Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
File: qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft (raw, json)
Hash identifier: RQv+1k1gfGxQgjvRluY3N8ZAzwrL94O0sksFMDgO0rU=
Subject key identifier: A4:25:4D:A2:4E:F1:B0:E5:36:78:CD:98:C0:33:DE:0D:DB:63:12:E2
Authority key identifier: AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
Certificate issuer: /CN=aa8551e851e69db165c6c632af45f21715512939
Certificate serial: 01976EF54A2A0B94317BC4AF1C75773CC04C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
Manifest number: 135F
Signing time: Sat 14 Jun 2025 15:00:58 +0000
Manifest this update: Sat 14 Jun 2025 15:00:58 +0000
Manifest next update: Sun 15 Jun 2025 15:00:58 +0000
Files and hashes: 1: 1-3qrdz_tzhFoK7Ucjl6tCL0s2OM.roa (hash: kxTjIhZmXXDDNlqbd3Q2+gkjPCT2RJ+wWhOvQVmko/I=)
2: CvzVIxPE_Xl1M87JmAYQt0uyDD8.roa (hash: 2wAD/UrmgnStcRFk04oSlNoJEw3MlH57DosRki5ZylE=)
3: qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl (hash: effOz9m9vS+EDIW+bh0+W/DZMX6izQQlVrjcz6DQAyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f5:4a:2a:0b:94:31:7b:c4:af:1c:75:77:3c:c0:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8551e851e69db165c6c632af45f21715512939
Validity
Not Before: Jun 14 15:00:58 2025 GMT
Not After : Jun 15 15:00:58 2025 GMT
Subject: CN=a4254da24ef1b0e53678cd98c033de0ddb6312e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:78:5c:1c:c1:f7:b1:ec:d4:c4:7f:3b:1e:68:
f2:7f:ec:3f:dd:3c:fa:ab:95:06:eb:49:54:a2:fa:
e0:61:c5:f5:c6:99:1d:01:89:93:ef:31:0d:16:c3:
0c:d0:ee:aa:e1:0c:00:d8:2f:64:48:8c:9f:01:ef:
d3:a1:59:3b:b5:f5:67:76:50:b4:68:b8:85:19:0d:
49:bf:9e:90:7e:bb:15:99:a4:d3:61:d1:6a:7a:50:
a6:7c:c0:ad:1b:63:30:10:e2:56:58:16:02:99:2d:
8a:e8:17:93:ea:c4:5e:35:95:e7:70:d7:f1:c9:6b:
80:d7:37:9e:f6:3f:98:00:54:d1:85:ad:b1:fa:87:
1d:c4:d1:48:d3:c9:b8:36:c7:f6:7e:8e:f3:f3:5e:
47:a5:cc:26:27:c0:55:e9:86:2b:5e:c2:00:2f:a1:
b5:64:d1:c4:f9:2d:4b:15:29:0c:c2:a1:3d:ea:5b:
2f:21:51:cf:ce:8b:e1:db:04:68:22:e7:34:6d:a9:
f0:39:fb:4a:ee:e5:4b:16:72:26:89:5e:80:e8:ea:
4b:3e:c4:ca:da:c4:02:18:10:4a:ce:06:e0:66:2e:
92:95:17:e4:a4:3b:d4:5c:e9:4b:ea:1d:dd:ce:27:
dd:24:96:26:77:e8:3b:19:d2:f3:ae:e2:83:26:86:
c4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:25:4D:A2:4E:F1:B0:E5:36:78:CD:98:C0:33:DE:0D:DB:63:12:E2
X509v3 Authority Key Identifier:
keyid:AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:3e:50:9c:4c:ee:ff:f2:b6:1b:22:92:e8:7a:93:f4:0a:0a:
0f:d2:84:c8:d9:b9:cf:84:70:f2:5a:50:6e:6b:5e:6f:a6:17:
e1:9e:7a:bd:8f:44:5c:25:99:4b:f0:5d:0a:7d:af:56:a3:e8:
8b:61:0f:8c:5f:b4:e0:ba:92:04:bf:a2:25:69:a4:20:b6:46:
d3:09:6a:81:e1:83:9b:31:1d:40:94:cb:46:1d:96:28:27:fe:
1a:93:6d:f4:f8:36:a2:47:78:42:7f:c2:81:66:37:08:0b:91:
e6:b9:d0:ad:e6:69:05:76:18:aa:d1:b9:04:53:dd:5a:d3:33:
44:88:73:f4:16:2c:41:ed:95:a8:1e:69:43:02:59:96:50:06:
85:32:70:01:32:7e:0c:61:ed:32:ca:2a:03:cb:aa:36:ee:ef:
59:c4:69:72:9a:d5:f5:89:5e:76:6a:3c:a4:a6:8f:5b:e6:df:
e3:dd:1e:8f:10:35:be:d8:4e:09:78:a9:19:d0:ed:93:e7:e5:
1c:3d:58:be:83:22:df:dc:44:28:5d:11:f5:43:39:ab:38:6f:
62:47:47:5a:5b:d4:75:dc:8d:a8:d9:cc:dd:57:b0:be:eb:3f:
e7:72:9e:da:a4:fa:45:53:12:3a:b3:32:e4:95:34:1b:d2:e4:
cb:ac:ad:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:50:47 2025 by rpki-client