Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
File: qBfHRT83fpy2-uXIk8Bno-HTUUU.mft (raw, json)
Hash identifier: vJl+3ZryruthL00wUZGD+m5+gjfk1d1muSKPXS+BWCo=
Subject key identifier: EE:A1:73:44:50:49:F3:3F:A2:13:4B:D7:5A:BA:07:C4:72:3B:61:BB
Authority key identifier: A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
Certificate issuer: /CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Certificate serial: 019769613C1FC23723A38BE6B5A67B64E21E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
Manifest number: 0DAE
Signing time: Fri 13 Jun 2025 13:01:09 +0000
Manifest this update: Fri 13 Jun 2025 13:01:09 +0000
Manifest next update: Sat 14 Jun 2025 13:01:09 +0000
Files and hashes: 1: VyO46YpT23BvljW9CwqKp8OCvAA.roa (hash: iOrTV9PCcKDnK4SEk9hES8b1JaLYOrEkHnO7HcHHTeE=)
2: qBfHRT83fpy2-uXIk8Bno-HTUUU.crl (hash: x0upvjs8IRyn1JkIGXM7FM5cwIYecKHKzNMCt298oak=)
3: zyla5TQUsQzSUxLneRGH2oWP4QY.roa (hash: Nh/0bB0eQrdPHOZC7+V6EmhOBm+BxF8VlJbCNYPi958=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:3c:1f:c2:37:23:a3:8b:e6:b5:a6:7b:64:e2:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Validity
Not Before: Jun 13 13:01:09 2025 GMT
Not After : Jun 14 13:01:09 2025 GMT
Subject: CN=eea173445049f33fa2134bd75aba07c4723b61bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:41:04:5b:a2:bd:0d:57:be:cf:1c:71:7c:4d:
a8:fe:9c:c2:ad:57:5e:a1:66:c3:c7:18:b0:c0:77:
7e:48:fc:56:81:d7:a3:43:16:45:0c:d1:7d:07:eb:
9c:c9:28:38:19:fb:8a:68:9e:87:ea:5a:2e:63:c7:
5a:ee:f7:be:53:76:48:83:8d:85:74:04:62:32:a3:
fa:f0:5c:af:85:a7:98:6f:2e:33:35:c4:8d:e6:bc:
c1:3a:d0:12:e9:3d:52:bc:82:39:d6:6d:3b:9b:41:
91:2a:0d:6f:e8:9a:3d:7a:e4:a6:d0:88:23:a3:cb:
8a:fb:49:e6:e6:d7:57:09:8e:4e:65:d7:75:64:da:
2f:4d:85:78:7e:c7:8b:77:19:27:7f:13:d6:f1:d3:
28:74:25:2d:63:80:74:00:e0:e5:c9:6a:a8:5d:76:
f9:56:90:4c:84:6e:5d:2a:2a:5a:35:ea:48:aa:6d:
93:71:1b:0e:4f:f6:f5:97:fa:56:4d:31:4b:34:f0:
ca:d6:af:3b:21:40:89:2d:b3:c4:b6:64:23:02:e3:
51:f7:f8:cb:49:c7:b6:77:2b:c1:dc:57:57:91:04:
3c:49:ac:cb:d1:27:72:4d:ae:2b:ec:35:a9:18:45:
0c:73:d9:19:72:a0:3d:1f:1c:ba:9a:a0:67:a8:51:
f7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A1:73:44:50:49:F3:3F:A2:13:4B:D7:5A:BA:07:C4:72:3B:61:BB
X509v3 Authority Key Identifier:
keyid:A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:43:12:d5:57:6e:d0:ee:ca:ba:f1:a1:2d:80:03:29:b2:21:
48:74:37:c6:b8:d8:52:d9:f0:b0:37:4a:b1:be:12:73:e8:d6:
74:fa:1f:e9:0b:b5:2f:da:3c:a1:01:a3:67:dd:36:52:05:89:
a9:49:57:b7:60:fc:bc:57:71:c5:12:c0:b7:9c:82:99:f0:c4:
14:02:c6:48:80:66:7f:96:e6:9b:ea:7a:8a:3f:48:fd:69:3f:
f0:65:4a:90:a7:df:e5:18:49:8f:d2:f8:99:93:32:ae:74:0a:
03:12:9b:a7:e7:a1:8a:db:a5:72:9d:78:a9:f1:a3:9b:bb:47:
b0:26:0d:90:88:62:44:92:be:6f:1a:7e:8a:32:77:31:3b:3e:
86:17:83:d1:8f:7e:24:75:71:8a:83:26:6b:ba:45:fd:17:51:
97:5a:de:0e:84:f2:cc:7d:94:3b:4e:b9:ad:47:8d:54:f7:57:
d5:43:3c:56:20:ba:00:d2:b3:d8:24:33:ee:e8:2b:fe:86:84:
98:fc:cb:f0:c8:1f:fb:47:f1:5b:39:67:ba:e9:78:c5:59:7f:
91:4c:57:b9:5e:43:41:29:b5:43:5d:b1:29:24:e1:d4:d9:dc:
09:33:e4:56:89:7d:fb:7f:58:f7:a7:23:00:76:d0:00:61:76:
63:62:a4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:16:34 2025 by rpki-client