Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
File: qoXGfyIwng2EwwtUJSlyUyhgUVE.mft (raw, json)
Hash identifier: r9n8CPTOcoovKJ2uPESyoeiXjpu1w21yfxJZzEhpxs4=
Subject key identifier: 39:1F:61:9B:ED:F8:14:6E:F4:19:09:6C:A8:B4:A6:01:38:56:79:02
Authority key identifier: AA:85:C6:7F:22:30:9E:0D:84:C3:0B:54:25:29:72:53:28:60:51:51
Certificate issuer: /CN=aa85c67f22309e0d84c30b542529725328605151
Certificate serial: 0197711A497831204964AF931DD171822290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
Manifest number: 0C12
Signing time: Sun 15 Jun 2025 01:00:37 +0000
Manifest this update: Sun 15 Jun 2025 01:00:37 +0000
Manifest next update: Mon 16 Jun 2025 01:00:37 +0000
Files and hashes: 1: U6h0E3CpWcLE4IcpdPD5N0_flWE.roa (hash: /MeOIU5IzJfeECJ9wAs+zMCbOflzuiKPgRuM31+tyrU=)
2: qoXGfyIwng2EwwtUJSlyUyhgUVE.crl (hash: dfUSTVtTxRQewiWRg6mltoQpC7XmYhl2HrDkU7KlUcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:49:78:31:20:49:64:af:93:1d:d1:71:82:22:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa85c67f22309e0d84c30b542529725328605151
Validity
Not Before: Jun 15 01:00:37 2025 GMT
Not After : Jun 16 01:00:37 2025 GMT
Subject: CN=391f619bedf8146ef419096ca8b4a60138567902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e8:1f:bf:ca:5e:d2:63:cf:37:cc:ed:52:2b:
fc:53:b6:60:09:0a:aa:cd:db:97:fa:12:b9:9e:b9:
1e:83:df:d8:63:69:7c:29:42:46:fd:22:5f:a1:7a:
c6:39:74:71:54:88:15:74:d8:59:c7:02:aa:b5:cf:
40:e2:16:f8:62:7f:86:79:5f:26:96:14:fd:f7:5d:
ba:61:e8:1b:73:aa:31:93:de:26:cf:4e:2e:33:dd:
6b:82:5a:2a:03:5a:7f:e4:32:7e:81:14:d1:2a:f4:
cc:5d:a7:82:c9:ac:7e:30:34:48:f1:57:3e:82:9c:
dc:d3:8b:f7:b8:9e:64:6c:02:06:db:a8:f5:77:c6:
03:2e:de:cc:c1:34:0b:cb:66:c8:70:39:11:75:a4:
e0:f7:4a:e9:7f:ec:16:72:76:22:97:ff:b9:e9:0e:
9a:6a:9d:4d:8b:f2:3a:f2:30:5a:46:6c:0c:81:a0:
47:94:43:07:95:50:95:3d:e0:8b:2e:14:a5:22:af:
2d:e1:fc:4e:89:b1:99:a1:cf:f6:54:16:44:54:10:
11:1c:fb:a8:18:72:9c:dc:51:68:a9:a5:3f:49:42:
06:d4:c9:f1:30:1f:21:a4:d7:18:9d:75:55:26:4d:
e5:cb:59:c1:58:ad:89:25:7f:b2:c3:eb:34:1b:ed:
ff:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1F:61:9B:ED:F8:14:6E:F4:19:09:6C:A8:B4:A6:01:38:56:79:02
X509v3 Authority Key Identifier:
keyid:AA:85:C6:7F:22:30:9E:0D:84:C3:0B:54:25:29:72:53:28:60:51:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e8:7e:06:1a:3d:b8:66:ed:84:98:12:47:05:9f:80:3d:6e:
7f:61:d3:31:97:68:27:05:77:2d:11:bf:3a:9a:15:f8:ee:05:
59:52:80:53:7e:69:d1:43:76:66:6b:e5:f3:02:bf:ee:52:d7:
3e:42:94:55:57:5d:2a:d6:c9:a6:cb:03:68:49:b2:4e:d4:ea:
d4:86:d7:f5:91:91:d2:64:b9:0c:17:d5:61:ae:25:88:25:07:
a1:73:42:be:bb:6c:03:16:e2:a4:f6:27:49:2e:d8:e1:ef:d7:
17:ad:a9:cd:1b:77:22:13:65:3d:1f:e2:ef:7f:0c:34:02:d0:
b9:23:bb:1e:c5:ef:b5:6a:5b:e2:9d:6b:4e:ec:28:23:5b:9a:
93:06:6c:fb:11:8c:a5:6c:c4:6f:b6:35:8d:1d:a7:22:1f:3e:
6c:08:b1:b9:09:be:bc:ca:32:fd:52:e3:4b:be:f1:38:47:e4:
dc:cf:87:3d:5b:d0:7d:34:41:33:40:b7:66:a7:34:16:b2:de:
9c:c7:77:79:f4:1d:30:5a:ca:94:ae:fb:8d:80:77:b2:d4:8f:
3e:09:25:1b:18:2c:2d:08:ad:95:a2:66:61:1b:97:e6:7f:5b:
6a:52:46:4f:a8:53:ba:65:f5:31:c3:2e:e5:42:d0:32:3a:f4:
82:00:07:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:30:33 2025 by rpki-client