:1d:77:ad:64:0f:da:
7e:a0:9c:bf:04:99:56:b1:0b:29:b2:e7:65:43:94:b6:e6:12:
2c:be:a3:d6:49:f1:32:7f:4b:f0:e7:c0:52:19:9d:5f:a3:d1:
47:3c:79:f8:c1:9d:15:52:04:58:d7:e2:24:e9:54:34:43:50:
86:c3:aa:96:98:3e:5d:73:c4:11:8e:da:24:70:ed:09:76:4b:
84:ea:96:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:46:31 2025 by rpki-client