
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
File: q22oNLMssSxL2uM_Zy80jZg_MXY.mft (raw, json)
Hash identifier: kS5ZP4M94SbBOds9+uq8xwH2OhwPViPFu6JZ7TqiqbI=
Subject key identifier: 5A:F9:DD:19:F3:C7:E9:83:0F:12:B8:29:01:C5:FA:93:22:30:2B:9C
Authority key identifier: AB:6D:A8:34:B3:2C:B1:2C:4B:DA:E3:3F:67:2F:34:8D:98:3F:31:76
Certificate issuer: /CN=ab6da834b32cb12c4bdae33f672f348d983f3176
Certificate serial: 019771884722FF296F48C6E201477360F738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
Manifest number: 0DF9
Signing time: Sun 15 Jun 2025 03:00:45 +0000
Manifest this update: Sun 15 Jun 2025 03:00:45 +0000
Manifest next update: Mon 16 Jun 2025 03:00:45 +0000
Files and hashes: 1: evpxyC_xQr6-9_i5vhF3SSD60QY.roa (hash: F+Lkz2iLknBGekmgWZevszL+qAh6hnFUDMady9RqMNg=)
2: q22oNLMssSxL2uM_Zy80jZg_MXY.crl (hash: I6qnyz6JvjV5Cha201NGIpniJBsKD3Mi5XRNwrbnh68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:47:22:ff:29:6f:48:c6:e2:01:47:73:60:f7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab6da834b32cb12c4bdae33f672f348d983f3176
Validity
Not Before: Jun 15 03:00:45 2025 GMT
Not After : Jun 16 03:00:45 2025 GMT
Subject: CN=5af9dd19f3c7e9830f12b82901c5fa9322302b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ce:75:51:81:48:64:a5:59:44:c1:51:36:d8:
3f:0c:d3:32:20:81:7e:c7:9e:8a:85:b6:14:c4:88:
fc:bf:24:8a:95:22:c2:76:9a:25:35:27:bc:1d:2d:
dd:06:82:ae:a0:43:ba:db:e7:cc:33:09:af:58:37:
21:f7:7f:16:37:fc:0d:9d:95:de:eb:93:87:dc:15:
aa:e2:d0:5f:fc:b7:3a:06:9c:29:af:3b:13:54:f5:
1c:53:e5:72:b5:b4:8d:b6:ef:10:b8:67:05:40:d2:
e3:ba:d7:90:1d:4e:e4:58:ea:31:a8:e3:d9:72:5e:
82:58:c4:27:0e:a1:af:01:4e:12:0a:76:44:22:c4:
b7:5a:6b:09:73:e3:87:28:bb:3e:71:93:6c:6e:a8:
a0:37:72:12:eb:c7:3b:6d:39:54:60:12:92:f7:35:
61:65:95:cc:59:d7:70:c6:61:7a:bb:c8:02:e0:13:
56:d0:8e:06:d0:57:d1:3a:57:6a:ca:14:08:aa:f4:
7f:37:f5:1e:98:5a:6b:18:0e:36:ac:1d:81:46:9e:
99:50:13:62:e3:07:ff:01:e8:a1:50:9c:d3:f4:2b:
8a:52:8c:6f:e8:2c:ea:2a:62:3c:9c:6b:81:66:16:
33:f9:1f:13:c1:da:6d:4f:0d:bb:c8:70:20:6b:a4:
ce:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F9:DD:19:F3:C7:E9:83:0F:12:B8:29:01:C5:FA:93:22:30:2B:9C
X509v3 Authority Key Identifier:
keyid:AB:6D:A8:34:B3:2C:B1:2C:4B:DA:E3:3F:67:2F:34:8D:98:3F:31:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:26:3e:fc:78:b7:de:83:85:dd:1b:e6:d9:d7:7c:69:5f:9a:
9a:68:bd:0d:51:65:24:31:6c:ad:ba:d6:67:4a:62:99:49:94:
2c:97:ae:88:65:70:23:1a:05:50:44:86:0d:a3:ce:5a:56:16:
3e:a6:67:6f:62:02:f6:70:87:48:b3:5a:31:3f:93:ae:19:73:
0c:02:9c:9f:e9:a9:b4:53:15:9d:ba:e2:51:b4:57:47:f5:51:
60:13:3f:f3:e7:96:09:73:95:38:3c:d8:f8:f8:48:f6:18:96:
81:5b:6d:30:10:15:fb:c6:41:e7:26:5f:fe:49:d0:dd:7f:d8:
9e:ee:cd:a1:09:6e:d2:ac:e2:e0:f2:ea:c3:1b:25:91:b4:99:
6f:5f:ec:6f:27:cd:78:db:56:59:e6:a3:01:96:f4:70:d3:7f:
ca:ef:b4:6b:38:c3:94:df:df:36:cd:c3:22:53:71:80:72:4c:
86:af:c2:32:93:3f:fb:38:ed:13:60:eb:07:df:b2:0a:de:67:
d3:d2:ff:ca:9d:3e:7f:f9:36:e3:de:37:73:4b:3b:46:3a:28:
9d:05:2d:4d:49:1f:80:88:a5:ce:c1:07:55:c2:c6:97:95:47:
95:6a:5b:ff:5b:d2:c7:37:3f:42:27:54:8c:03:13:3f:59:e6:
d9:df:a6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:07:47 2025 by rpki-client