Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
File: qIrVRvGg74z3XJKnSL1chjYuIJs.mft (raw, json)
Hash identifier: tPa+wnwlHRcOcc5y+k4zDaTx/zj3UgRZl0Awwm9vc1Y=
Subject key identifier: A9:90:04:7A:41:47:CD:6D:D2:B6:D4:70:1F:B1:9E:F7:BC:59:6A:5C
Authority key identifier: A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B
Certificate issuer: /CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b
Certificate serial: 01974DE9A875CEF98EEA88927D98811A061E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
Manifest number: 0F2B
Signing time: Sun 08 Jun 2025 05:00:47 +0000
Manifest this update: Sun 08 Jun 2025 05:00:47 +0000
Manifest next update: Mon 09 Jun 2025 05:00:47 +0000
Files and hashes: 1: Y18PuvKbRb3I33NFZERrmAggZBw.roa (hash: ulNop87p1OPj11wBSOeR/0XOStdPoDj14N+Cgskicec=)
2: qIrVRvGg74z3XJKnSL1chjYuIJs.crl (hash: wUd1m/3HIXxpm13ZEmFLHdYPd1kmjVmCpjPfXWdoy3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:a8:75:ce:f9:8e:ea:88:92:7d:98:81:1a:06:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b
Validity
Not Before: Jun 8 05:00:47 2025 GMT
Not After : Jun 9 05:00:47 2025 GMT
Subject: CN=a990047a4147cd6dd2b6d4701fb19ef7bc596a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:50:c8:74:a5:0b:89:e4:6d:1c:76:9d:cf:c6:
62:9d:0d:ef:20:fe:6f:b0:ff:df:8c:b1:91:e6:1a:
c5:95:6a:2a:76:45:2c:a1:f0:c7:84:bf:ce:5e:55:
a2:07:84:e9:dd:d6:98:89:e7:83:85:8c:7d:5c:78:
9b:4c:5a:6a:9a:05:6f:5d:2e:30:16:25:12:6d:0e:
e9:f3:82:60:67:77:d6:44:4e:b9:23:db:c8:43:3b:
8c:8c:46:50:29:83:c6:7e:18:0a:37:20:c6:73:20:
60:33:e0:49:3b:1c:67:b3:4e:99:54:b9:a4:6f:29:
f3:23:fd:d2:72:5d:bc:2d:f6:d3:80:a2:c4:19:4d:
6f:0b:c1:e0:06:c2:c0:dd:95:21:32:3c:38:94:03:
87:6a:ca:6d:78:85:ef:f6:58:9e:a5:96:ca:e7:1f:
9c:fe:00:59:12:8a:49:76:5f:ff:36:52:fa:45:58:
08:1c:60:5a:1b:15:31:50:c9:f5:fb:79:d6:47:20:
32:c7:9f:c9:71:0f:1c:ed:53:a2:45:9d:e3:66:62:
91:64:a7:3b:ca:0a:84:81:9a:15:90:68:7e:51:ee:
fd:e2:8c:da:de:4c:51:a9:04:d0:a9:11:de:a0:f8:
5f:5b:2f:95:f7:28:6e:3e:32:de:b9:8f:78:0a:3f:
aa:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:90:04:7A:41:47:CD:6D:D2:B6:D4:70:1F:B1:9E:F7:BC:59:6A:5C
X509v3 Authority Key Identifier:
keyid:A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:46:41:b1:9e:fb:da:11:80:bd:73:ff:ea:0e:2f:ab:83:a3:
84:0e:fe:51:d2:2c:15:0a:c9:c3:1e:a4:1f:ba:c1:7e:f8:61:
26:4a:fe:a9:30:14:9e:94:14:08:68:f0:d5:4b:b5:6c:9d:49:
c0:fa:58:ba:fb:f1:ad:dd:01:a9:57:65:9d:be:e6:af:de:0e:
66:8e:e8:8d:32:ca:94:a4:24:ca:0b:e6:0e:67:a9:19:c9:0d:
76:66:fe:26:e0:15:25:bb:66:2c:68:57:79:3c:d6:78:a3:07:
43:da:16:32:4e:8d:33:95:e6:9c:b7:b2:42:4c:38:2d:f4:5b:
2d:f2:3f:c3:04:e6:7b:67:d1:dc:5b:a8:ec:86:3a:24:3e:b6:
82:38:7b:3f:11:82:0a:62:2e:0f:89:95:a4:05:3c:bd:e7:21:
cd:ce:c2:b5:3a:a4:71:12:89:ca:ca:0d:c6:19:3b:c0:f5:9d:
d8:29:7d:08:3f:fa:96:cf:69:c1:51:64:15:f9:be:ce:82:8e:
23:ff:f2:79:55:73:67:0f:de:ad:19:97:1d:38:07:cb:3a:91:
87:01:f0:c6:b6:cc:93:e5:1e:1d:c0:e8:01:df:05:7c:4e:5d:
3a:79:00:58:fb:3f:c2:02:c9:cd:2a:6e:23:12:64:31:ac:df:
0c:7e:4d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:28:15 2025 by rpki-client