Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
File: q6gfB6STo-ZDdS5mvYFG9Xca34g.mft (raw, json)
Hash identifier: 102N6zP4sjCc/QiAOV6JZw8VbTC5oF4eKdNhKmpRyrE=
Subject key identifier: 65:15:10:50:EC:54:FE:A2:D5:C0:C7:3F:BA:BE:85:8A:A3:ED:09:32
Authority key identifier: AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
Certificate issuer: /CN=aba81f07a493a3e643752e66bd8146f5771adf88
Certificate serial: 019771516E5851445BE79ACBDF97834EA230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
Manifest number: 156C
Signing time: Sun 15 Jun 2025 02:00:51 +0000
Manifest this update: Sun 15 Jun 2025 02:00:51 +0000
Manifest next update: Mon 16 Jun 2025 02:00:51 +0000
Files and hashes: 1: _7nFqf5lz5tcDACtAr9RF1OczjU.roa (hash: +++HO383AAZs8DTGnKyEbL2DY3xsbwwnVwL8cUM+bTU=)
2: dABSJLRi0TLcB4OYtofXt8vc5mI.roa (hash: LxLgAjIFySbpl2HK3ef4vXYPLVBckR21OqAdcEmHAdI=)
3: q6gfB6STo-ZDdS5mvYFG9Xca34g.crl (hash: PPr3kSkygEKB+phTizw0ZJhiTFTnquTZW42k7OSvbQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:6e:58:51:44:5b:e7:9a:cb:df:97:83:4e:a2:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba81f07a493a3e643752e66bd8146f5771adf88
Validity
Not Before: Jun 15 02:00:51 2025 GMT
Not After : Jun 16 02:00:51 2025 GMT
Subject: CN=65151050ec54fea2d5c0c73fbabe858aa3ed0932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ca:74:48:66:66:59:9e:83:38:a8:b8:5e:55:
40:89:90:50:67:e8:78:cd:cd:2f:a9:68:07:55:be:
20:4f:89:6d:d6:6f:55:c5:5c:6d:d3:79:a4:f6:15:
24:50:76:33:c3:a2:0f:da:de:25:58:73:1f:70:16:
04:c5:93:d0:b2:93:99:e2:6b:86:5a:62:c0:bc:0a:
a5:63:0c:ac:db:d6:a3:f2:b3:8e:c2:7d:9e:4a:3f:
ae:03:0d:2e:e4:09:c8:07:7e:03:d6:15:e1:6d:e2:
25:98:e9:b0:80:54:e9:0b:84:79:f9:9a:d7:c9:f8:
f7:1d:90:94:48:68:a2:83:b1:6a:b7:cf:ba:1b:58:
5e:4b:47:bd:ec:ab:a8:6c:d9:cf:29:d3:17:08:04:
21:5c:25:e0:c0:ca:41:a5:ec:18:ee:db:48:53:18:
36:d4:e2:cf:7e:bc:75:86:c6:5b:02:55:82:49:b5:
90:c1:f5:2b:73:8d:76:4f:02:c0:34:32:a6:82:7e:
41:2d:5d:94:8d:6d:28:d1:7b:1a:8d:eb:eb:34:17:
90:ba:ff:f0:f5:c7:57:c8:80:bb:1a:7e:63:fc:ad:
24:9c:18:99:e5:49:6d:b3:c7:58:32:54:41:0e:e7:
b5:81:ce:39:18:5e:9a:03:74:2c:a0:f0:15:0d:2a:
cf:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:15:10:50:EC:54:FE:A2:D5:C0:C7:3F:BA:BE:85:8A:A3:ED:09:32
X509v3 Authority Key Identifier:
keyid:AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:fb:db:2b:bf:b9:de:05:ba:60:e6:74:fb:7b:bb:1a:30:be:
f9:35:d1:ae:ee:5f:2d:02:59:92:c8:fe:a4:1f:c9:e6:7e:73:
ad:d1:e9:af:0d:cd:2d:7e:fa:aa:e2:20:dd:08:a8:d3:0d:03:
bb:c8:95:47:c3:73:c0:d6:4d:df:79:5c:af:6f:aa:15:81:75:
e1:f3:37:d9:86:68:1b:dc:63:c9:a3:49:3e:11:ed:29:5f:65:
91:c7:50:23:7c:2a:90:95:a5:83:d4:c1:12:db:d2:d8:7a:b5:
13:39:dd:e8:8a:8e:a0:c3:11:71:f5:b7:1a:ac:61:96:7c:21:
7e:0a:06:84:6a:6b:bb:95:60:01:7d:8e:ed:58:49:1f:70:46:
89:2a:a3:4e:65:e9:27:be:a2:d2:9c:ee:8e:c5:99:3f:a1:28:
8d:c5:b3:db:c3:f3:64:89:88:42:e5:55:dd:45:81:18:1c:f1:
fc:e3:ea:2a:2c:a6:bc:73:45:19:c6:4e:00:78:e5:97:d5:7d:
96:e0:de:d3:9c:51:56:47:f7:ba:cc:17:b2:7f:59:a8:9d:16:
eb:f7:00:22:5a:cb:e4:ed:b9:6b:1c:c5:dd:4c:6c:21:e4:1e:
63:eb:1f:de:95:ec:41:a1:f2:42:b3:3c:2f:1d:4a:08:bb:ef:
e4:ff:89:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:12:34 2025 by rpki-client