Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
File: qCoCPr2xLpceeocp2Cankkz36DI.mft (raw, json)
Hash identifier: cW8sLJr/TbDUyaB8ftKal4L+rypkSP0Jd7fBolEPWho=
Subject key identifier: 12:1F:8D:3E:C8:76:AD:72:75:BE:35:59:AA:03:1E:73:15:EC:35:1A
Authority key identifier: A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32
Certificate issuer: /CN=a82a023ebdb12e971e7a8729d826a7924cf7e832
Certificate serial: 01976A0613B6FE26A89F5A2B2F755D40298C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
Manifest number: 0AAA
Signing time: Fri 13 Jun 2025 16:01:12 +0000
Manifest this update: Fri 13 Jun 2025 16:01:12 +0000
Manifest next update: Sat 14 Jun 2025 16:01:12 +0000
Files and hashes: 1: 0mOwovSQfaOTpOjMePlA1vJyx3o.roa (hash: UKn/uBWWad1ow9KJDqJ57gBdSqtGNkm8IvDuZQii3FA=)
2: Rb-9REf4Ku4-CgLC6REjl5LjwmQ.roa (hash: cTHupzsbPAMMKa56v6BN9R2pDgzgt3AMXO4LKaMqhQw=)
3: qCoCPr2xLpceeocp2Cankkz36DI.crl (hash: IBygMz/ssBOj6yTfyEEe4r0gobAGq2hOutp1vBky7vU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:06:13:b6:fe:26:a8:9f:5a:2b:2f:75:5d:40:29:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82a023ebdb12e971e7a8729d826a7924cf7e832
Validity
Not Before: Jun 13 16:01:12 2025 GMT
Not After : Jun 14 16:01:12 2025 GMT
Subject: CN=121f8d3ec876ad7275be3559aa031e7315ec351a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:fa:a2:d5:e5:3a:0c:f7:4a:6b:bc:90:e4:da:
19:2e:7d:93:ab:df:d6:87:b8:30:25:e5:d7:30:fc:
73:19:55:18:1d:e5:7d:c0:13:1b:d0:1e:2f:7b:0d:
19:37:c6:07:1a:e2:cc:a7:b2:20:1d:ba:5f:bd:67:
5c:62:73:ea:78:7e:f9:bb:08:b0:7e:32:b8:f4:ed:
7e:de:47:f9:43:af:c0:25:fb:d1:f0:61:44:34:9d:
ec:03:5d:a5:c9:f9:cc:54:53:bd:12:52:5f:94:e7:
4c:89:9c:22:08:f2:00:c7:33:a7:35:0b:ad:f8:3d:
f0:93:8e:92:8c:5b:bb:83:b8:c4:d5:05:be:b7:f8:
89:ec:9b:df:69:fa:cf:18:bf:74:d7:e0:17:56:44:
e9:a6:83:6b:07:de:73:1d:35:70:f1:73:48:06:92:
2a:75:9f:a9:1b:e8:ec:b3:a8:00:16:c5:f2:13:c7:
73:24:e7:ab:11:12:41:3f:de:b5:3f:1f:66:31:7c:
81:8e:cd:c6:1f:01:51:ae:eb:1a:13:c1:e2:05:cb:
35:69:55:10:27:7d:09:bf:62:31:aa:fe:70:17:1e:
49:b3:e9:3c:bd:3a:33:56:6b:08:3f:ac:f5:e2:0e:
34:4d:c5:ab:bb:17:48:38:09:03:c5:fc:93:07:77:
e8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1F:8D:3E:C8:76:AD:72:75:BE:35:59:AA:03:1E:73:15:EC:35:1A
X509v3 Authority Key Identifier:
keyid:A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:e8:5b:cf:1a:77:c2:30:c4:7d:cc:bf:91:be:6f:a5:7b:7c:
9d:5e:50:03:6f:a5:ed:2b:80:bd:43:5a:55:0c:d4:64:96:85:
0c:c7:7a:56:74:20:f8:be:d4:b5:21:70:7e:c1:21:fa:2d:ff:
ad:d2:cb:07:59:06:82:9f:ed:dc:a2:9a:fe:89:e0:df:fa:42:
31:37:89:92:10:1b:82:97:03:43:8a:bc:05:82:b0:9c:28:5b:
73:58:e4:aa:d6:5c:df:23:c6:bf:47:8d:26:61:84:2b:fb:09:
1a:f5:0d:ab:78:15:a1:74:80:1e:4b:e3:67:86:5c:df:7a:45:
e7:ba:4b:53:76:57:30:da:39:1c:8f:bb:eb:c4:00:f8:7b:f6:
43:15:49:17:b1:8a:97:dc:4b:3b:35:ac:5a:9d:12:5e:97:10:
8e:ca:82:c1:f3:24:88:44:e2:cf:dc:97:f1:b0:f3:52:7b:c8:
0b:ee:c9:8a:04:c5:16:65:36:fa:36:2d:bd:a2:2f:b4:6b:1a:
86:3c:37:2c:38:66:57:3c:35:74:f1:b2:cc:cb:b0:de:62:d8:
24:bd:ef:80:59:99:1b:9b:29:40:43:ef:0e:7e:19:a3:90:7c:
3d:f9:7d:1e:7a:09:81:f2:27:a0:25:39:76:dc:be:4b:95:5f:
b2:f1:67:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:34:12 2025 by rpki-client