Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
File: Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft (raw, json)
Hash identifier: NJK40lFbHrtwmE6ASXmerQXghPkBS/PReH0x2bkhp9k=
Subject key identifier: AE:F4:32:A2:AF:7F:98:50:69:B9:C0:D5:DA:D8:AB:F0:F7:71:A5:23
Authority key identifier: 43:1F:14:80:65:1F:1B:33:8B:E2:63:41:E2:DB:3A:0A:A3:B3:44:EB
Certificate issuer: /CN=431f1480651f1b338be26341e2db3a0aa3b344eb
Certificate serial: 01976C2B45F4B70F8C884D6B1C929056B836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
Manifest number: 046F
Signing time: Sat 14 Jun 2025 02:01:04 +0000
Manifest this update: Sat 14 Jun 2025 02:01:04 +0000
Manifest next update: Sun 15 Jun 2025 02:01:04 +0000
Files and hashes: 1: 3ZVx610sqQi3jR1aN5jm4CubkNI.roa (hash: ailedL7i/J97fdockeVNWVcnZPHz5O3htVX32ZMAjHU=)
2: Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl (hash: OqzIR2RVu0hRgczJPdCTmVlSyQRPATOTfvXEkxtNxSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:45:f4:b7:0f:8c:88:4d:6b:1c:92:90:56:b8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=431f1480651f1b338be26341e2db3a0aa3b344eb
Validity
Not Before: Jun 14 02:01:04 2025 GMT
Not After : Jun 15 02:01:04 2025 GMT
Subject: CN=aef432a2af7f985069b9c0d5dad8abf0f771a523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:75:84:34:d4:84:51:e5:20:84:b2:db:2d:b2:
e1:c2:23:a4:f8:94:c8:49:c4:35:08:eb:c6:40:d0:
e5:59:22:8b:59:16:1a:82:fb:9a:57:93:b6:ba:f3:
09:88:ba:68:2a:6f:98:01:6f:bb:a9:7e:24:bd:e3:
8a:18:82:de:45:9b:c4:81:60:cc:42:18:02:dc:74:
46:83:ae:f7:d6:39:96:22:91:1b:5d:44:ab:54:73:
bc:2b:5f:4b:b2:2c:d5:cf:7a:2d:3d:77:7f:6d:e5:
8f:96:81:14:e2:30:9b:f8:f5:e9:6c:ca:2c:2a:17:
f7:df:ac:c4:66:9a:8e:f9:ab:3b:5b:fb:1a:8b:e9:
56:33:8a:55:29:2c:ad:09:db:6d:b3:5a:2c:9f:83:
61:f8:64:47:c4:4a:84:a7:61:27:fc:fd:35:b9:9c:
fe:1a:d2:c9:ae:47:a8:97:64:cd:3a:0e:49:71:e5:
4d:e5:80:08:fa:bb:30:67:47:e8:bc:14:80:68:22:
2a:98:f2:94:81:61:c4:43:49:65:73:3a:68:ff:a1:
74:17:35:ab:27:bc:66:47:2e:6f:44:05:2d:7b:b4:
0e:8e:5d:c5:63:7a:c3:07:23:79:fc:23:48:f9:25:
41:45:fb:a3:7d:5e:2d:9b:0c:6a:fd:01:82:ac:98:
53:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F4:32:A2:AF:7F:98:50:69:B9:C0:D5:DA:D8:AB:F0:F7:71:A5:23
X509v3 Authority Key Identifier:
keyid:43:1F:14:80:65:1F:1B:33:8B:E2:63:41:E2:DB:3A:0A:A3:B3:44:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ea:c9:24:c0:c2:24:a1:70:e3:b3:f4:c4:0b:16:68:47:ed:
78:76:2b:37:23:82:48:f1:a1:0a:70:f5:92:53:58:23:77:ef:
5c:b6:a3:85:53:3a:de:93:3a:e3:a5:67:87:21:48:2b:50:af:
30:a7:11:4c:54:2f:6f:91:0f:8b:78:6d:a2:07:10:97:99:36:
3c:b0:26:2f:52:c4:a9:49:a7:c7:21:9b:cd:25:ba:77:33:ed:
35:6d:b2:de:0f:a3:4b:22:e4:d3:a8:7a:50:c5:1a:6d:6f:f6:
be:74:63:c8:a0:a8:a6:f4:85:3a:8d:d6:72:fb:21:1b:69:e9:
b3:15:47:44:ab:ea:1a:fd:00:ed:90:f8:00:3f:49:c1:f1:78:
84:74:47:da:25:0b:e7:a8:b1:9e:41:8e:99:af:48:ad:b3:f5:
14:35:7e:f6:eb:82:19:40:1a:cf:b4:27:2a:bb:cd:cb:6f:93:
0e:a4:e2:cf:17:dd:f1:4d:26:4a:f1:5a:92:95:58:58:28:0c:
24:77:ec:74:0f:de:ee:af:b2:e9:f0:f4:a2:23:91:8e:3d:e8:
7d:78:25:0f:5d:f7:48:45:b6:4c:f7:ce:b1:e8:4c:15:1e:cd:
6c:d1:9a:48:01:4d:da:66:56:81:86:7d:9b:e0:c8:c3:e1:9e:
d1:fb:a4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:49:56 2025 by rpki-client