Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
File: r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft (raw, json)
Hash identifier: nlFK0m59sXb3VKkVTEEaS05JTcmFuL3l4j/KgKzxVZI=
Subject key identifier: 81:54:DE:C4:B7:6C:91:21:01:C1:1A:83:9D:DF:FD:ED:3A:0E:01:81
Authority key identifier: AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
Certificate issuer: /CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Certificate serial: 01976DE25FE438BD3904F425D9743F39043D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
Manifest number: 1284
Signing time: Sat 14 Jun 2025 10:00:41 +0000
Manifest this update: Sat 14 Jun 2025 10:00:41 +0000
Manifest next update: Sun 15 Jun 2025 10:00:41 +0000
Files and hashes: 1: KgttFz6IodgLZeLta7RLneUK6Ro.roa (hash: IYP5zin82ggYoVWQmz/dnK+iP1pdsQlzD5cbI7kYfRQ=)
2: T1_HIEmvBSvtxZPEKcCF4aZsCPs.roa (hash: 0CEooqGIOmFXehL8CMLN24SE73s+yk1wsCLjJu3HBUc=)
3: r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl (hash: 4H8egF5pe8/BTWfZz6nnbjwrtOEKume2hac+3lKVq7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:e2:5f:e4:38:bd:39:04:f4:25:d9:74:3f:39:04:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Validity
Not Before: Jun 14 10:00:41 2025 GMT
Not After : Jun 15 10:00:41 2025 GMT
Subject: CN=8154dec4b76c912101c11a839ddffded3a0e0181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e1:29:bd:be:9f:06:6b:07:5c:21:72:ec:15:
e7:2e:0f:e1:fc:0f:28:7e:47:33:75:1a:2b:08:c0:
76:fa:34:3d:7e:20:35:48:2a:cf:2e:be:e3:6b:83:
76:b1:64:05:a9:12:02:cf:b2:20:49:ec:a7:b9:ba:
74:30:fe:01:89:ac:1f:cf:9d:44:7d:96:53:ac:63:
e5:3d:f5:8e:fa:ca:34:8f:ec:d1:d7:24:37:15:a0:
9d:f4:17:f4:1d:4f:60:45:d0:16:e9:e6:77:87:8d:
8d:07:4d:ed:88:4b:1c:64:a2:e1:29:41:4c:fb:1f:
50:27:fd:f0:59:30:62:bf:8f:fc:f7:dc:d2:03:b6:
c7:65:82:f7:10:5e:0e:14:9d:c7:e1:f8:b6:a8:66:
8d:61:42:07:2d:ba:b0:2c:47:58:b4:45:f1:eb:a3:
d9:98:b9:63:dc:45:6c:4f:86:eb:f1:09:87:fa:19:
0a:51:0e:2a:7f:03:de:67:5c:a7:cb:3a:53:07:ca:
ad:f6:0d:d4:87:da:33:30:74:88:3d:b8:10:bb:ff:
42:6a:5b:40:a6:5f:2c:cb:45:21:79:5b:d2:67:6f:
aa:8c:b0:2b:6f:d5:cc:2a:48:47:c4:d4:e1:4b:b0:
77:f0:66:cf:dd:27:88:ea:20:3a:cc:6d:9c:3e:b8:
51:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:54:DE:C4:B7:6C:91:21:01:C1:1A:83:9D:DF:FD:ED:3A:0E:01:81
X509v3 Authority Key Identifier:
keyid:AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:1c:1b:a1:ef:1b:27:a7:d7:05:e9:eb:f4:58:c1:e2:c5:cb:
ed:64:28:b4:f0:40:1f:d6:0a:60:cb:fb:68:b7:82:82:65:5b:
f0:76:bd:9f:71:e0:f3:b1:99:7f:6b:af:e2:ed:73:4e:73:21:
a2:c9:20:6b:2e:71:5c:28:6e:86:f9:96:9b:3a:38:71:3a:af:
10:13:3b:6d:54:f8:89:db:71:86:ec:94:fa:43:c2:e6:b5:d1:
53:85:7b:ea:5f:8d:47:2c:9b:a2:88:d4:f5:da:8f:a9:d0:14:
34:b1:5e:6f:0e:a9:b1:8a:3a:e3:4f:d6:65:ef:f1:6e:ed:a7:
f1:21:08:5a:1f:8a:93:6a:f3:23:67:78:94:d0:94:f5:46:bf:
b1:77:49:bb:a6:ec:f7:d3:02:10:b9:2a:d0:f1:20:47:ef:e3:
75:c3:40:c2:83:60:bb:3a:97:a3:a5:38:f0:0d:40:69:76:56:
73:9e:13:ad:ba:78:93:10:90:14:fc:26:75:8c:d0:b7:29:1f:
7c:4b:b7:5e:f9:04:e4:34:ba:9e:2d:5b:5c:31:1d:45:5a:72:
50:3e:a4:48:44:0d:4f:a1:77:77:ef:5d:8c:2b:38:8e:d5:04:
d5:a7:cf:93:f1:58:ac:9b:4e:5b:84:4a:e1:da:9d:a1:1c:ab:
71:8d:dc:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:53:32 2025 by rpki-client