Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/qQ_wEQVOz-aKitx94mit5sCCdxE.mft
File: qQ_wEQVOz-aKitx94mit5sCCdxE.mft (raw, json)
Hash identifier: obfQK9EiQqlxRKjy+TqBEPjjWnhkuZ+KZcrm39b0N5Y=
Subject key identifier: 5E:A2:04:16:A5:F5:26:48:55:EA:D5:A1:51:7D:31:30:50:51:DB:1F
Authority key identifier: A9:0F:F0:11:05:4E:CF:E6:8A:8A:DC:7D:E2:68:AD:E6:C0:82:77:11
Certificate issuer: /CN=a90ff011054ecfe68a8adc7de268ade6c0827711
Certificate serial: 01977308A947A7122FC5F1800BC993E8A77E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ_wEQVOz-aKitx94mit5sCCdxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/qQ_wEQVOz-aKitx94mit5sCCdxE.mft
Manifest number: 158E
Signing time: Sun 15 Jun 2025 10:00:36 +0000
Manifest this update: Sun 15 Jun 2025 10:00:36 +0000
Manifest next update: Mon 16 Jun 2025 10:00:36 +0000
Files and hashes: 1: qQ_wEQVOz-aKitx94mit5sCCdxE.crl (hash: Df47ahvRaVNBtRmQabHEPcgbuO5xSo5JF+wzv1EPTjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/qQ_wEQVOz-aKitx94mit5sCCdxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/qQ_wEQVOz-aKitx94mit5sCCdxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQ_wEQVOz-aKitx94mit5sCCdxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:08:a9:47:a7:12:2f:c5:f1:80:0b:c9:93:e8:a7:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90ff011054ecfe68a8adc7de268ade6c0827711
Validity
Not Before: Jun 15 10:00:36 2025 GMT
Not After : Jun 16 10:00:36 2025 GMT
Subject: CN=5ea20416a5f5264855ead5a1517d31305051db1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bb:86:52:7d:e5:9d:ce:f9:d1:10:1e:d3:02:
d7:9f:83:98:e6:47:a1:f7:a8:94:f2:37:ad:da:28:
63:71:08:0d:f3:21:cd:31:2a:0e:1e:45:39:36:20:
49:ec:77:cb:8f:fe:a0:b3:d0:2e:db:34:14:3f:e6:
0b:6a:db:1a:e1:57:78:f4:d6:a7:b7:39:b0:76:4c:
80:eb:42:2d:bb:ed:de:12:b7:6e:7d:85:c4:67:a3:
53:d4:0b:08:dc:71:2a:d2:fd:fa:bb:eb:b1:1e:5a:
98:c6:eb:62:c4:8a:84:d0:0b:64:85:04:98:44:d1:
5d:fc:3b:1f:aa:5b:ac:68:ad:90:33:19:7b:db:a2:
eb:fc:bc:fc:11:22:11:a6:4d:7a:51:95:70:46:ad:
4c:5d:0a:0f:6e:2c:0b:ad:40:e7:98:96:e2:37:aa:
2d:5c:28:a9:fe:f3:a2:50:ea:8b:7b:4a:9e:6d:0b:
87:cc:32:0f:29:fb:c5:00:02:ad:a2:2f:bf:79:3f:
ca:1d:0c:5b:f2:02:8c:fa:b2:56:e5:89:6c:0f:71:
a8:3c:54:46:c1:3a:b5:2a:74:05:16:8d:2f:fc:26:
ef:8e:14:4d:8f:3b:58:56:2e:9c:9b:c2:b8:75:12:
8e:9a:56:cd:24:d8:8a:83:7f:c9:cf:11:0d:87:aa:
32:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A2:04:16:A5:F5:26:48:55:EA:D5:A1:51:7D:31:30:50:51:DB:1F
X509v3 Authority Key Identifier:
keyid:A9:0F:F0:11:05:4E:CF:E6:8A:8A:DC:7D:E2:68:AD:E6:C0:82:77:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ_wEQVOz-aKitx94mit5sCCdxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/qQ_wEQVOz-aKitx94mit5sCCdxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/qQ_wEQVOz-aKitx94mit5sCCdxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:86:8b:78:bd:28:1f:6f:b4:f8:90:a3:74:ec:47:7f:bc:40:
80:f0:45:87:93:68:ec:8c:1b:5e:fc:fb:d2:a7:4b:dc:44:0d:
13:27:f0:1d:1c:d6:df:b2:7f:12:16:5a:a3:87:df:9f:e4:3c:
fc:b6:5e:80:61:0c:7d:7b:e4:5d:15:08:73:1f:01:58:0c:7d:
1e:80:e3:19:18:e0:ba:3f:f5:4a:6d:e2:49:7f:23:08:80:02:
80:13:90:f3:8a:f9:5d:5e:af:0e:fb:a5:15:be:2c:e5:89:90:
44:f4:3a:6e:13:c3:80:59:30:de:ee:73:08:96:ca:d1:d1:3c:
ac:2d:e9:7f:1c:0a:f4:b8:99:c3:67:05:ea:5b:d1:76:74:c0:
7f:9e:a7:7b:e2:ba:d1:11:24:d7:27:a5:d1:d4:6d:ff:3c:1e:
4d:9f:4d:f7:7d:bb:f9:7e:6a:fa:d9:1a:f2:f9:20:61:84:b7:
bc:b1:74:da:1c:ed:e6:c0:4d:a7:00:4d:cb:de:df:fd:c3:a3:
63:07:91:fe:1e:1f:83:8d:49:d7:7e:d5:3a:d5:e8:81:da:7f:
c3:30:a8:3b:76:3d:78:fd:ca:e4:92:63:e0:0b:ca:c4:86:3a:
15:9d:fd:7f:6d:53:eb:4c:74:1d:65:db:65:90:c7:da:08:23:
2a:f5:25:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:11:57 2025 by rpki-client