Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
File: qmffuIKufY5V0lhlF0L05s5DcBk.mft (raw, json)
Hash identifier: 25Yg+udtfvghqXT5EncMOZyr/0VO2Ox20/O+fOgyp8g=
Subject key identifier: 2B:FC:B7:CC:73:48:34:F9:C1:38:B5:74:A9:03:63:89:18:2C:ED:94
Authority key identifier: AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
Certificate issuer: /CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Certificate serial: 01977007FB52E62E9FC796438E8937756068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 20:01:00 +0000
Manifest this update: Sat 14 Jun 2025 20:01:00 +0000
Manifest next update: Sun 15 Jun 2025 20:01:00 +0000
Files and hashes: 1: qmffuIKufY5V0lhlF0L05s5DcBk.crl (hash: KXJ1WH5jy/j7Dxw6a0saxQrzp7zRQ8hom4kAPW9twD4=)
2: sEET-ptT1wSBoWPjjCsZ2dSnAsI.roa (hash: f9CQV7WSxI4NmikFhldnkXK2NLP+yhZAq8+zP2dx5cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:fb:52:e6:2e:9f:c7:96:43:8e:89:37:75:60:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Validity
Not Before: Jun 14 20:01:00 2025 GMT
Not After : Jun 15 20:01:00 2025 GMT
Subject: CN=2bfcb7cc734834f9c138b574a9036389182ced94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2e:24:bf:c2:cc:82:b8:92:d0:c0:a6:ef:b2:
25:84:64:71:10:af:0a:d4:33:e4:fc:03:c0:a6:01:
73:42:a6:9c:50:47:be:31:0c:06:d2:3b:2e:f2:8e:
fe:04:1b:2e:05:e9:52:f6:00:fc:e3:f1:d6:67:91:
6c:92:a3:34:0f:93:b6:63:e4:48:51:b5:00:35:73:
5a:80:44:c3:41:a0:17:3f:28:b2:73:a4:e6:d8:08:
1f:0e:f5:ef:07:cd:ac:bf:99:0c:f6:74:dd:27:b8:
37:ad:83:22:b5:71:f9:14:65:34:51:88:a1:74:0a:
dd:f6:2b:06:e7:fa:e7:75:ed:63:77:03:fb:c8:5b:
fd:da:f4:5f:8b:fb:00:7c:a3:b3:b9:f0:14:a0:af:
a5:5d:5d:12:36:e0:77:70:30:8d:7e:5d:98:d3:cb:
4b:4e:04:ab:7d:6f:d5:30:5e:f0:40:4a:d9:d0:60:
b5:a0:f5:f1:03:bd:3a:2d:c7:80:69:52:64:e7:f0:
50:8a:9a:9e:aa:3a:0d:f0:3c:47:cb:c4:22:38:2b:
0b:a7:f6:f0:a6:7b:34:79:42:ba:6a:70:90:6b:f6:
63:f9:c6:8b:ae:af:d0:8e:26:da:19:98:0c:04:9b:
5a:ab:f4:bb:cc:2b:2a:df:ae:2a:8d:37:30:69:87:
27:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FC:B7:CC:73:48:34:F9:C1:38:B5:74:A9:03:63:89:18:2C:ED:94
X509v3 Authority Key Identifier:
keyid:AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:17:bc:20:91:96:99:cc:b2:f8:8f:db:ea:29:2c:62:e8:70:
68:f1:ae:16:b6:71:ba:dd:dc:a5:bf:eb:5d:d4:87:23:0d:34:
f5:c6:8b:50:0e:94:e9:39:60:ab:ee:2d:bb:37:25:a1:65:8b:
ff:71:90:9a:9a:9d:a1:03:69:c2:aa:ee:73:a4:7c:1a:5c:04:
4e:f7:97:ed:82:80:bc:af:8e:dd:ec:d8:37:e5:6b:bc:39:ab:
bd:35:24:57:00:38:16:fa:25:92:6a:5f:1d:04:5a:9a:ea:31:
2e:72:86:8a:f8:43:97:a7:11:ba:e7:75:0a:4b:6c:90:a0:c8:
7d:d6:38:27:b6:81:69:5e:58:09:02:1b:f7:a8:e2:07:86:b9:
aa:cd:6b:69:61:16:db:a0:64:c7:5f:f4:96:c4:4a:ef:ab:52:
17:a6:8e:38:59:dd:0e:5c:42:d3:3c:47:c2:2c:c8:2c:27:68:
a6:c0:19:3d:da:ba:f0:75:f6:6d:0e:86:91:f3:a8:bc:c4:3c:
80:d7:b0:b5:dd:38:e4:f5:57:a7:18:4f:d0:17:47:84:23:85:
7e:fc:78:8d:0d:8b:95:9f:00:f0:5b:17:e9:f8:f5:ac:61:c5:
01:f1:52:44:0e:19:09:d4:90:c1:f3:65:a2:87:33:45:27:5c:
e0:71:b8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:55:41 2025 by rpki-client