Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
File: qJbB4UyG5u9bFnJPcRdnbschSVc.mft (raw, json)
Hash identifier: 7hKgu1xW4gZme74TOoH8S9A+nv3OR8l/OS618Ab9ewk=
Subject key identifier: CF:9F:BF:17:C6:CC:A2:A7:F9:0A:00:29:4E:6D:24:6C:9D:1F:F1:10
Authority key identifier: A8:96:C1:E1:4C:86:E6:EF:5B:16:72:4F:71:17:67:6E:C7:21:49:57
Certificate issuer: /CN=a896c1e14c86e6ef5b16724f7117676ec7214957
Certificate serial: 01976FD0CFBCAC2C09E8C036CD7DFAF35C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
Manifest number: 1593
Signing time: Sat 14 Jun 2025 19:00:44 +0000
Manifest this update: Sat 14 Jun 2025 19:00:44 +0000
Manifest next update: Sun 15 Jun 2025 19:00:44 +0000
Files and hashes: 1: nHAl3SgY4EfLu7utGVmeJZcr1_s.roa (hash: lrIHVcXwhi/Eq6CWKi+Aq4ByD1FHp2btPHqZK4Ez+BE=)
2: qJbB4UyG5u9bFnJPcRdnbschSVc.crl (hash: yE9k/Zd4KkMUJ/xd7W4AnIcVmbQ7/0IXcrQuMh6w8X4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:cf:bc:ac:2c:09:e8:c0:36:cd:7d:fa:f3:5c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a896c1e14c86e6ef5b16724f7117676ec7214957
Validity
Not Before: Jun 14 19:00:44 2025 GMT
Not After : Jun 15 19:00:44 2025 GMT
Subject: CN=cf9fbf17c6cca2a7f90a00294e6d246c9d1ff110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c5:fa:34:16:0e:db:da:94:67:3a:f0:29:4e:
f0:bb:ea:fc:7e:c3:2c:ce:57:71:38:0e:05:9c:79:
4c:ac:a0:b1:6b:f3:86:f8:d0:ad:4c:e9:84:cc:92:
28:07:ee:fe:6f:5a:94:94:ce:d5:20:cd:b3:10:da:
a2:5c:c9:47:7c:c8:f0:a7:28:01:b7:2d:2c:a9:16:
7a:3a:d4:e4:18:f1:8a:76:2a:99:47:a0:48:53:cb:
7f:01:74:e6:70:26:09:99:94:f9:3c:57:7f:13:b2:
c0:2c:ba:b9:16:d0:8c:94:63:53:21:c4:12:87:8c:
e6:59:78:ce:70:fb:42:3b:79:39:e8:c1:27:f3:d9:
7b:35:a8:1b:d9:53:63:85:60:cd:d8:ba:c6:23:96:
91:0b:5c:2e:6e:2c:aa:c2:97:50:af:86:92:6a:5d:
88:d7:37:0f:a6:4d:94:50:78:af:34:2b:c8:cd:21:
17:cd:f0:4a:7b:0a:a4:4e:9c:23:32:2e:86:e3:6f:
4a:14:0e:96:34:a5:33:8c:99:fb:94:85:28:4d:b4:
90:a5:a0:a1:81:9b:0e:5c:54:87:51:54:c0:62:ff:
dc:30:2c:95:68:40:b9:4a:3c:af:12:05:1e:55:99:
d3:49:17:8c:38:82:c6:07:9a:f9:2c:b5:68:9f:55:
e6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9F:BF:17:C6:CC:A2:A7:F9:0A:00:29:4E:6D:24:6C:9D:1F:F1:10
X509v3 Authority Key Identifier:
keyid:A8:96:C1:E1:4C:86:E6:EF:5B:16:72:4F:71:17:67:6E:C7:21:49:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a6:97:1c:5a:99:30:e8:c9:4f:74:98:0f:2a:66:19:2a:8d:
df:57:34:18:23:7e:e6:55:7d:e5:ad:99:49:2a:34:96:55:84:
57:e9:a2:3a:d9:45:df:d7:ae:da:f0:f1:88:22:60:42:72:48:
7d:97:fe:45:5d:fe:de:d3:e8:85:ae:1f:57:55:bf:67:0e:85:
48:61:8e:52:2b:f6:51:bd:a8:e5:d9:02:52:83:b9:b2:1a:4e:
a2:c7:c3:8e:2f:04:e9:a8:dd:53:94:51:f9:1c:77:2c:4e:c4:
1b:b6:a5:30:63:0e:b6:9e:5d:0d:05:cf:ce:ba:da:58:54:80:
62:02:b5:a2:f7:1f:3a:aa:3f:af:d4:ce:51:88:b9:7a:f3:3d:
29:de:cb:48:9b:23:17:0f:a8:ae:ad:28:b2:3e:6c:44:e9:5e:
ef:50:8f:b9:41:3a:a0:08:26:5e:b1:74:b2:7b:fe:c7:a1:80:
64:f9:57:b6:ec:e6:aa:17:b9:b6:44:5f:4c:da:38:15:ac:ae:
6f:95:6e:8a:09:dc:ab:26:eb:e5:b5:20:bd:38:90:ae:19:9d:
57:ab:56:0e:80:74:0b:f7:f2:df:91:0e:95:d9:ec:62:d8:99:
63:60:93:24:86:ae:37:bc:a1:b1:85:6f:5c:1a:8e:53:53:b1:
19:51:db:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:11:55 2025 by rpki-client