Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
File: qIXNvd_X0TFoRb609zmPPOZPrNA.mft (raw, json)
Hash identifier: FbHitWS+1FDHUuXkF1d7qAjNLOhDaNbPYVbG1jlIj2c=
Subject key identifier: 2D:84:C1:40:DA:CD:67:D9:19:CA:D8:38:FD:B4:EA:9C:0A:D6:B2:86
Authority key identifier: A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0
Certificate issuer: /CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0
Certificate serial: 01977075F2356E205DB82EE4469ACBCE3860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
Manifest number: 12D3
Signing time: Sat 14 Jun 2025 22:01:07 +0000
Manifest this update: Sat 14 Jun 2025 22:01:07 +0000
Manifest next update: Sun 15 Jun 2025 22:01:07 +0000
Files and hashes: 1: qIXNvd_X0TFoRb609zmPPOZPrNA.crl (hash: hCQwo9AVZKFbGOpsrtQd2dlPoLxV+H7aqFocM3Ztw9c=)
2: xtTCfWlyctb3-ZIARtvZc7gD2_c.roa (hash: DoO5FfFnFM++vEGajImQDDKEPB+yqs7BrAr2CdTgfGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:f2:35:6e:20:5d:b8:2e:e4:46:9a:cb:ce:38:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0
Validity
Not Before: Jun 14 22:01:07 2025 GMT
Not After : Jun 15 22:01:07 2025 GMT
Subject: CN=2d84c140dacd67d919cad838fdb4ea9c0ad6b286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:20:82:c9:7e:bb:59:f9:4a:d7:54:10:67:1e:
8e:bd:5f:59:c1:70:51:ba:eb:42:d1:30:78:eb:94:
f0:d4:1c:12:40:c1:0d:b3:64:19:e3:f0:50:63:8b:
f4:7c:b9:01:ae:b6:3b:b6:ea:b0:e9:11:fc:21:46:
6b:00:ef:ab:cb:96:34:2e:28:17:89:95:1c:ac:e1:
61:33:bc:0f:5e:e9:34:d5:35:cb:eb:ad:fc:f4:b2:
54:ff:bd:f1:bd:85:9c:c2:be:85:3d:56:cb:8d:aa:
b0:14:cd:03:02:71:88:b8:9c:46:50:94:3b:3e:b9:
11:2f:09:e4:86:13:df:58:57:79:b1:42:eb:14:f6:
b2:f7:a5:db:e3:96:8b:41:17:fa:1a:5d:fd:dd:fc:
27:90:13:82:48:ca:6a:63:43:6a:6e:a8:03:bc:cc:
27:40:42:d7:fc:4a:29:1a:b4:c4:e4:28:b9:44:b4:
11:cb:8b:3a:c7:b2:b9:04:3b:9a:d7:ce:46:7d:cc:
f6:96:13:a8:12:5f:d7:77:b5:1c:14:b5:8d:8e:f4:
64:d2:91:6c:74:de:a8:96:f2:62:2b:70:b8:87:c1:
36:b0:23:ac:6e:dc:b8:ea:2a:1a:8e:7c:72:09:5d:
17:3e:77:b6:3e:96:d0:86:b0:50:05:ef:35:c7:1f:
99:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:84:C1:40:DA:CD:67:D9:19:CA:D8:38:FD:B4:EA:9C:0A:D6:B2:86
X509v3 Authority Key Identifier:
keyid:A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c3:a5:d9:f9:93:5d:d2:41:05:59:d6:c1:f3:da:f6:3a:1f:
09:ad:08:91:75:e5:e6:7e:a7:0d:78:7d:e3:bb:89:c4:84:b5:
b0:43:77:dd:5a:60:d5:15:f4:26:52:e7:16:48:df:61:df:5f:
c1:a0:8e:ac:89:2d:7c:55:f0:3b:cf:09:b6:a4:f9:a0:07:ce:
b4:47:64:76:7a:0a:ed:31:97:e3:1c:8d:4a:25:b3:a7:da:ae:
a6:34:6c:75:d1:55:bc:ad:82:c3:08:7f:53:80:b4:09:ff:18:
43:bd:c4:0e:1a:81:bd:cc:84:03:f6:16:46:94:ba:94:0a:a3:
ed:61:04:ec:62:ca:28:cf:45:0e:da:76:4b:02:59:e1:15:4b:
94:0e:90:b2:05:f2:de:7a:05:d3:aa:e9:47:2e:b9:a7:38:bc:
b4:b1:b8:88:19:52:32:91:67:cf:57:0c:fd:71:1b:4e:5b:ee:
17:a3:4d:e4:76:5a:87:28:87:60:8e:a5:df:eb:d0:6e:b7:4a:
9c:47:e4:ed:1d:80:33:ec:12:c4:cd:a9:f1:6a:21:7f:63:3f:
77:51:ba:45:3b:7e:b9:b1:34:6b:c0:0a:16:47:99:33:24:36:
dd:1d:5a:09:f1:67:3f:2d:07:cc:c9:26:66:39:4c:d5:18:17:
ed:d2:63:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:53:55 2025 by rpki-client