Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
File: aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft (raw, json)
Hash identifier: nb//kqZSSrHWR+fLEvM+kbuhyVOCsSSPpdcVd+UXUak=
Subject key identifier: F8:C4:3B:DC:78:3D:44:85:5C:3E:92:32:DF:3B:58:C7:04:15:51:17
Authority key identifier: 69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D
Certificate issuer: /CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
Certificate serial: 01976F99D3D1D3DFBDC4976E90DCBDB3BEBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
Manifest number: 11D5
Signing time: Sat 14 Jun 2025 18:00:41 +0000
Manifest this update: Sat 14 Jun 2025 18:00:41 +0000
Manifest next update: Sun 15 Jun 2025 18:00:41 +0000
Files and hashes: 1: PzCzJjGgoPXtrlh76B1G7PxDa5w.roa (hash: 0mC70+WY3sICObRriEKv1EjaSi7E87FOmh2jLXs4uxs=)
2: aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl (hash: yS1szZfJ6vpkfhT5nlwIkUQ/oZlAVRI/s4/bVhnMFPI=)
3: xkqO4aVLIZUckL31oh3PJoWcGDw.roa (hash: U3ieRFwqG7N/E8wCUCYGjMDFUjBJb6rB66D0tY2rBtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:d3:d1:d3:df:bd:c4:97:6e:90:dc:bd:b3:be:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
Validity
Not Before: Jun 14 18:00:41 2025 GMT
Not After : Jun 15 18:00:41 2025 GMT
Subject: CN=f8c43bdc783d44855c3e9232df3b58c704155117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:16:bf:d0:f5:00:33:c5:3e:2c:00:cd:ef:86:
8d:ec:80:a9:62:c5:f9:8e:c1:79:27:27:e0:17:10:
76:b9:64:e2:04:8d:ff:cf:b8:b2:51:4a:a3:ac:be:
08:c8:c9:20:42:9b:ad:11:5f:b9:94:9b:b4:cc:29:
cd:5b:aa:5d:37:44:44:96:4f:5e:1d:17:77:e3:28:
c5:69:d7:39:3b:ad:b8:26:09:a1:75:1d:14:d7:d8:
dd:1f:59:dc:0b:fe:48:a2:0e:19:59:a6:93:e7:57:
d7:e7:58:50:51:56:ee:2a:78:59:f1:34:d9:46:bd:
83:03:26:63:1b:27:d3:73:5e:13:92:8b:e0:cf:2c:
7f:da:c7:e0:98:08:02:6f:04:de:d8:36:ab:bf:4a:
b9:55:55:dd:7e:b5:74:1a:ca:43:bd:d1:4a:9c:48:
e9:67:4f:d5:2f:70:c6:a0:9d:1e:4c:12:05:ff:4a:
52:8e:60:f7:ac:4d:8e:9a:ee:71:3a:3c:f7:43:68:
ed:6d:b7:ba:2b:64:9f:ec:9f:b9:cf:0d:6d:0a:71:
02:fb:de:85:9c:1d:ed:ac:a8:b8:76:4e:00:e2:8e:
c6:8e:74:dc:57:7f:7d:c3:2b:c8:43:6d:3f:cd:fb:
72:b6:62:45:88:23:27:b4:c1:97:b8:81:71:73:18:
2a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C4:3B:DC:78:3D:44:85:5C:3E:92:32:DF:3B:58:C7:04:15:51:17
X509v3 Authority Key Identifier:
keyid:69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:95:64:a3:65:6c:f0:69:57:fb:87:07:0d:1b:cf:a6:81:3e:
ec:40:cd:f9:e9:36:be:cf:5c:d5:55:83:05:61:c4:89:52:6e:
71:a2:69:31:d2:e3:29:27:d2:5d:b7:6c:29:47:2a:db:4f:5f:
d2:18:96:bf:c8:ff:25:e2:22:83:84:93:05:1e:cb:93:a8:12:
d0:fb:88:8f:fa:27:3e:f6:cd:80:44:b1:0c:15:39:e5:f1:9b:
d6:75:5e:e1:da:c5:cd:56:2d:1c:dc:c8:5b:fb:41:b1:5d:71:
e3:ac:c0:a3:ed:18:24:4c:af:90:55:c6:13:23:d3:24:c6:fb:
0a:25:fb:34:9e:31:77:48:a5:28:49:b0:e3:e0:da:cd:4d:14:
ca:e5:fa:54:f8:1a:b7:31:97:ef:a5:29:32:b0:d8:75:07:9d:
e1:95:36:d0:72:c9:b8:7c:d6:5d:80:bd:c1:b0:76:86:0a:18:
d6:48:b7:c6:04:fc:29:66:f6:e2:8e:a9:75:cb:20:59:69:5e:
30:76:68:c8:f0:f9:23:e4:e1:34:ef:96:9d:91:91:5e:1e:fb:
c8:8d:88:c8:73:06:fa:4a:d1:65:74:e0:11:c1:8f:93:e7:15:
99:5a:f0:95:b7:1c:7c:c0:ed:23:4a:07:f7:ed:ea:48:52:2b:
aa:fc:37:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:02:19 2025 by rpki-client