Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
File: qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft (raw, json)
Hash identifier: sZwvIOJZ0ryv2GKzVlLayONqF0OmgIwvUzWII4NKS8E=
Subject key identifier: C2:31:CB:C7:C9:0E:CA:AE:86:23:6B:E7:0B:B4:19:B7:B6:50:79:10
Authority key identifier: A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
Certificate issuer: /CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Certificate serial: 01977609EB4F0C82F85C0B73122A74DA05FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
Manifest number: 0AD3
Signing time: Mon 16 Jun 2025 00:00:50 +0000
Manifest this update: Mon 16 Jun 2025 00:00:50 +0000
Manifest next update: Tue 17 Jun 2025 00:00:50 +0000
Files and hashes: 1: eZOZdw0xvypBF51rN4RfpY5h6vA.roa (hash: Rrqkszl7rnzrAJTcRtFLjvZXJPc9ZovjcSYFWUvutzY=)
2: hefvQQC5HBlbQ-EPV5xNwJ9mr8s.roa (hash: Ud9jnh2NMlpw3d8NsGfrdGK8oljkEFrFbqnJTHG6eJE=)
3: qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl (hash: SigRvT5CvKl4Jn6u/bRD08MBLrQzV114l9SQM6+2scU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 00:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:09:eb:4f:0c:82:f8:5c:0b:73:12:2a:74:da:05:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Validity
Not Before: Jun 16 00:00:50 2025 GMT
Not After : Jun 17 00:00:50 2025 GMT
Subject: CN=c231cbc7c90ecaae86236be70bb419b7b6507910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e3:be:c3:a8:68:5e:bf:45:e7:ce:38:0e:51:
a4:36:b9:fe:23:ec:49:b2:f9:5b:f0:45:6c:fb:23:
88:dc:9f:cc:5b:80:09:03:57:14:92:82:ff:ad:58:
4d:26:27:70:1a:db:b8:a8:7e:f8:5a:01:d7:0c:e1:
65:ff:40:9a:df:a3:de:26:ff:f0:3c:1e:02:34:15:
8c:5a:40:2b:6d:39:c4:7c:ba:b9:bc:d1:03:06:a6:
8f:88:bc:1b:fe:35:17:13:95:c9:06:d5:f9:c1:75:
88:84:bb:a6:e3:8a:21:46:f2:14:37:cb:8c:73:43:
a9:53:eb:05:cf:37:f6:3f:06:37:0c:86:1c:26:47:
5a:b7:4a:3a:6f:39:33:e2:8f:c1:2f:60:bc:20:70:
20:1c:43:4a:ff:db:da:6d:ed:1d:56:3d:19:38:af:
87:b6:0e:78:5a:29:31:91:f2:68:09:80:d7:86:4d:
cf:0d:2a:c2:ad:11:76:07:a0:b0:34:00:e2:a5:e5:
35:15:50:9a:8a:5c:46:90:a2:a5:75:f8:f6:0d:06:
45:16:ec:75:8c:33:7a:02:48:17:3b:7a:c9:11:fe:
16:5f:36:5c:0e:35:f3:4f:fa:e8:5f:da:4c:c9:31:
10:85:8c:b2:a3:20:a6:9b:71:47:44:18:d7:61:0a:
4a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:31:CB:C7:C9:0E:CA:AE:86:23:6B:E7:0B:B4:19:B7:B6:50:79:10
X509v3 Authority Key Identifier:
keyid:A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:53:f5:35:c4:c7:21:f6:b4:9c:ab:1c:2c:17:2c:77:3a:0b:
a3:30:a3:45:0c:f3:f4:be:70:41:c9:ab:33:5d:9f:6e:3e:c3:
df:6c:6e:28:4b:10:99:13:e8:ea:94:92:36:aa:92:39:c8:e2:
bb:42:53:de:67:44:70:53:6a:19:46:42:30:7a:35:29:bb:82:
a7:d1:33:c6:90:f8:25:0f:8e:e6:04:3e:71:62:ad:b8:bb:0f:
95:82:31:b0:0f:36:8b:91:69:03:75:51:c5:a1:36:0e:d9:1d:
5b:dc:31:ff:e5:20:94:9e:70:34:67:e6:16:5f:d8:ae:c0:3a:
70:d9:2e:03:2b:ba:c6:fe:a4:4a:98:c6:b0:68:a9:79:19:7a:
d1:63:61:f3:89:5c:65:16:ed:d2:f2:d5:11:c0:78:8a:b3:c4:
ff:fb:e2:83:fc:ae:7f:e7:e6:b4:82:d4:7c:a9:5f:1b:ee:1f:
f7:2a:68:20:c4:3c:94:38:89:ff:64:9e:7a:dd:39:be:09:13:
3d:7c:fd:56:3c:aa:48:9e:a5:16:03:4e:2e:7c:80:bf:cf:f4:
73:cc:8f:78:8a:ab:94:d3:41:61:f1:f7:ac:a2:6b:26:d6:c8:
6a:34:4f:2d:28:fe:b3:47:60:c9:c9:fa:69:64:81:ff:82:80:
fd:a4:99:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:02:04 2025 by rpki-client