Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
File: qKJRFAEUyP2K1ftFtxiaunvFBI8.mft (raw, json)
Hash identifier: NPa5Bt4pnOcpX4mMKR+vBPWP1KFf7/NuKTGBeTNFy5E=
Subject key identifier: 15:28:A9:20:99:95:A4:04:BD:D4:10:53:2E:FA:09:55:70:DA:3A:B8
Authority key identifier: A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F
Certificate issuer: /CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f
Certificate serial: 01976F2C0E798000E811F82E17A5A865F304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
Manifest number: 1222
Signing time: Sat 14 Jun 2025 16:00:47 +0000
Manifest this update: Sat 14 Jun 2025 16:00:47 +0000
Manifest next update: Sun 15 Jun 2025 16:00:47 +0000
Files and hashes: 1: AHkD8Aaan3pABbcPGhXEHYTBg8Y.roa (hash: hXef/ttEb+W4FSVe0XdSIGoItwURMRnjh0hA4tDFc64=)
2: qKJRFAEUyP2K1ftFtxiaunvFBI8.crl (hash: vJyEEGKZ+oKs1vZM+ceW4xlcBk1ADoeNJHD2WCT+cqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:0e:79:80:00:e8:11:f8:2e:17:a5:a8:65:f3:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f
Validity
Not Before: Jun 14 16:00:47 2025 GMT
Not After : Jun 15 16:00:47 2025 GMT
Subject: CN=1528a9209995a404bdd410532efa095570da3ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b4:a7:e4:58:0f:d3:c3:ad:e8:8e:cf:6f:1d:
9c:bd:c3:d1:82:22:8b:71:66:f8:21:06:6d:cb:16:
2a:38:ad:f3:48:6e:bd:98:64:5a:a8:b7:5d:cc:68:
ec:6d:cf:88:d8:8f:a5:ed:3e:4d:50:4e:e7:0f:ff:
94:ff:5e:17:93:c0:02:56:57:fe:7e:00:81:80:d5:
76:df:ba:00:3d:72:f9:d0:b9:f7:e0:fe:67:f4:58:
88:31:f5:83:be:be:15:55:c0:89:1c:9d:6f:4e:e3:
ff:f1:77:22:c2:0a:a7:93:05:74:6a:27:43:69:bc:
d5:97:02:a0:e5:d8:1d:9a:d5:2c:ea:56:e4:3c:8f:
76:52:9e:c1:dd:fc:54:5a:22:7a:f7:bd:3c:ea:d8:
4a:5c:3d:c4:d8:06:9d:d9:da:fa:a0:51:5d:3d:8d:
15:72:0e:db:82:86:f9:d2:6c:d5:4a:6d:36:56:45:
ab:db:c7:bb:c1:12:62:c6:9e:12:56:78:b3:77:9e:
85:f5:93:3d:0f:75:95:8b:b1:19:9c:03:97:06:65:
ae:db:cf:02:bc:8b:25:57:d0:2a:30:54:0a:5f:2d:
c6:ff:c0:6d:4e:0c:8f:3b:25:d1:ae:74:4d:50:7a:
a7:07:e4:30:82:73:0f:f3:67:43:dd:9f:f5:70:5e:
62:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:28:A9:20:99:95:A4:04:BD:D4:10:53:2E:FA:09:55:70:DA:3A:B8
X509v3 Authority Key Identifier:
keyid:A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:52:c6:89:4f:c9:36:fb:c6:20:d7:1e:29:a8:9e:2d:bf:4c:
06:72:57:ae:3e:79:93:3d:04:c2:1b:2c:53:f7:5d:23:28:91:
6a:bf:6e:d0:84:1a:1d:cf:4c:a1:78:dc:77:41:7c:3e:e3:3c:
e1:fb:11:e4:4b:39:c4:aa:e9:8a:f0:09:6f:6f:d3:b6:ed:00:
46:eb:44:56:aa:12:12:66:44:b2:fe:d5:7a:f4:29:26:5a:26:
0f:63:bf:9a:2f:9c:6a:5f:d5:66:e7:bb:cc:a6:17:ad:b1:bd:
ba:dd:85:4b:9f:8c:10:31:13:c6:fd:88:4e:fb:5d:90:c6:41:
8d:79:be:07:15:48:33:23:68:02:e6:ba:94:15:81:a3:be:3e:
4a:bb:5b:2b:e6:1d:e2:c3:e3:fa:a8:57:b3:31:aa:3d:87:f9:
53:cf:ab:61:49:86:09:1b:80:cb:0d:90:9c:66:e6:26:24:23:
ce:26:e5:03:35:b8:3f:08:d6:2d:b8:73:77:8f:96:c7:6e:5d:
f2:e5:d6:4b:71:e7:3b:d7:0e:a5:9b:69:4c:10:24:a6:5e:eb:
dd:3d:67:55:04:8e:98:2a:67:db:58:07:24:69:11:67:c0:53:
be:51:e1:dd:1a:00:c2:9e:44:06:6f:29:43:ef:89:ce:0a:a4:
57:f2:1e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:59:05 2025 by rpki-client