Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
File: qIAb4jY_IRvS9XgYrer5wNvhS9s.mft (raw, json)
Hash identifier: 6brlDYaZDxiOjAo1lhpGM1bfm1eOG4J2h821lHF85rE=
Subject key identifier: 2B:09:A3:30:E9:E5:6D:96:F7:AD:76:60:B7:12:D5:6E:98:D3:7A:55
Authority key identifier: A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB
Certificate issuer: /CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb
Certificate serial: 0197684E3DA03C5CBF729B7BCEC5F51213D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
Manifest number: 158F
Signing time: Fri 13 Jun 2025 08:00:47 +0000
Manifest this update: Fri 13 Jun 2025 08:00:47 +0000
Manifest next update: Sat 14 Jun 2025 08:00:47 +0000
Files and hashes: 1: Ioovps5s613OBdQzBzryR2Ja3A0.roa (hash: ATzykv0spHuFN9BLvq9b09tLyJhBjFr/aCEbExY3CKs=)
2: aQTW2xIeYuZvcEH7gsYJNqz73Xs.roa (hash: ga2DmH5h7HfJ0XIXHVbsof3jQ3Sa9KHt/wMuvsxWtEk=)
3: qIAb4jY_IRvS9XgYrer5wNvhS9s.crl (hash: XV0YSF4P0fN3jX1MUjVm7Z08ZZq2DJvhbjmzG4b7e2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:3d:a0:3c:5c:bf:72:9b:7b:ce:c5:f5:12:13:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb
Validity
Not Before: Jun 13 08:00:47 2025 GMT
Not After : Jun 14 08:00:47 2025 GMT
Subject: CN=2b09a330e9e56d96f7ad7660b712d56e98d37a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a9:2a:53:50:ff:49:2f:08:dc:eb:b6:ba:30:
14:c0:97:9e:0a:34:be:fa:4a:1d:b6:e5:df:8c:a9:
05:bc:92:d6:c4:70:4b:f9:e8:c8:ae:8c:a3:38:c0:
16:66:e2:29:57:72:43:a9:48:0e:e7:70:ee:cb:57:
1e:e5:cc:46:94:cc:16:54:0c:a8:ba:81:b7:41:81:
61:82:4f:95:af:d0:9b:a8:5c:bb:2a:48:28:65:e3:
91:9d:b6:b6:f4:3d:75:14:b0:98:eb:3f:73:f8:e7:
a3:67:4e:73:6a:dd:85:90:4d:88:c8:dd:64:53:3e:
c7:67:1f:00:88:f6:9c:47:32:89:d0:97:f4:01:2c:
75:90:9e:41:06:3d:b7:8f:0a:5f:98:77:35:07:7b:
34:f1:1d:4c:26:0e:90:da:2f:a4:c2:9f:fb:37:4b:
57:a8:90:4f:7a:28:da:52:b2:d0:cc:3e:16:c3:e8:
4c:54:c0:d6:16:c9:06:e2:d7:34:c1:be:6a:1f:b9:
7c:01:6e:c8:99:71:5a:8d:b5:b4:d9:61:07:15:7d:
d2:ef:2b:7b:9b:64:02:65:33:92:db:07:32:d7:29:
f9:de:db:01:69:50:14:97:88:23:5b:ea:b9:9b:02:
6d:fd:ce:04:88:06:27:0c:c9:fa:24:05:23:d9:4f:
09:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:09:A3:30:E9:E5:6D:96:F7:AD:76:60:B7:12:D5:6E:98:D3:7A:55
X509v3 Authority Key Identifier:
keyid:A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b5:0a:e1:39:44:d0:0f:5a:c4:84:3a:95:32:3a:77:62:57:
15:66:0c:0e:dc:89:31:5e:82:ec:2c:af:d9:5c:0f:db:9c:e1:
2f:b5:00:d9:68:4a:c8:d8:36:36:ba:b5:dc:8a:20:f0:8f:16:
1f:3f:5f:13:53:f0:e7:54:2e:a3:7f:42:d2:96:39:00:7b:70:
70:9b:01:a1:75:69:32:15:b5:14:71:bf:65:06:7b:20:bb:3c:
03:8b:3e:16:35:26:fc:d7:ca:e9:ea:08:7a:aa:0e:0f:29:62:
57:85:6d:f3:a3:ba:31:37:32:f0:25:a2:fd:be:8f:44:7a:a5:
da:94:ba:62:bd:3c:e7:13:31:6f:13:8e:a1:22:93:c4:87:cc:
8d:b5:ad:ba:73:55:d5:3e:d1:65:35:c4:66:49:95:c6:6c:b0:
11:1b:20:b6:f7:d8:21:a7:a7:4d:43:f7:b1:4e:56:96:18:37:
6d:03:62:44:3b:02:35:ac:d9:98:da:49:bf:19:a7:6b:85:60:
c8:43:fd:4d:9e:df:b0:fa:2a:09:95:6f:10:3d:c7:2e:95:dc:
a1:8d:ca:27:e0:8a:da:a7:f6:03:ac:68:8f:5a:4a:a3:1b:e1:
7c:48:aa:2a:db:0b:d2:63:5e:cb:f2:bd:52:d3:2e:7c:5e:ec:
4e:58:68:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:27:29 2025 by rpki-client