Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
File: qJhJa40d2CW0hwOPuHyhmbE7k98.mft (raw, json)
Hash identifier: C4FrLqcSm/fNpIzQZeUOairmQ9ozOha1+ulJNW8zc0E=
Subject key identifier: 15:5D:6D:5B:A5:76:05:63:AD:2C:84:55:19:92:05:4F:81:75:CF:0F
Authority key identifier: A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
Certificate issuer: /CN=a898496b8d1dd825b487038fb87ca199b13b93df
Certificate serial: 01974967F192A8E3C8B2359D77AF4611CE9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
Manifest number: 128C
Signing time: Sat 07 Jun 2025 08:00:38 +0000
Manifest this update: Sat 07 Jun 2025 08:00:38 +0000
Manifest next update: Sun 08 Jun 2025 08:00:38 +0000
Files and hashes: 1: GWRi8zK93x8vN7fuDHcGs4Qxgx0.roa (hash: hNAeNeysPf3hbEOCV7P9iNZJA7eK1rPR2orO/tOEM8Q=)
2: qJhJa40d2CW0hwOPuHyhmbE7k98.crl (hash: Z0jzF6oRC7wiLYzrUI2lelzwEpZo8OpY7lXELHvMICw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:f1:92:a8:e3:c8:b2:35:9d:77:af:46:11:ce:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a898496b8d1dd825b487038fb87ca199b13b93df
Validity
Not Before: Jun 7 08:00:38 2025 GMT
Not After : Jun 8 08:00:38 2025 GMT
Subject: CN=155d6d5ba5760563ad2c84551992054f8175cf0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7b:46:47:75:e3:84:43:9d:bb:e1:9d:29:07:
df:4a:63:b8:54:9a:64:77:df:64:a2:85:88:ac:4c:
89:5f:be:d2:5d:f2:c2:e3:1a:ec:f8:6d:66:75:b6:
fb:54:b8:0f:28:bd:c7:35:68:2f:d7:68:fe:05:8d:
14:90:33:04:f6:e4:e2:9a:bc:c4:65:78:b8:4d:26:
06:12:f8:e9:8f:20:d1:8e:bf:fb:b1:d8:36:80:e4:
1c:10:43:88:fa:46:c2:3f:8a:a9:16:6c:8c:03:55:
05:f2:22:47:35:d2:84:5d:c7:78:79:9a:84:83:e3:
8a:d4:bf:08:cd:5d:af:37:a2:92:b5:fc:9c:c1:e6:
09:bd:f8:cf:be:b7:7b:1f:c3:2f:a0:36:71:20:c6:
2d:83:cf:d5:7c:48:ac:dd:9f:9a:d2:a2:c7:fd:4b:
d0:3e:32:54:c3:11:45:ab:37:1f:9b:05:42:c3:69:
29:55:07:23:6e:92:b3:4c:b4:66:ed:fd:4e:da:8c:
14:93:25:eb:d1:b4:0f:45:d3:2f:f5:9c:aa:d7:83:
cb:7c:22:89:aa:e5:b3:47:0d:b7:c9:1b:f4:83:c4:
7b:e0:c2:3e:f1:29:5b:c0:80:a9:0c:cc:90:49:6b:
53:a7:23:6d:17:2d:b7:80:bf:b2:da:88:88:6c:4e:
50:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5D:6D:5B:A5:76:05:63:AD:2C:84:55:19:92:05:4F:81:75:CF:0F
X509v3 Authority Key Identifier:
keyid:A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:59:ae:cf:98:7b:47:90:68:1e:05:1f:54:87:bc:e4:1a:68:
54:3f:7c:72:b3:48:dc:78:a2:14:9d:9b:bd:ff:5c:cc:ef:6a:
29:a5:ff:9b:f5:bd:6c:fa:e3:aa:d4:03:2c:61:a5:8e:8f:38:
77:a2:d1:f6:65:b1:ec:9d:b8:f0:f4:6a:db:90:38:43:47:2e:
1d:9f:d0:38:40:74:c2:44:ba:90:79:5c:c8:51:4c:56:93:a2:
23:1a:73:1a:dd:8f:57:b4:25:cd:41:f2:24:fa:44:db:2a:4e:
98:71:c7:ba:ff:e3:b8:d2:1a:6c:d5:db:fd:0f:1b:08:00:c3:
73:60:22:7e:70:07:a7:42:1a:ff:d2:de:98:28:18:0a:1a:1f:
be:86:8b:c6:2e:2b:b3:db:94:c5:27:af:af:91:cf:f3:fc:52:
7f:74:9e:8f:00:bf:88:e8:e1:a8:f5:c6:eb:ca:a0:23:06:17:
75:04:5d:18:89:66:16:38:ec:77:a2:f2:22:59:fd:9c:f5:69:
4e:4d:8b:00:b2:6b:c7:1b:ee:80:03:1d:61:c8:98:ef:e4:a5:
dd:14:a6:bd:f0:8d:4f:5c:be:4d:16:4a:7c:b9:81:e6:5d:e9:
20:21:14:b4:9d:d2:27:c2:f2:d1:ef:59:65:ab:02:7c:00:ab:
d8:58:59:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:35:42 2025 by rpki-client