Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
File: q0ZoYAiowQHoTqh4MYrljrcc7II.mft (raw, json)
Hash identifier: BV0j/2ywXJYW+Qx79oYAL54pZvBfcyDWvyr5q2P4pAM=
Subject key identifier: 68:00:BE:C1:49:89:2E:4E:4E:5E:17:F6:A4:9E:E6:1E:31:D4:77:F2
Authority key identifier: AB:46:68:60:08:A8:C1:01:E8:4E:A8:78:31:8A:E5:8E:B7:1C:EC:82
Certificate issuer: /CN=ab46686008a8c101e84ea878318ae58eb71cec82
Certificate serial: 01976C2A99D703841DDD96CBDE4072C09E09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
Manifest number: 0C6F
Signing time: Sat 14 Jun 2025 02:00:20 +0000
Manifest this update: Sat 14 Jun 2025 02:00:20 +0000
Manifest next update: Sun 15 Jun 2025 02:00:20 +0000
Files and hashes: 1: EMySEwRrF4bq2LUNRJSbJLGHINA.roa (hash: DrdEgmoEeO2eKUnBVDonWL4YHyVw8zsXK3sYKFvyya8=)
2: q0ZoYAiowQHoTqh4MYrljrcc7II.crl (hash: /HPfKkhBjJZWZUYpGD/f1FvLNPAyT68Vvsq47saIOng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:99:d7:03:84:1d:dd:96:cb:de:40:72:c0:9e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab46686008a8c101e84ea878318ae58eb71cec82
Validity
Not Before: Jun 14 02:00:20 2025 GMT
Not After : Jun 15 02:00:20 2025 GMT
Subject: CN=6800bec149892e4e4e5e17f6a49ee61e31d477f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2f:09:76:3e:6b:cc:a2:d0:ce:08:b7:1d:83:
8f:e5:ee:e3:fa:69:ab:bb:09:7b:b6:e8:10:16:9c:
f9:b5:dd:fe:fb:d8:4f:1d:64:a4:53:48:f0:c7:ff:
d9:f1:45:e2:36:e6:b5:30:64:2c:96:d4:b3:9a:df:
21:8f:93:47:e3:31:ce:d9:10:db:c2:57:ad:cb:11:
b5:ed:e0:9e:d6:b3:74:f5:f7:7e:13:84:c4:55:88:
01:83:fe:d4:09:d7:db:b7:49:1d:57:64:a4:b0:60:
aa:72:d4:56:19:3e:5e:c8:5c:f5:9a:0e:7e:7a:d1:
b6:65:fd:e3:ac:53:d0:d7:cf:8d:b0:ee:73:33:6c:
c5:f6:9c:5e:78:49:5c:9c:1e:24:08:a9:d1:d4:a9:
cc:b2:82:58:be:b7:0b:ee:57:87:28:be:cf:10:dc:
14:4e:4a:79:a0:fa:b1:62:bd:a8:4d:cf:26:be:0f:
55:6c:0c:2e:b2:de:2f:52:15:43:24:27:c5:54:ab:
75:11:ee:c7:2d:7d:65:65:db:56:6c:7d:06:74:21:
f8:b8:2b:07:d6:0d:8b:fd:93:fa:9f:1d:c7:67:6e:
42:53:bb:13:11:f5:15:79:f2:f0:13:b3:3a:e9:d2:
95:e8:9b:71:26:47:ec:2b:88:8d:eb:ed:23:b9:7f:
be:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:00:BE:C1:49:89:2E:4E:4E:5E:17:F6:A4:9E:E6:1E:31:D4:77:F2
X509v3 Authority Key Identifier:
keyid:AB:46:68:60:08:A8:C1:01:E8:4E:A8:78:31:8A:E5:8E:B7:1C:EC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:82:7a:b8:60:d3:a8:71:d5:24:bc:2f:c5:61:a6:87:3c:68:
34:d8:49:6b:7f:17:93:01:15:20:12:d9:86:10:fa:02:ad:e9:
0a:9c:3c:3a:1b:99:f8:97:22:b3:e6:f3:96:27:3e:5b:4f:b0:
72:af:24:0d:77:46:6b:6f:71:10:91:1d:aa:17:90:bc:2f:1b:
f4:87:6e:cc:b4:bb:83:9e:b9:bf:d5:ab:10:ab:e3:99:69:d2:
c0:41:1f:79:87:39:00:a5:f4:aa:d2:71:25:73:ef:ba:97:98:
41:b7:1a:0d:08:97:95:42:02:2b:c0:3b:b7:74:3c:32:63:1e:
94:e7:9f:b3:4f:41:ba:60:a8:b8:04:8e:7c:32:d2:16:0d:f9:
16:7c:0b:3b:ec:15:68:3a:d2:d0:96:fd:c1:13:88:76:9e:0b:
86:6b:e9:6a:7b:5e:b5:29:a1:00:42:16:f8:85:60:ab:3e:0c:
0e:17:19:bc:c0:5f:e2:b0:33:f6:27:77:1c:93:08:1b:f1:1f:
d2:dc:a0:ea:ef:ed:c9:2b:0e:1c:92:3e:b5:1a:15:7e:a8:bc:
ad:71:31:1b:d6:15:5d:a0:6c:25:3b:83:11:de:83:ec:83:48:
29:27:f5:1e:e8:c3:12:b2:b9:b6:ae:e7:c1:a7:61:74:58:35:
65:e7:5c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:21:27 2025 by rpki-client