Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/60b472-dada-42e6-9f34-24bf30eddbe1/1/qSjaimFsusTJQnRmk6Fh5JjEYs8.mft
File: qSjaimFsusTJQnRmk6Fh5JjEYs8.mft (raw, json)
Hash identifier: fQCkUrJwcHgUmfQJnOfe5qISoc8QB9kCVenZN33ubj4=
Subject key identifier: 2D:0D:15:04:78:88:2D:9A:A3:A0:4B:49:96:83:BE:5C:C3:8A:92:FE
Authority key identifier: A9:28:DA:8A:61:6C:BA:C4:C9:42:74:66:93:A1:61:E4:98:C4:62:CF
Certificate issuer: /CN=a928da8a616cbac4c942746693a161e498c462cf
Certificate serial: 01974AB1A75021B4FC10FC2EBF3139EDD12C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qSjaimFsusTJQnRmk6Fh5JjEYs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/60b472-dada-42e6-9f34-24bf30eddbe1/1/qSjaimFsusTJQnRmk6Fh5JjEYs8.mft
Manifest number: 7B
Signing time: Sat 07 Jun 2025 14:00:45 +0000
Manifest this update: Sat 07 Jun 2025 14:00:45 +0000
Manifest next update: Sun 08 Jun 2025 14:00:45 +0000
Files and hashes: 1: 65PIAiCfgfiAH-DOFMDqdYi7-v0.roa (hash: vrMIR5GbnN7NVc0BGSN7sHPt5ir6Ncr78mtDLJprPDY=)
2: qSjaimFsusTJQnRmk6Fh5JjEYs8.crl (hash: PwRbVfB7tZVmxe651pY57bU5JrxlvHioPya/U4IIwRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/60b472-dada-42e6-9f34-24bf30eddbe1/1/qSjaimFsusTJQnRmk6Fh5JjEYs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/60b472-dada-42e6-9f34-24bf30eddbe1/1/qSjaimFsusTJQnRmk6Fh5JjEYs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qSjaimFsusTJQnRmk6Fh5JjEYs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:a7:50:21:b4:fc:10:fc:2e:bf:31:39:ed:d1:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a928da8a616cbac4c942746693a161e498c462cf
Validity
Not Before: Jun 7 14:00:45 2025 GMT
Not After : Jun 8 14:00:45 2025 GMT
Subject: CN=2d0d150478882d9aa3a04b499683be5cc38a92fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6c:d1:3d:de:db:59:3e:7b:05:bc:77:7b:d2:
31:db:ce:36:00:3e:80:0c:4d:f9:02:ac:e8:03:fe:
78:8b:0e:68:ef:f4:da:bd:77:9e:02:45:45:02:9b:
c4:69:65:9d:9f:3a:75:28:b3:45:ec:4d:e7:fc:d1:
32:cf:b1:51:6f:00:31:59:1e:e7:a1:28:09:1c:8b:
19:ff:f6:8f:9f:32:18:db:d2:dc:b0:54:79:28:34:
fa:e4:72:26:a6:8e:9e:73:b7:40:53:5d:60:db:1f:
b0:84:65:62:6c:a1:82:f8:65:83:15:5c:d7:ac:5b:
d6:f2:5b:a9:c3:50:35:e0:a5:1a:cb:8c:96:e8:56:
f8:59:1d:0e:9b:15:4d:0c:1d:8d:2e:6d:10:3f:26:
12:25:1f:73:f5:f1:92:48:5e:93:e8:b8:6c:69:3c:
eb:40:05:76:b2:77:09:bf:fb:cf:97:97:fc:b7:93:
87:cf:ef:6b:7e:e3:53:b5:2f:6b:46:9b:b7:4f:b7:
1d:d8:af:74:65:39:4e:ef:95:fd:c3:b2:77:d3:9e:
67:84:d8:09:88:5f:92:90:b7:58:11:3f:ef:da:25:
8e:39:f5:d8:fb:9e:76:9b:e1:dd:af:ee:22:31:fb:
66:76:4e:49:9a:c2:1b:8b:df:6c:02:4f:7f:53:34:
b5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0D:15:04:78:88:2D:9A:A3:A0:4B:49:96:83:BE:5C:C3:8A:92:FE
X509v3 Authority Key Identifier:
keyid:A9:28:DA:8A:61:6C:BA:C4:C9:42:74:66:93:A1:61:E4:98:C4:62:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSjaimFsusTJQnRmk6Fh5JjEYs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/60b472-dada-42e6-9f34-24bf30eddbe1/1/qSjaimFsusTJQnRmk6Fh5JjEYs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/60b472-dada-42e6-9f34-24bf30eddbe1/1/qSjaimFsusTJQnRmk6Fh5JjEYs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:fc:d9:5b:cd:55:3a:b6:c0:d7:f2:2c:c5:6d:6d:bb:8a:55:
7b:15:b8:d4:38:4a:ff:76:05:4a:03:69:f4:b6:a5:aa:7e:3e:
93:da:50:0a:2a:64:f2:28:e5:d3:e9:fe:ea:72:a4:47:4d:6e:
e3:61:75:9e:ff:29:0a:79:81:90:a5:ac:90:e0:47:22:5a:a8:
41:a8:e3:eb:4a:b4:46:b0:78:14:d1:bd:36:43:ec:72:dd:ee:
94:95:57:4b:52:79:45:d6:45:e7:53:e3:fd:1d:e9:22:51:0a:
a3:f1:62:54:8d:08:dc:e5:57:e1:4d:c5:ce:0a:e6:7e:d3:28:
e5:9b:5e:44:51:d8:a1:e0:8c:50:6d:0c:21:6a:56:ae:b1:9e:
53:a0:2f:18:9e:19:82:06:e4:dd:89:77:00:09:1c:f5:c2:82:
d8:28:f6:cd:39:27:a9:59:62:7b:79:23:6f:50:38:1c:52:61:
9d:f5:3d:73:74:90:60:9d:a1:0e:99:d2:54:7c:95:32:45:fa:
3e:92:9e:df:0c:69:71:51:fc:51:ca:df:97:80:12:74:eb:a1:
0a:c3:61:23:c3:88:3d:a0:c5:ea:24:65:1a:f3:ae:90:d1:17:
91:8e:d5:e4:51:6c:1d:f6:dc:76:3c:3b:7e:e6:9b:7d:94:58:
33:9f:8b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:02:08 2025 by rpki-client