Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
File: _QxrK9KdMWhIfJ7F_eTD_ELZz74.mft (raw, json)
Hash identifier: BVOttJf8IqW4QXj+j19nklOvAiRHeLlCXow5R1RQE8Y=
Subject key identifier: FF:20:51:84:45:12:AA:CD:7F:54:EC:C8:CE:CC:26:0D:2B:FA:84:38
Authority key identifier: FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
Certificate issuer: /CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Certificate serial: 0197684DDA457DCECB7AA80AF6D009B2FA23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
Manifest number: 10BB
Signing time: Fri 13 Jun 2025 08:00:22 +0000
Manifest this update: Fri 13 Jun 2025 08:00:22 +0000
Manifest next update: Sat 14 Jun 2025 08:00:22 +0000
Files and hashes: 1: 1-Ofv8tDBMWs_4Hbhr7lMN_HF2TI.roa (hash: uH/td80fED56QPX1k1oOVphRVZ11UL29yzqyURnsYnc=)
2: _QxrK9KdMWhIfJ7F_eTD_ELZz74.crl (hash: fNvVA6VCdRYQwmGCq6il3sQY9RuZ17qTNoRE8om88UI=)
3: ptc21Pv_RMZdbmNfwt1t43MswfA.roa (hash: mrzhJeNsIe6my5EK8oo2DkozZxDWWdzOh94g4W2m17U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4d:da:45:7d:ce:cb:7a:a8:0a:f6:d0:09:b2:fa:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Validity
Not Before: Jun 13 08:00:22 2025 GMT
Not After : Jun 14 08:00:22 2025 GMT
Subject: CN=ff2051844512aacd7f54ecc8cecc260d2bfa8438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b4:cb:b2:7b:82:82:05:55:20:e1:09:48:ec:
c6:a5:b1:45:0d:2a:b8:a8:a4:6d:2f:cc:30:46:ab:
dc:60:c4:1b:f6:9b:b4:50:94:6f:19:72:a9:b2:4a:
3c:32:85:19:4b:7b:a3:62:70:62:8c:ab:d4:62:0d:
9e:16:83:ba:ec:05:5d:29:83:b9:f2:d3:29:d6:0c:
8a:8f:9a:20:19:28:89:cc:ae:af:1a:6f:62:c1:d6:
7d:64:2d:f2:95:52:22:b4:da:20:68:7b:de:83:68:
28:8a:de:43:2f:d8:6f:21:ba:fa:4a:e4:29:73:ef:
18:0f:0a:6c:82:b9:e5:5c:ff:69:37:e1:6b:ae:ff:
4f:40:94:be:ef:0d:89:4b:49:80:4b:4a:8c:8f:19:
d1:a8:0e:bf:90:d3:14:c8:27:35:8a:10:fc:c4:a7:
6b:8f:7f:d4:14:f8:8b:35:6d:79:b2:f2:f1:c7:dd:
54:ac:dc:47:fe:9b:51:bf:ba:13:07:8d:af:93:36:
22:aa:d0:1f:5d:af:73:c9:d1:33:ed:93:00:0c:32:
f2:c3:05:4e:4b:37:61:df:c6:95:53:80:12:c8:17:
f0:c2:ec:2e:b8:98:4a:8d:0e:06:d6:43:39:c3:79:
88:dc:ae:c5:10:12:4d:37:26:f0:96:71:d3:60:9d:
3e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:20:51:84:45:12:AA:CD:7F:54:EC:C8:CE:CC:26:0D:2B:FA:84:38
X509v3 Authority Key Identifier:
keyid:FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:44:cd:5d:97:76:17:76:54:d0:ed:0d:4c:86:48:b7:93:df:
18:fa:80:62:89:46:e3:a4:3f:a7:4e:ec:98:b7:ef:db:6a:2d:
6c:4d:33:66:7f:c5:99:76:a9:ad:3d:6c:3f:f1:1e:d0:10:e4:
30:62:3a:bf:5e:67:fc:9f:64:eb:69:59:05:54:02:cb:5f:9c:
eb:1a:e8:18:b0:b8:25:59:0d:d6:37:fa:93:d1:7e:0d:f3:ef:
3f:7f:ab:4c:2b:4f:78:f1:88:18:2d:21:38:11:a0:47:fa:16:
4b:f7:66:e4:07:2d:0e:0f:05:65:e5:c2:88:14:46:20:be:ef:
24:99:e6:de:0e:05:3e:56:8d:53:4b:30:4f:e7:1c:ad:54:b2:
65:dd:70:74:c6:21:34:6d:08:f7:a7:33:c7:b7:dc:a1:ce:40:
db:f0:34:d0:c9:af:0d:eb:11:ec:9c:88:97:c2:32:33:f2:37:
b6:a4:91:6e:e8:37:79:09:54:65:c7:15:a9:25:55:38:b4:1b:
79:be:13:e2:69:62:65:ff:56:98:ca:df:52:4f:85:36:43:0d:
d9:cc:27:1e:35:b4:cf:10:d2:c5:1c:56:cc:4e:c1:c6:50:07:
fe:67:bf:53:06:4d:57:7a:90:61:ac:e8:7e:9b:da:0c:11:87:
80:4f:3e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:04 2025 by rpki-client