Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
File: qJKcs0O9888gTEBa8KVTPqSwkzw.mft (raw, json)
Hash identifier: Rw/S8u2dfbx/T73uEz88pSXoiwVfCxggM479iOanMlE=
Subject key identifier: 0B:C5:CF:30:FA:80:E5:46:DC:FE:EB:35:53:4E:59:88:73:D8:8F:AC
Authority key identifier: A8:92:9C:B3:43:BD:F3:CF:20:4C:40:5A:F0:A5:53:3E:A4:B0:93:3C
Certificate issuer: /CN=a8929cb343bdf3cf204c405af0a5533ea4b0933c
Certificate serial: 019786FD171AD5B3C7BC3994A73A8717AA4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
Manifest number: 0B11
Signing time: Thu 19 Jun 2025 07:00:22 +0000
Manifest this update: Thu 19 Jun 2025 07:00:22 +0000
Manifest next update: Fri 20 Jun 2025 07:00:22 +0000
Files and hashes: 1: 8nlWTKhyMjB_CH2EMsOrSJHd2IE.roa (hash: mJ1SJpAndBJG+LB/ssF0bKHufcREx+RUY5ZeHveZh6w=)
2: qJKcs0O9888gTEBa8KVTPqSwkzw.crl (hash: ZId70MPjjfauc8lBK+8ovdOV7sJn5rLdS/CwHG5rBOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:fd:17:1a:d5:b3:c7:bc:39:94:a7:3a:87:17:aa:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8929cb343bdf3cf204c405af0a5533ea4b0933c
Validity
Not Before: Jun 19 07:00:22 2025 GMT
Not After : Jun 20 07:00:22 2025 GMT
Subject: CN=0bc5cf30fa80e546dcfeeb35534e598873d88fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c4:40:77:d6:e6:13:b4:21:78:e1:37:ea:9b:
e9:b5:33:4d:35:ac:2c:5a:78:46:6c:05:86:00:6e:
0c:8a:45:ba:10:b4:10:75:6d:57:bf:b9:93:ac:1a:
85:1c:56:c2:46:ba:0e:bd:e2:e8:2a:5f:4b:ec:19:
ba:6d:67:ea:15:3d:7d:f3:b9:23:06:3f:1f:43:93:
31:41:5b:50:fd:46:74:e2:78:89:b4:3e:89:c1:ae:
ae:e7:32:5c:3e:58:33:20:a4:76:35:53:e6:db:1c:
37:fd:6f:b7:ef:2d:8c:f7:e7:a5:e7:ea:a9:65:be:
d7:22:59:49:f4:0e:42:66:d7:62:45:78:49:b5:c5:
ff:9d:92:25:b4:a6:76:12:7d:38:02:a0:04:77:af:
b5:7b:27:31:dc:eb:34:6e:d0:7d:36:98:57:b1:66:
ad:f0:d5:3f:33:8d:74:7e:52:78:ea:f5:f9:5e:c2:
8d:01:14:99:e9:fd:14:20:d1:7a:c6:d9:39:15:c4:
c2:21:f0:25:e9:24:38:d2:ac:4f:83:5a:95:54:b8:
ff:42:f9:03:f3:c0:2f:7a:c5:65:dd:cb:1c:ae:56:
1e:2d:af:bd:a4:7b:f7:44:9a:b0:d1:11:45:4f:b4:
f1:c6:12:02:7f:f1:09:32:ca:01:75:03:c9:85:7a:
6e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C5:CF:30:FA:80:E5:46:DC:FE:EB:35:53:4E:59:88:73:D8:8F:AC
X509v3 Authority Key Identifier:
keyid:A8:92:9C:B3:43:BD:F3:CF:20:4C:40:5A:F0:A5:53:3E:A4:B0:93:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:58:6b:52:78:8d:04:f7:f8:d8:b7:14:54:d2:fd:93:c9:2b:
d4:90:4c:40:a7:8f:a5:2e:33:a0:ce:4c:c1:1f:bc:2b:a3:1e:
fa:41:0d:19:c3:ee:01:d5:f3:0b:82:24:92:0e:66:0a:21:33:
52:59:f4:13:61:4a:33:b7:cd:00:f0:f7:d9:cf:fe:45:85:8f:
6f:09:61:66:be:86:c9:71:2a:8b:63:ce:af:aa:0e:ce:25:22:
19:2c:de:5c:b9:4b:58:1b:38:61:27:02:0a:95:ed:e3:4c:83:
0c:35:48:49:bd:10:a0:38:9e:aa:9e:48:e5:c3:38:16:68:0b:
b5:77:e1:1e:c3:11:20:ef:b8:ec:88:ae:af:1e:8d:3f:67:95:
03:9a:99:90:0e:89:ef:9b:88:b1:bc:8f:50:68:02:30:9a:38:
27:ce:58:9c:ce:92:cb:38:9e:e5:56:43:7f:74:49:1b:22:20:
33:ac:e7:4e:75:6c:08:6b:40:ab:5f:c9:11:95:a4:39:f9:cd:
a2:42:63:b5:f9:16:0e:d8:b5:8b:64:1a:4e:eb:1f:68:5f:dc:
32:53:77:a4:67:e0:ff:e9:92:14:67:20:28:c4:cb:44:9d:f7:
87:e3:6d:fd:c3:c4:36:56:ee:5f:b9:cb:33:ce:6e:4e:18:9c:
6e:f6:54:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 11:06:32 2025 by rpki-client