Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
File: qTS43sEoG8VDF8f-0OmsvHuXysc.mft (raw, json)
Hash identifier: m801gxI+qEvFqpsWtzrDkq0dIe6faiBuCEyjyPFdDFA=
Subject key identifier: 69:94:F3:A1:73:DD:38:D1:CD:51:0F:1A:47:C4:3E:41:41:D2:45:AA
Authority key identifier: A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
Certificate issuer: /CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Certificate serial: 01977D554A0244EBF02C6A8B1C8C7D8FB343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
Manifest number: 159D
Signing time: Tue 17 Jun 2025 10:00:30 +0000
Manifest this update: Tue 17 Jun 2025 10:00:30 +0000
Manifest next update: Wed 18 Jun 2025 10:00:30 +0000
Files and hashes: 1: nNICaFb7G3xV0xaZvY4tLFZeqjU.roa (hash: 5uzWSjZq0ATl8Nrn/VGx6JZA+5X6g81sHleJ+o0B2vM=)
2: qTS43sEoG8VDF8f-0OmsvHuXysc.crl (hash: dXOcKwV0vvEHZGx0fQWMKAbdQjxdet5RRqCItPmOHQE=)
3: vlECbF8HkBG6WpBhMBZnOl_AraI.roa (hash: 3UR9pQsXBE1n+38LaDwJGSYsS95ZptnvsHsDatSDo+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:55:4a:02:44:eb:f0:2c:6a:8b:1c:8c:7d:8f:b3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Validity
Not Before: Jun 17 10:00:30 2025 GMT
Not After : Jun 18 10:00:30 2025 GMT
Subject: CN=6994f3a173dd38d1cd510f1a47c43e4141d245aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:92:dd:58:01:1b:79:49:59:55:08:29:e4:d9:
2e:47:b3:5b:d1:df:52:f5:15:d2:39:f1:a4:dc:22:
22:92:07:79:00:28:93:6c:2d:66:40:2f:66:7b:e5:
72:1a:41:cc:d3:fd:53:86:b7:ab:e4:c8:5b:6c:98:
34:14:76:43:a2:f1:5a:99:d2:a5:2f:10:a1:15:08:
ed:2f:7d:41:1a:4d:51:7d:e6:d6:0c:18:ef:f6:30:
36:05:02:86:d3:98:dc:8d:44:1b:54:31:6e:ff:ac:
f0:86:12:84:85:45:fe:31:81:3c:4e:ca:ff:94:a8:
60:69:fb:f8:45:0b:36:9b:ca:d0:d2:6c:0f:e8:9f:
3b:a7:f3:6e:46:a9:58:26:d9:1b:66:32:41:54:6f:
12:10:c8:9f:8d:2c:76:58:b9:1b:27:cd:c1:7a:38:
16:39:d5:9c:4a:23:fc:c9:6c:67:46:27:17:76:c1:
33:5c:50:a9:cb:f1:0f:5d:6d:09:5f:fd:ec:0a:04:
d1:de:36:03:a8:6f:6e:81:ee:0e:89:55:c7:e3:8b:
12:0d:b3:96:4e:4e:36:a9:12:d9:23:d5:1d:0a:57:
b5:42:2c:be:0e:5c:39:95:18:97:92:b2:7b:9c:55:
32:ce:da:27:5d:14:48:64:f9:32:9e:37:ef:8a:f2:
50:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:94:F3:A1:73:DD:38:D1:CD:51:0F:1A:47:C4:3E:41:41:D2:45:AA
X509v3 Authority Key Identifier:
keyid:A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:20:b0:ec:bd:fd:5b:27:05:bf:ab:1f:2e:a0:63:1c:78:70:
e6:fe:d6:9f:e0:46:21:44:bc:d3:bb:20:56:b0:04:f3:de:21:
bf:10:0a:ed:46:29:40:cc:4b:25:36:0c:e9:01:05:80:83:35:
89:78:6a:fc:2c:2b:20:89:e9:29:05:8d:ba:62:6d:6f:1a:c6:
15:fc:c9:14:2a:f8:01:5e:e3:44:97:aa:5d:26:69:6b:e1:50:
e1:dc:ea:7b:72:92:cd:d0:50:fb:cc:32:d6:c2:95:09:54:19:
3c:7d:6b:04:12:63:71:f1:14:4c:d3:ea:16:84:59:f5:b4:10:
b6:25:0b:5c:ac:d9:9f:1c:f5:73:1c:39:ef:d7:c0:25:01:69:
82:6d:43:84:a0:1c:70:99:ab:e5:4a:25:67:06:ac:9c:c8:31:
c4:57:ca:fc:04:45:b3:6b:76:25:10:38:7e:84:2a:82:e3:a6:
7f:29:2a:db:13:15:ca:db:92:8c:25:f1:77:57:8e:bb:95:d8:
f3:87:b5:aa:d8:f4:f5:72:16:49:0c:ed:71:4d:96:7c:e6:ca:
08:7d:db:9d:15:13:e8:33:a7:f5:c6:b4:ad:23:29:3d:a0:c7:
1f:35:e1:e1:c9:71:42:71:88:5b:e3:09:d6:ca:22:e7:8c:9c:
42:c6:87:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:02:45 2025 by rpki-client