Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
File: Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft (raw, json)
Hash identifier: 6aG/B10GRWwj9EVcyeoJumjHngDTMA6c/NfNJgZekNM=
Subject key identifier: 0A:AA:5D:F4:B0:7D:79:59:FE:10:58:B7:70:E1:19:11:86:04:25:74
Authority key identifier: 43:AC:C2:F2:BE:1A:36:B0:89:21:65:44:D2:3C:95:AC:E2:32:E1:43
Certificate issuer: /CN=43acc2f2be1a36b089216544d23c95ace232e143
Certificate serial: 019769612E7DA97FA4048935FF94B498DB6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
Manifest number: 08E1
Signing time: Fri 13 Jun 2025 13:01:05 +0000
Manifest this update: Fri 13 Jun 2025 13:01:05 +0000
Manifest next update: Sat 14 Jun 2025 13:01:05 +0000
Files and hashes: 1: KKb3movEaRK5uooL7CLlRng9BxI.roa (hash: QF2heUsD9ZCfGN4fGvk2RN46irWE6FgEYevma5ik6/E=)
2: Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl (hash: lvXBnaudeapn1p0CrxnMQ1GspMdW/5aFU+ntQxxigZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:2e:7d:a9:7f:a4:04:89:35:ff:94:b4:98:db:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43acc2f2be1a36b089216544d23c95ace232e143
Validity
Not Before: Jun 13 13:01:05 2025 GMT
Not After : Jun 14 13:01:05 2025 GMT
Subject: CN=0aaa5df4b07d7959fe1058b770e1191186042574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:eb:66:37:5e:46:a4:f7:8e:ad:03:75:23:2d:
6a:62:f2:e2:c5:6b:82:69:1a:99:21:f6:17:6f:d7:
8e:c0:4c:fb:a7:d2:d5:ec:f8:53:3c:ad:eb:fc:f4:
5e:03:9f:97:f2:89:50:8c:a2:96:18:d1:6f:53:58:
87:10:98:08:c1:ec:f7:41:fa:6c:1c:ba:ef:ae:9a:
d9:40:d7:a0:7b:3b:4f:23:24:60:bb:52:52:0c:2f:
7d:8f:30:33:01:0b:36:d3:04:b8:f1:2a:be:33:7e:
47:4a:23:58:bc:96:6c:11:69:5a:67:3d:ef:54:52:
e5:1e:73:28:7c:82:7f:c2:94:5b:d1:68:1d:ba:ee:
84:78:c7:a1:09:e0:1a:b9:13:83:fa:2f:e2:15:e0:
2e:37:f8:0c:09:78:99:6e:68:7d:8e:ed:16:45:59:
a5:08:85:13:a1:5c:d7:6b:f9:19:11:d3:41:56:94:
74:91:ff:db:b7:bb:8b:6f:16:98:93:ea:d6:d1:b4:
d7:ab:67:3b:a2:49:0f:9c:93:2e:19:f4:b2:9d:12:
a3:d4:0a:aa:f9:68:a4:f9:1d:be:d4:c2:bf:1f:c2:
e9:37:c7:b0:19:df:b5:01:ab:bc:ac:1c:c9:5f:18:
04:62:50:53:d0:0a:4d:73:58:e1:ee:4a:58:77:08:
5c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:AA:5D:F4:B0:7D:79:59:FE:10:58:B7:70:E1:19:11:86:04:25:74
X509v3 Authority Key Identifier:
keyid:43:AC:C2:F2:BE:1A:36:B0:89:21:65:44:D2:3C:95:AC:E2:32:E1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:cd:b3:b7:4e:19:19:cb:a4:e4:f8:5c:67:b5:95:b7:e2:d0:
a2:82:eb:08:06:b2:2a:d2:25:d1:2d:05:39:2a:5d:07:fe:51:
d2:6b:4d:52:0b:41:ed:d6:6e:d7:c8:d9:b7:17:25:4c:c3:bd:
4e:5e:69:f9:7e:88:46:86:45:27:1b:51:a3:69:4f:14:a7:60:
4d:a6:e8:ce:67:b0:4a:fe:68:31:8f:69:fe:f3:12:00:91:4e:
58:1e:a3:b2:3c:91:80:a2:eb:3b:e6:b9:53:45:5b:67:9d:80:
a4:1f:29:ba:33:de:9f:66:91:0f:79:92:34:19:3e:00:b0:a3:
6e:d9:4e:5c:2a:6c:30:72:50:04:a3:fc:22:b5:05:2e:44:27:
c5:8e:8e:bc:da:fb:fc:93:12:9e:c0:ff:34:86:fb:3f:79:6f:
b6:dc:5d:5f:74:8b:23:0c:6e:d8:6a:31:47:3e:b5:31:01:86:
a9:41:d5:df:6c:da:07:f5:aa:2f:9c:fd:96:3f:8b:70:fc:38:
06:65:30:78:e0:5f:70:11:25:71:38:ab:42:44:29:27:f5:e8:
37:5e:5d:db:d8:14:2c:01:01:19:03:a9:cd:4b:f9:e5:9f:4e:
50:8d:b8:62:7f:bd:73:e5:49:44:e5:e2:c7:c2:0e:76:5d:16:
5d:dc:95:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:14:13 2025 by rpki-client