Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
File: uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft (raw, json)
Hash identifier: BXxRQfOicPrM30Tb3aXh+Y1ZWYTc+c22Bj8tKP6vR7Q=
Subject key identifier: CF:8C:6D:57:CB:A8:52:50:C8:F9:48:9A:27:BB:2C:0F:AD:E5:48:A7
Authority key identifier: B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80
Certificate issuer: /CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
Certificate serial: 01976A05D9749D1B65568766C465EA52B0BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 16:00:57 +0000
Manifest this update: Fri 13 Jun 2025 16:00:57 +0000
Manifest next update: Sat 14 Jun 2025 16:00:57 +0000
Files and hashes: 1: 6KXLkC_cgd5ILMccrhh-m3RCwS8.roa (hash: Az+UEZWLV4uod4atp3pTmM4QksD0MTVrJp8g22f4T2Y=)
2: uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl (hash: Fc2pQRyiWrLMITieDc3k7NDBPzbsOeXs163cNO1D9nM=)
3: wCMVD4s-MzexAEYCNnm0u-lWVks.roa (hash: 1CzqXOjbHH5Z0NSEWz+9Qkw44w+rWwhDlrc+ZZXhbB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:d9:74:9d:1b:65:56:87:66:c4:65:ea:52:b0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
Validity
Not Before: Jun 13 16:00:57 2025 GMT
Not After : Jun 14 16:00:57 2025 GMT
Subject: CN=cf8c6d57cba85250c8f9489a27bb2c0fade548a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c3:79:e7:e8:44:45:29:21:75:7d:8d:e7:0f:
07:b6:0c:e2:bf:2c:61:a9:87:a2:9d:ae:3a:8e:01:
be:e5:c1:78:82:32:13:f9:e8:5a:82:fd:d1:32:11:
3e:42:44:28:69:d2:ba:27:51:62:1c:a8:1f:80:e7:
96:0d:2d:dd:62:ae:6a:65:e9:0f:01:70:aa:ba:d6:
2e:a3:9a:95:e0:07:38:da:e9:98:4b:e1:76:e4:01:
7b:55:e9:be:d5:28:a4:39:ec:22:cd:1a:33:13:8d:
31:e6:d3:e4:04:12:c9:28:b0:74:67:c5:19:40:da:
90:01:f2:ca:cb:c8:54:e5:c9:b5:33:21:f5:bb:c2:
bd:29:1e:20:16:44:67:be:a9:e2:fa:57:f8:10:70:
0e:db:28:1c:58:f2:67:ff:df:71:fd:60:99:7e:05:
fc:42:d9:63:30:9e:7e:ca:cc:a2:01:a8:cc:48:76:
2d:79:42:ba:4d:85:d2:68:93:4c:67:d7:14:ba:81:
20:d0:f8:57:6f:a9:cc:16:7e:84:d1:6f:30:2b:73:
49:59:8d:d6:7a:d3:fa:0e:a8:4f:de:25:7e:53:e2:
d2:9b:3d:7a:64:26:7f:de:3c:07:8c:35:d8:c4:73:
57:90:a9:7f:cf:d7:70:c0:04:d2:e5:2e:d8:8c:1b:
f4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8C:6D:57:CB:A8:52:50:C8:F9:48:9A:27:BB:2C:0F:AD:E5:48:A7
X509v3 Authority Key Identifier:
keyid:B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:14:83:50:30:09:87:32:75:58:14:7b:7d:a7:cf:b2:48:fb:
34:78:4a:d5:c9:cb:b0:42:69:6c:63:6b:c3:d0:ea:1f:b0:a0:
ae:05:b2:fc:6f:e4:e6:bb:19:f4:1b:55:b6:7e:22:d1:96:f6:
f4:ca:54:d8:9c:cc:12:6e:d3:12:5d:47:94:e5:19:5c:4d:f8:
b0:ee:82:2a:18:21:7c:15:53:0c:fd:c0:6b:70:30:c0:dc:2b:
1b:e9:c0:f0:d2:8c:fe:c9:f6:3a:99:d2:c2:e7:55:99:49:eb:
9d:3f:14:4a:88:91:28:cf:1f:28:4b:79:41:8f:37:39:36:99:
97:29:da:cd:c8:51:67:a1:2b:0e:64:b8:89:0c:67:a0:a5:4a:
14:55:b2:35:be:78:ce:c6:59:2b:24:43:d1:32:48:d0:42:19:
3f:a3:8a:32:a5:2e:2c:bb:89:5d:39:8c:2c:6d:01:2a:de:49:
51:91:be:39:fd:46:b3:b3:c2:ec:af:e2:3b:e7:a9:9b:7a:6f:
43:af:2b:d3:00:98:ea:a4:63:58:57:6b:92:f0:cb:62:44:93:
0f:22:7b:3c:bf:88:2c:69:7e:73:83:a7:58:e4:1d:30:a3:b6:
e4:98:41:66:9a:17:dd:a8:f9:9d:79:ce:09:f9:54:1f:78:86:
18:fd:87:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:01:01 2025 by rpki-client