Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
File: q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft (raw, json)
Hash identifier: uT/Ng7ec0j1FLxx8hIlhxSg+JA8x6IWy009gb2dofYA=
Subject key identifier: 34:04:4A:50:17:92:8A:D1:CC:E6:59:16:80:4E:62:54:46:F7:16:52
Authority key identifier: AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20
Certificate issuer: /CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20
Certificate serial: 01974A43B5B27ED4BB12CD12D1E838938D6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
Manifest number: 11BF
Signing time: Sat 07 Jun 2025 12:00:40 +0000
Manifest this update: Sat 07 Jun 2025 12:00:40 +0000
Manifest next update: Sun 08 Jun 2025 12:00:40 +0000
Files and hashes: 1: U0noiLh-k1UXMkIIKBzlJl8anFA.roa (hash: elwLD+4HU2f37SzvunJF3t0pDH8qA22yevc6clLdIHM=)
2: q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl (hash: DaFX+YlfV3AAecBNuELwmlL2hS5hrceaMQ7FZUKwbZs=)
3: yWfF0scZVTP5CTfvSN5AZLRV8Wo.roa (hash: lubmpITrOYefbF4JNbcAm7bQPDyIFYxHEuPyUf330UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:b5:b2:7e:d4:bb:12:cd:12:d1:e8:38:93:8d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20
Validity
Not Before: Jun 7 12:00:40 2025 GMT
Not After : Jun 8 12:00:40 2025 GMT
Subject: CN=34044a5017928ad1cce65916804e625446f71652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:84:d6:3d:c5:6b:01:20:d0:4c:51:0d:3a:02:
6c:46:5f:e5:13:ea:37:72:7c:7a:24:4c:66:1e:1f:
10:65:a4:aa:50:bb:e7:cc:83:93:f5:6d:36:27:62:
68:04:94:11:95:34:d9:6f:92:f5:a2:3f:24:30:96:
56:9f:f3:91:74:83:b7:80:6d:e3:e0:96:21:93:b0:
a6:16:43:3f:85:1f:06:ad:cf:16:44:06:79:6a:8f:
69:39:a5:1e:9a:23:70:47:21:2c:25:69:af:1e:90:
c3:d2:91:3d:9b:d6:84:ff:1c:3c:13:57:3c:ee:7f:
58:68:88:b9:d0:be:2d:1c:9a:37:b9:95:6c:9b:cc:
ca:b4:79:fb:3f:ad:24:2a:6c:66:22:bf:37:39:31:
65:45:bf:d1:fc:24:72:5b:a5:35:ac:8e:95:df:ed:
b3:5b:30:d8:44:71:d1:5a:ac:0b:4d:c7:f5:21:89:
29:b8:e9:75:64:80:9b:aa:a4:74:76:38:6d:7c:04:
16:eb:9d:fd:2a:f7:b9:c8:c0:2d:ce:ed:0f:5b:18:
05:49:46:73:ce:83:42:00:54:b4:7d:25:fa:56:0d:
41:71:95:66:75:17:53:a6:e3:cf:69:a0:04:8f:27:
87:5f:b9:29:e7:d3:81:bd:43:cf:7c:ad:19:9f:a6:
be:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:04:4A:50:17:92:8A:D1:CC:E6:59:16:80:4E:62:54:46:F7:16:52
X509v3 Authority Key Identifier:
keyid:AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:e5:aa:e1:64:ae:9a:04:91:8c:05:bb:ea:e9:c2:c6:54:89:
da:50:ac:72:59:fe:b8:78:b0:3b:07:8b:10:d5:aa:6f:da:a8:
2e:b6:75:c6:e4:bc:48:53:88:e0:fc:e1:72:2f:2e:eb:fc:1e:
1f:0b:58:59:af:c7:45:7e:a4:25:72:c3:a1:69:38:a5:a0:c0:
61:4f:35:9d:03:6d:fe:69:8e:19:41:b9:86:7d:38:80:da:87:
ae:c1:af:fb:4d:58:4f:77:95:90:fb:22:ac:75:93:44:43:c5:
98:e2:a9:a7:76:48:10:08:25:40:ca:ff:1c:9b:d0:2c:40:31:
4f:ff:66:12:cb:76:f0:bd:bb:d4:76:bb:60:d9:e4:3d:ba:51:
b3:00:79:be:01:79:57:a3:0f:29:d4:af:db:d1:3e:94:c8:1a:
29:0d:70:cf:f1:7b:62:2d:87:7f:e3:5a:87:fb:08:49:03:46:
e8:9a:c8:f6:0c:e6:fd:fc:cb:99:4a:34:d2:f0:5c:5c:0d:22:
f2:0a:7a:dc:62:de:c3:24:3b:f5:5a:46:e8:be:4e:46:ca:5b:
b0:e4:5c:d5:b9:4d:85:ba:5d:e7:ba:48:27:fd:02:30:63:b3:
74:3c:b9:e0:73:3a:2e:ff:00:09:95:41:cf:48:d9:42:eb:ff:
55:76:0f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:27:07 2025 by rpki-client