Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
File: qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft (raw, json)
Hash identifier: 1o32s7MMLrmpSvNh7Xy5Q9gmpQIFeIvlV2Y45fsM6TY=
Subject key identifier: 80:59:24:6E:40:69:4E:19:93:C7:DB:EA:19:91:86:67:ED:28:D8:20
Authority key identifier: AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
Certificate issuer: /CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Certificate serial: 019770AC8514434FCAC5FD9DF9F52F32E6D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 23:00:43 +0000
Manifest this update: Sat 14 Jun 2025 23:00:43 +0000
Manifest next update: Sun 15 Jun 2025 23:00:43 +0000
Files and hashes: 1: 6IkTOlXjuiMiUAcYz6JmNLyjzkI.roa (hash: lvYkGWBMeYPfRVhHecKPB+lCXAgyiJ169VcA0wekGsU=)
2: e4TuQp4c2N02mdWdlxAx2GM5rFg.roa (hash: TkgW2WEclpl44YPmskP1q4vEinXMPrmbVI0ndJ9d/ec=)
3: qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl (hash: V3UMIB8U0MKbwjdTLlgndtot9l4aQfLywc97nrG79n8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:85:14:43:4f:ca:c5:fd:9d:f9:f5:2f:32:e6:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Validity
Not Before: Jun 14 23:00:43 2025 GMT
Not After : Jun 15 23:00:43 2025 GMT
Subject: CN=8059246e40694e1993c7dbea19918667ed28d820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5b:6e:ae:47:78:3d:b3:2f:7b:a6:fb:ef:af:
da:b4:42:ff:e8:3f:6c:7b:f6:86:c1:5e:e4:3e:00:
4f:3f:b7:01:08:3e:ca:48:c1:ba:48:0f:bf:15:fa:
11:77:6e:6f:43:de:ec:18:97:16:db:51:2f:40:0f:
5e:64:dc:8a:3d:5f:06:b5:49:cc:d9:39:33:66:5d:
da:5a:3c:a7:35:9c:f1:22:51:05:41:49:04:d2:9e:
ff:73:91:88:7a:a2:b9:d5:62:2b:77:b2:1e:28:9f:
c0:bb:44:06:9b:bc:08:f4:12:2e:3e:f0:d7:93:ed:
92:71:78:31:0d:c0:eb:0a:c5:94:8b:13:77:f4:5d:
b6:29:1f:3b:cb:0f:b6:34:33:45:c4:69:46:9e:c9:
5d:a4:40:18:cf:a2:e6:30:c3:9b:0c:f3:11:19:2e:
c4:d2:35:94:4e:7d:f2:e9:ab:82:d9:23:6f:8b:a5:
85:3c:5c:6c:32:e4:6f:74:bc:2e:2a:81:fe:34:73:
1c:eb:a1:58:c9:fc:fe:78:b4:55:24:04:3a:1b:85:
9f:d8:3f:cc:76:3c:3e:1d:36:69:ce:4a:34:47:85:
51:96:f9:2e:a2:29:ad:95:20:26:f0:24:8f:de:53:
51:41:60:f7:f6:40:e9:bd:ea:bf:90:d3:6e:2c:39:
2c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:59:24:6E:40:69:4E:19:93:C7:DB:EA:19:91:86:67:ED:28:D8:20
X509v3 Authority Key Identifier:
keyid:AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c7:4c:8d:5e:15:4b:26:04:7d:cb:b0:cf:cf:ef:58:03:c1:
d8:42:34:0e:ae:4d:bc:d9:fe:70:be:7b:a9:53:cd:f0:8f:94:
f2:0c:d2:74:25:70:9f:09:84:e4:23:5f:33:c3:6d:ee:32:54:
fa:61:1d:7f:00:75:d5:36:71:f9:eb:db:4a:75:90:b3:0f:c7:
79:39:49:e4:b4:f6:7c:f1:90:e1:83:1b:f3:0d:fd:b2:06:85:
04:45:40:a8:a5:c7:a7:dc:17:48:ec:24:c2:d3:1c:15:69:58:
06:7c:69:6c:a1:b7:f6:ef:bf:43:81:4f:b2:c6:d6:38:4c:d6:
f3:d3:2a:a3:29:a9:23:65:32:18:23:23:36:0e:fd:c1:e7:e7:
69:3c:0c:73:16:e5:11:26:d1:ab:43:2b:ff:19:e0:92:29:05:
eb:bd:e2:4d:32:f8:5a:c4:94:65:65:67:5f:41:00:44:e4:8b:
26:54:72:f7:53:df:b4:44:eb:60:50:1e:f9:44:90:53:83:db:
1e:7d:98:5f:53:ed:9d:79:dc:c6:11:40:f6:5e:60:59:d6:e1:
90:bb:8f:8a:42:f2:b8:ad:82:70:19:fc:b1:16:4e:a7:e0:6c:
19:6f:f2:fd:e6:f0:07:63:16:07:d2:c8:ed:94:4f:fb:43:3e:
7b:84:ce:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:10:20 2025 by rpki-client