Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
File: qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft (raw, json)
Hash identifier: iHTVcYAq/IVdQ/ZR14cEecaFza4hvfPcV8XsoAGu2Ys=
Subject key identifier: BA:F6:18:ED:EB:BA:27:D9:71:08:8F:17:8B:88:14:D9:BC:4E:5E:9F
Authority key identifier: AA:44:E2:E8:12:F0:9A:C4:FE:2B:47:E4:26:9C:E1:A0:20:21:CA:0E
Certificate issuer: /CN=aa44e2e812f09ac4fe2b47e4269ce1a02021ca0e
Certificate serial: 01977A8B6C2340170523492EB58F9641B0C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
Manifest number: 1594
Signing time: Mon 16 Jun 2025 21:00:46 +0000
Manifest this update: Mon 16 Jun 2025 21:00:46 +0000
Manifest next update: Tue 17 Jun 2025 21:00:46 +0000
Files and hashes: 1: Ksr0uLkRk2xgBxHqi3sQnitvzew.roa (hash: WSC+ZUBgflwaiPFD1qCd7YKaOxvqrLSTyitqpFIOSP4=)
2: qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl (hash: vY4QW7gTZiKM1SLIm3Xck46/a2K0f7ZAbXDXi3pM4WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:8b:6c:23:40:17:05:23:49:2e:b5:8f:96:41:b0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa44e2e812f09ac4fe2b47e4269ce1a02021ca0e
Validity
Not Before: Jun 16 21:00:46 2025 GMT
Not After : Jun 17 21:00:46 2025 GMT
Subject: CN=baf618edebba27d971088f178b8814d9bc4e5e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5d:7a:ab:69:1a:94:24:90:f3:0a:f4:c9:b2:
80:ad:d8:1d:8f:37:56:b3:8d:4a:cd:a5:12:15:31:
91:98:5c:b4:a4:38:7e:ae:79:c6:65:fd:64:6a:1b:
36:45:42:df:8b:ef:90:ae:15:39:5c:47:0e:14:d2:
9a:db:db:d2:0f:37:19:02:93:0e:9c:5c:c1:bd:f4:
67:c8:bb:01:9f:2f:56:c2:24:9b:2e:d0:74:0f:83:
d4:52:3b:c0:7c:2b:0e:de:25:94:17:ce:a6:2c:72:
01:69:e4:71:92:28:cf:7d:0f:ee:66:9d:0c:82:dd:
64:f2:2f:ac:9d:d0:80:b1:bc:5d:59:18:06:1a:6e:
4d:6e:17:d8:f6:b0:53:22:e5:02:80:2d:3c:3b:88:
00:6a:b9:2a:7b:1f:cf:79:2c:40:96:d0:38:8d:e2:
2c:8f:29:af:30:2c:1f:97:e9:b8:6c:dc:d2:ed:80:
63:ae:0e:fe:87:7e:58:a7:8b:ed:a7:76:05:72:af:
e4:14:4a:36:66:c8:a3:3f:32:0b:15:77:87:09:63:
1f:66:e7:19:ff:5d:32:30:1d:5f:f7:58:98:65:10:
33:26:63:72:fb:53:ab:f6:0e:f4:68:5f:18:77:dc:
52:65:9f:39:db:c8:60:3f:22:60:5d:a2:10:57:55:
e2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F6:18:ED:EB:BA:27:D9:71:08:8F:17:8B:88:14:D9:BC:4E:5E:9F
X509v3 Authority Key Identifier:
keyid:AA:44:E2:E8:12:F0:9A:C4:FE:2B:47:E4:26:9C:E1:A0:20:21:CA:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:97:00:0a:4e:aa:5a:0c:64:30:bb:46:17:e4:37:e9:13:e4:
c9:87:03:20:02:f6:a8:39:40:64:82:89:c8:05:e6:f8:30:1d:
88:20:d2:65:38:fc:21:30:82:c3:3d:99:ab:cf:40:a7:97:2d:
88:a6:03:25:8d:5a:6f:a6:a7:9a:8e:7d:b4:90:3d:8b:b3:43:
74:2d:e8:d8:89:a0:e5:35:45:0a:c7:e7:e9:a9:eb:98:1e:82:
45:6e:16:38:53:ce:9b:e6:15:f1:d1:19:f5:38:5c:74:4a:d7:
e3:7e:bd:95:dd:b8:11:54:93:7f:15:59:60:a4:6b:44:1a:1b:
23:c4:9a:db:c4:ee:37:db:4e:e8:18:ff:74:14:2d:64:a1:04:
48:b9:74:e4:42:e7:e6:ce:c0:67:32:c5:f7:86:e7:4b:bf:69:
de:77:09:31:12:bf:1b:f8:1c:bc:49:ae:21:b2:47:9b:71:f5:
a4:97:c3:1b:a9:eb:35:12:67:e3:54:24:4f:c9:11:b0:bd:ee:
57:f4:29:40:e8:85:28:fb:16:ac:4f:bd:d1:94:95:7b:da:7e:
9a:8a:08:ad:d4:39:dc:90:3f:8c:8d:e6:dc:57:70:6c:84:d5:
fc:ce:1a:a2:21:fe:9c:d3:21:31:66:8a:2d:f7:32:ea:6e:37:
29:93:9a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:00:19 2025 by rpki-client