Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
File: qoXGfyIwng2EwwtUJSlyUyhgUVE.mft (raw, json)
Hash identifier: e7B4B8LYFjNSYtBGllhEE0OElmc1DZ/Qz35sF18SAgs=
Subject key identifier: 44:0D:1E:6F:EC:FB:12:D0:EF:83:D9:C9:15:FF:5A:C9:A5:68:70:5B
Authority key identifier: AA:85:C6:7F:22:30:9E:0D:84:C3:0B:54:25:29:72:53:28:60:51:51
Certificate issuer: /CN=aa85c67f22309e0d84c30b542529725328605151
Certificate serial: 01974A7A9D7897610AA4F9CD83A2748E99D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
Manifest number: 0BFE
Signing time: Sat 07 Jun 2025 13:00:39 +0000
Manifest this update: Sat 07 Jun 2025 13:00:39 +0000
Manifest next update: Sun 08 Jun 2025 13:00:39 +0000
Files and hashes: 1: U6h0E3CpWcLE4IcpdPD5N0_flWE.roa (hash: /MeOIU5IzJfeECJ9wAs+zMCbOflzuiKPgRuM31+tyrU=)
2: qoXGfyIwng2EwwtUJSlyUyhgUVE.crl (hash: ORoyvFSuZ+nyf8EvF809CBv1TNcdyMHBlNTVN0Ras50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:9d:78:97:61:0a:a4:f9:cd:83:a2:74:8e:99:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa85c67f22309e0d84c30b542529725328605151
Validity
Not Before: Jun 7 13:00:39 2025 GMT
Not After : Jun 8 13:00:39 2025 GMT
Subject: CN=440d1e6fecfb12d0ef83d9c915ff5ac9a568705b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7d:1a:d2:59:65:b2:bb:e0:71:be:41:10:63:
db:a7:79:21:be:43:b1:77:2e:ff:03:36:0f:61:02:
e5:dc:08:75:eb:88:e9:e9:5c:ae:e3:c8:79:8e:5f:
40:6e:18:f4:d1:fa:b1:ae:8c:b0:7c:a1:fd:a8:a1:
d6:aa:ed:29:5a:71:ba:f5:49:85:1c:bb:f2:47:10:
1f:43:a5:b1:aa:5c:ea:53:09:f7:0e:ca:77:7d:42:
fe:90:db:82:1d:1f:98:0e:8e:28:55:cb:59:ef:72:
db:5e:c9:ed:a4:60:49:17:cb:3b:72:56:e1:6c:75:
32:d0:59:aa:63:aa:bc:26:50:32:b4:f2:8b:ae:2b:
8d:61:b4:44:0d:e9:ca:33:fe:81:c5:ed:e7:c1:5c:
1c:35:43:4a:c7:41:f3:b8:f5:68:00:a1:4b:d1:49:
06:94:7c:df:c6:7a:e6:c9:aa:df:df:cf:b4:04:f6:
0f:92:05:77:62:45:66:72:e4:67:d8:4c:30:7f:78:
a0:69:50:bc:d4:8a:38:98:d9:d0:b2:b1:d2:e3:6d:
37:9c:3b:11:33:68:66:8c:39:88:b7:d1:cc:5e:45:
4e:8d:f8:60:f7:53:ca:17:de:f0:ef:11:5c:27:dd:
78:c6:da:bf:65:62:e1:04:57:e2:0a:a2:e0:64:0e:
86:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0D:1E:6F:EC:FB:12:D0:EF:83:D9:C9:15:FF:5A:C9:A5:68:70:5B
X509v3 Authority Key Identifier:
keyid:AA:85:C6:7F:22:30:9E:0D:84:C3:0B:54:25:29:72:53:28:60:51:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:0b:4c:0a:90:7c:eb:58:06:e3:7e:76:94:2c:9d:c7:c4:d5:
a5:5d:85:51:e9:7d:04:a0:2f:d8:f6:58:17:81:91:cd:69:6e:
b1:b5:0a:18:b8:83:96:01:ac:4f:5d:be:a9:62:a8:6c:47:46:
83:3b:dc:fc:20:e1:03:90:38:35:b6:bb:c6:ba:cb:a4:9a:d5:
10:d0:95:e6:da:ed:e8:f9:80:55:dc:65:85:32:a9:27:a1:67:
f6:88:2c:bd:1c:cd:fb:d6:d1:61:6d:bf:2b:a1:4b:a6:c2:f5:
e7:12:5d:df:43:43:f1:31:94:f7:03:ab:35:30:f3:e4:ff:60:
e6:c0:ba:dd:c9:0a:44:42:31:1a:aa:23:37:ec:e5:79:ec:7a:
8d:0e:22:64:35:71:7d:14:b3:7b:03:a1:73:ff:c2:d2:d7:92:
d4:42:02:9d:99:b1:94:cd:df:d5:b8:29:27:f6:1e:e8:7f:44:
28:f5:97:18:45:36:65:8e:8d:cb:39:d8:79:74:e5:ef:75:46:
20:8d:89:ac:ee:35:ff:66:5c:9b:f0:21:1a:c8:a5:49:6e:64:
22:82:9d:49:8b:16:4d:48:be:19:9a:1c:74:7e:e8:b8:9b:55:
78:88:ec:18:3e:2b:65:7d:e0:97:d5:d2:ba:07:af:42:ae:5b:
59:a0:a7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:18:02 2025 by rpki-client