Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
File: qQYfL0mm16-epna60D3xzi9QJg0.mft (raw, json)
Hash identifier: q2Vxqj+/M4oCEROwWGUQvJ7NaTMn4QE0IW3EYG1g3yA=
Subject key identifier: 0A:AD:1E:D6:F4:C8:29:EA:B9:45:CB:6C:F1:F3:DC:7B:1A:58:65:FE
Authority key identifier: A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
Certificate issuer: /CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Certificate serial: 01976C9883A68EA5E2E7A8A7CC047C228EE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
Manifest number: 097F
Signing time: Sat 14 Jun 2025 04:00:23 +0000
Manifest this update: Sat 14 Jun 2025 04:00:23 +0000
Manifest next update: Sun 15 Jun 2025 04:00:23 +0000
Files and hashes: 1: hILMU0qMjMm6bmWNobLKh35z6fg.roa (hash: tRLWcg9XAdmGTHy58HB7PkQi1r29x3Hn5q5I5oWT1hs=)
2: qQYfL0mm16-epna60D3xzi9QJg0.crl (hash: KVy61MObmTswIodXEar1r7AEc/n3enwtQ9hY/9oec1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:83:a6:8e:a5:e2:e7:a8:a7:cc:04:7c:22:8e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Validity
Not Before: Jun 14 04:00:23 2025 GMT
Not After : Jun 15 04:00:23 2025 GMT
Subject: CN=0aad1ed6f4c829eab945cb6cf1f3dc7b1a5865fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ce:06:c1:d5:d5:4d:e9:38:bd:1f:18:68:18:
e3:fa:b4:6c:ff:4c:c1:2c:32:58:69:79:8d:05:92:
40:fb:f3:a4:89:28:20:7e:75:15:8e:c3:aa:51:91:
f6:1f:82:d8:83:39:86:69:de:a3:47:73:d6:73:71:
a6:2a:1b:d9:da:01:0b:f5:62:4f:50:88:c4:62:71:
d3:4b:b1:ca:3d:4b:be:9f:9b:8a:ac:0e:57:b8:66:
3c:52:46:13:0c:86:71:8e:e4:b5:d9:c7:45:26:ca:
29:41:36:b9:ad:f5:65:0f:2b:6d:af:18:50:10:97:
32:a9:7a:e1:40:c2:1d:59:e5:72:b7:9d:cb:f7:30:
3e:dd:6e:96:23:c9:fe:20:03:aa:6c:be:32:57:73:
e0:ed:5c:c0:94:61:f9:1f:f2:48:57:87:2b:f9:3c:
fa:12:14:60:0e:f5:da:85:7e:42:a2:2b:8e:ad:35:
6c:86:72:c0:94:06:cf:47:1f:02:51:9f:83:dd:ea:
82:f9:d8:c9:f4:84:86:49:fc:77:f9:b3:50:5c:94:
d2:55:5c:59:33:f4:08:ac:c4:b5:1c:c9:96:34:af:
70:e8:b3:06:c1:5b:5b:c9:66:d2:1d:5b:c8:a9:83:
83:a5:0e:af:29:3f:58:88:49:4f:d8:44:75:de:9c:
0d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:AD:1E:D6:F4:C8:29:EA:B9:45:CB:6C:F1:F3:DC:7B:1A:58:65:FE
X509v3 Authority Key Identifier:
keyid:A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:eb:ae:22:9b:4b:47:53:08:69:5b:a9:70:7e:28:09:af:80:
5b:57:2a:bb:33:98:66:40:f9:79:7e:96:36:a6:4a:3e:a3:09:
69:31:e8:46:45:1a:b1:8b:d6:a2:bd:fc:7b:76:d2:d9:ca:ca:
93:0a:a1:e1:d6:d3:82:aa:a6:aa:5a:71:e5:38:50:ef:5c:8a:
3d:67:62:92:f9:4c:25:12:fb:4b:4d:b2:4c:2b:c2:43:73:da:
9e:31:d0:74:5e:93:66:cb:39:9c:cb:bf:2a:24:ed:95:b9:94:
b2:0c:d6:aa:0f:cc:b3:62:c8:26:dc:3a:fc:5d:6f:91:13:d9:
9b:da:a6:34:bb:f8:42:c3:92:cc:5b:6b:be:b3:16:ea:9f:76:
3f:e1:f2:4e:51:67:b7:9a:e5:7c:c5:21:18:c4:24:57:c5:bf:
5c:06:bd:5c:c5:fe:c9:62:78:70:a5:37:bb:0c:e4:6e:f7:3e:
13:59:49:8c:f2:15:3f:bc:27:7f:ef:23:e3:96:9a:0f:e8:01:
27:89:b3:5e:94:0a:fd:02:fa:a9:36:0f:f0:c0:6d:80:33:1f:
c6:cb:37:40:61:ad:5e:02:32:3d:89:9d:17:83:ab:8e:db:a6:
c6:e5:07:35:36:97:12:99:d7:5c:31:1b:f3:c4:a1:f2:8f:e1:
ec:d6:c8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:01:27 2025 by rpki-client