Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
File: qjX5B-x9v5xluBWqPXICtt-uMUg.mft (raw, json)
Hash identifier: SngriArnCWwMqNHF/wxNLqmUnNGyGxFE+uQdrd2fFPA=
Subject key identifier: 70:30:20:3F:C5:4D:94:53:15:41:7C:BD:C7:C8:73:44:47:07:8F:96
Authority key identifier: AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
Certificate issuer: /CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Certificate serial: 01976F2C9C1F74D8293CA80DD6F7BD195129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 16:01:23 +0000
Manifest this update: Sat 14 Jun 2025 16:01:23 +0000
Manifest next update: Sun 15 Jun 2025 16:01:23 +0000
Files and hashes: 1: DxU6Tj_sH9i6nYuhG62Zr3rykbI.roa (hash: m10v06RZq7QrBohirh1LPManMxgfja3ZfQ1j9hj5ZLI=)
2: kZG65yjYhzWbyjVxS5nDngYTn7o.roa (hash: NxEcj6vOgWy2wxB1Tg6EXlBHbNa6oBK7xEqZZsDpfQk=)
3: qjX5B-x9v5xluBWqPXICtt-uMUg.crl (hash: qB7f3Mqh+B7HZBXk7TkK+52A5Z4hVek7P75EWQn24YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:9c:1f:74:d8:29:3c:a8:0d:d6:f7:bd:19:51:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Validity
Not Before: Jun 14 16:01:23 2025 GMT
Not After : Jun 15 16:01:23 2025 GMT
Subject: CN=7030203fc54d945315417cbdc7c8734447078f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:52:64:fe:6b:04:55:4e:7a:b3:19:77:1e:c9:
1a:43:da:06:5d:56:df:a2:6d:7c:cb:c8:9a:ea:c8:
6f:47:04:a3:81:99:e1:c1:31:fb:eb:ed:22:77:ea:
0f:76:c7:92:39:ee:90:55:1e:a8:c3:42:50:2b:c7:
3b:48:25:08:6e:13:d0:20:e5:fd:78:3d:c9:ca:8c:
66:e4:63:49:46:75:77:35:1e:d0:d8:89:b4:54:2b:
60:0c:e8:fd:a6:16:7c:05:d3:18:7a:b9:66:0c:d9:
c8:ab:f0:a6:eb:a1:1e:98:f5:3d:df:c1:29:b4:45:
c6:fd:50:45:25:b9:7c:59:af:ea:17:d1:a6:47:05:
68:a7:a6:a2:03:64:de:a1:c5:31:7e:a0:7b:08:41:
47:55:c9:da:ec:05:a1:c7:68:14:4b:7f:4c:af:8b:
34:b6:7e:c5:09:52:7c:9f:d1:b4:46:5a:76:28:66:
00:7e:72:2f:a4:62:a1:5e:74:6b:58:28:37:fb:db:
8f:0f:14:85:4b:b3:70:84:d6:34:38:a8:fe:05:1b:
06:0c:52:48:06:bc:d2:1e:c7:28:10:59:76:e9:49:
55:dd:9e:a2:26:b9:e7:d1:49:40:98:bd:54:3f:98:
28:61:8d:ed:70:ef:4b:13:e9:e8:a8:ac:dc:46:96:
dd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:30:20:3F:C5:4D:94:53:15:41:7C:BD:C7:C8:73:44:47:07:8F:96
X509v3 Authority Key Identifier:
keyid:AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:89:90:fc:0f:47:fe:a4:53:f6:c6:40:07:da:46:94:4c:47:
e6:3a:9d:ad:a8:f3:ec:3e:66:4d:6f:b7:4b:7b:f8:22:71:3e:
71:82:28:cc:40:31:ec:fb:65:99:b8:77:9b:f9:35:14:34:fc:
4b:86:87:fd:70:04:2f:37:82:d6:2f:35:c8:d9:7c:03:23:03:
f7:1d:66:bf:31:ee:8d:09:8c:4d:a0:80:da:33:ab:11:e8:06:
78:09:52:92:2d:2f:16:98:52:cb:43:23:8e:1a:3d:0b:11:02:
6e:fb:fb:a9:c2:77:28:3e:e2:8e:84:f6:df:4d:1f:5f:ad:eb:
fa:24:e8:6d:54:61:07:b7:cf:f3:27:15:8a:1b:13:de:04:4d:
d8:47:03:42:dc:76:f0:c7:37:6c:3d:e6:f8:0d:18:de:b1:75:
27:49:fc:72:ac:53:01:63:93:e7:d1:d8:58:80:4d:d1:a4:22:
8b:97:73:cd:51:0b:ed:d0:92:d0:56:13:29:ea:83:11:3d:d6:
4a:01:ff:5a:34:3c:90:ae:9c:18:c6:8c:2e:6e:ae:7e:bf:d8:
5f:92:91:6e:e9:98:82:32:e1:d4:f1:51:60:0f:90:43:2e:7a:
45:46:02:9c:75:e2:d8:11:07:c5:37:c5:07:5a:8e:93:6e:b9:
52:cc:11:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:53:04 2025 by rpki-client