Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft
File: qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft (raw, json)
Hash identifier: tbsiynTGORPPTwQEWc5kwi2e8IzOsYEyEUIAUDOffiw=
Subject key identifier: B9:68:87:66:9E:E1:1B:A7:66:06:D0:F8:AB:EC:E2:9A:D2:C7:55:CD
Authority key identifier: A9:A0:73:B3:1D:88:8E:44:39:E2:72:E0:07:C9:53:2F:C3:05:C8:0D
Certificate issuer: /CN=a9a073b31d888e4439e272e007c9532fc305c80d
Certificate serial: 0197488BF9989FA7194C470D6F963371C5D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaBzsx2IjkQ54nLgB8lTL8MFyA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft
Manifest number: 0C3E
Signing time: Sat 07 Jun 2025 04:00:22 +0000
Manifest this update: Sat 07 Jun 2025 04:00:22 +0000
Manifest next update: Sun 08 Jun 2025 04:00:22 +0000
Files and hashes: 1: E0nL2r6tA4Kip6utbHVTl2QsGcA.roa (hash: aen5+JQjIiPGZfLBCbBcX/i0rEODfLs98wUB0AIvd0A=)
2: qaBzsx2IjkQ54nLgB8lTL8MFyA0.crl (hash: 8lqt564s6Y5PmcLPu1ITaOyEMWxPDcbPJXuXY2XIDOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qaBzsx2IjkQ54nLgB8lTL8MFyA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8b:f9:98:9f:a7:19:4c:47:0d:6f:96:33:71:c5:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a073b31d888e4439e272e007c9532fc305c80d
Validity
Not Before: Jun 7 04:00:22 2025 GMT
Not After : Jun 8 04:00:22 2025 GMT
Subject: CN=b96887669ee11ba76606d0f8abece29ad2c755cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:dc:66:2f:83:4d:61:42:a7:ae:9d:d9:18:fe:
bd:98:03:2f:b9:03:37:a8:05:33:4e:05:82:6a:57:
6d:a9:46:a5:77:b4:39:91:e4:e4:ce:7d:5b:18:4b:
48:69:b7:b2:98:f7:85:42:f4:2c:72:5f:26:62:94:
7b:d1:1a:d2:64:06:12:09:a8:a2:6a:c1:df:ae:f2:
ab:6a:65:54:87:bf:b2:4e:67:8e:f7:94:04:9c:58:
d8:48:34:44:fa:62:eb:0b:ad:4d:41:94:f9:0a:ea:
47:c2:30:dd:e2:37:7a:ef:21:75:2a:5d:9f:ff:0c:
b2:05:69:00:21:b9:62:40:2c:1a:43:ab:04:b6:7a:
c3:da:b3:1b:f8:6f:15:b0:d1:65:5d:9d:f5:d5:95:
70:87:d6:81:58:85:df:ec:fb:f8:ee:9d:69:c7:7b:
d4:58:b9:fb:52:4a:5e:08:0d:dd:88:c8:5b:9a:6b:
83:d9:f8:c9:5c:22:38:49:9d:e9:a7:2c:93:93:d8:
cb:64:3c:73:0e:8c:d1:6f:1a:71:4e:d8:2d:1a:54:
9b:9b:0d:d1:49:d9:ab:2f:50:b1:b5:3f:20:94:60:
aa:ca:70:aa:bd:4f:bf:de:36:0a:13:d4:74:1f:e7:
6d:ef:8c:ed:56:49:8f:1e:f3:98:04:e4:26:88:6b:
25:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:68:87:66:9E:E1:1B:A7:66:06:D0:F8:AB:EC:E2:9A:D2:C7:55:CD
X509v3 Authority Key Identifier:
keyid:A9:A0:73:B3:1D:88:8E:44:39:E2:72:E0:07:C9:53:2F:C3:05:C8:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaBzsx2IjkQ54nLgB8lTL8MFyA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c0:9a:7b:04:43:08:1f:2c:29:06:62:a2:35:46:39:27:fd:
49:25:29:9c:ca:61:b9:f8:90:00:3b:74:4f:10:c8:ef:67:04:
cb:f9:16:dd:5b:76:4d:62:7e:1f:17:43:8d:6a:49:bf:ad:f7:
b7:cf:ac:31:2a:af:22:40:d8:22:6b:9a:7b:27:52:d0:61:39:
88:2f:b2:ba:7a:06:1b:e3:3c:63:8c:21:4c:54:8a:24:b7:22:
bf:d1:6c:ba:bc:6f:cb:0e:e1:01:f8:4b:8e:ab:0b:7d:ab:23:
f0:4f:04:38:cf:71:c8:fc:c2:dd:73:3d:18:fd:02:f9:fe:b4:
15:ec:34:0f:90:5f:aa:a7:65:a2:16:59:d9:53:e8:c9:c3:9b:
58:18:f8:fa:79:6f:3f:61:92:ab:19:31:c7:0f:4c:eb:ca:58:
f7:b4:81:12:f4:6a:db:17:71:d6:0a:2d:fa:73:33:f6:60:42:
04:0d:ed:54:b1:7d:cd:3e:bc:be:ab:35:6f:ae:53:42:b3:bb:
ab:b0:a1:fa:5c:61:cb:14:86:2c:b4:69:6a:58:3e:9c:e6:5c:
66:da:98:d0:71:09:ad:a0:9f:39:c2:de:89:87:aa:9f:36:fb:
08:07:06:86:45:e7:d7:62:5f:86:72:6a:70:f9:ce:b5:4a:46:
97:ce:18:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:39:31 2025 by rpki-client