Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
File: qgYKY9op1_lWF6b_u09RzMvHhlE.mft (raw, json)
Hash identifier: h6OsVy9iOm0vb6k2A6nMfLK+uThuF9GVq5eAjXcb63g=
Subject key identifier: 99:CE:3D:49:BD:A8:90:BC:87:CF:2D:DE:B7:FF:89:44:C2:D4:7C:C6
Authority key identifier: AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
Certificate issuer: /CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Certificate serial: 0197488BFBB1A063D0771DC354E7D76B967B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
Manifest number: 11ED
Signing time: Sat 07 Jun 2025 04:00:22 +0000
Manifest this update: Sat 07 Jun 2025 04:00:22 +0000
Manifest next update: Sun 08 Jun 2025 04:00:22 +0000
Files and hashes: 1: 6vC7E9fCr2S2YLpYl9NYikdwrIo.roa (hash: 0lbRVN/oMU6y83Ly4EI44/lCqnm0TAJ8jhFyCAz5oJM=)
2: VFWfa5gKi_WVASZxLKD5EBmR-Vk.roa (hash: uLbbbwsMWu+2oa981JmoBqRGb6E5FUC1zqcIAUYzCRg=)
3: qgYKY9op1_lWF6b_u09RzMvHhlE.crl (hash: oKGl2bgh7O/bWuBtuX/R2ciCfAlojxfP14WKSMCAL9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8b:fb:b1:a0:63:d0:77:1d:c3:54:e7:d7:6b:96:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Validity
Not Before: Jun 7 04:00:22 2025 GMT
Not After : Jun 8 04:00:22 2025 GMT
Subject: CN=99ce3d49bda890bc87cf2ddeb7ff8944c2d47cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4d:78:ec:4c:6b:3f:07:8c:16:e0:96:c4:81:
ff:14:20:6c:dd:7e:5d:bb:6d:0f:1b:2e:d6:8a:ce:
c4:b9:c7:a4:10:97:2b:bd:ab:01:a5:d0:ea:65:99:
16:21:34:4b:7a:40:dd:f8:72:37:4b:2f:20:0c:88:
b2:e9:50:fa:65:43:97:ba:ee:db:79:a4:e6:66:bf:
2a:3a:71:e3:1a:53:8e:61:6c:86:84:80:c3:31:80:
84:2e:22:a2:9c:07:4e:89:ea:63:c7:03:fb:02:c4:
ae:17:d1:84:d8:e2:21:e8:d4:24:e3:9e:d6:2d:c3:
54:fb:fe:99:28:62:7b:6d:22:18:3f:57:f2:ab:4e:
7e:ea:8c:9f:10:bb:ba:f2:aa:1a:4a:ea:3a:a4:f6:
b4:5e:38:a9:0f:b7:df:9f:2e:52:b2:23:af:dc:7e:
23:cd:a7:02:70:0e:13:32:c4:fc:7a:4a:15:4f:f2:
71:b1:20:d3:9e:20:60:45:35:bf:d1:a0:4a:a4:6c:
4f:8c:e8:7d:51:8f:f1:e5:a7:86:97:02:09:2e:eb:
d2:f1:ff:d2:df:6d:25:2c:fe:8f:b6:99:b7:52:ea:
fc:ce:0e:f9:22:69:1e:b2:b9:8d:aa:50:01:18:c3:
d8:87:2b:c9:c9:9d:4f:64:61:75:fd:b0:13:6c:ea:
63:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CE:3D:49:BD:A8:90:BC:87:CF:2D:DE:B7:FF:89:44:C2:D4:7C:C6
X509v3 Authority Key Identifier:
keyid:AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f6:30:f0:3f:11:b3:f6:a8:a8:a5:f5:60:42:2f:bb:7e:30:
b6:ea:ee:7a:90:a2:ff:73:82:2b:68:17:08:73:9d:bf:25:b1:
79:79:20:0b:da:a1:c5:df:fb:fe:c7:6b:79:25:93:3a:be:c3:
3d:74:16:86:0e:1a:8b:f9:c8:71:a7:1f:73:ed:8e:14:cf:01:
2b:0d:d3:59:fc:18:38:d5:64:e0:d0:c7:3e:fa:a3:b9:c5:3b:
25:48:57:46:e5:52:a9:3e:a6:f0:43:53:a1:a8:81:57:8f:7e:
54:cf:0d:dc:06:33:b1:41:a5:85:4e:c8:99:1f:44:31:6a:54:
43:27:15:c3:62:57:f1:d6:f7:8f:cf:8d:10:82:13:b1:f2:f4:
9e:97:4b:b1:ef:91:60:6d:35:36:62:d3:a1:76:86:bc:06:ac:
d4:a0:97:f3:80:93:39:fd:6e:85:3c:a1:7f:5d:d8:03:e1:d7:
c9:8c:62:48:18:f1:a6:14:65:6c:6c:b5:a8:64:91:79:8a:c1:
eb:a5:f9:98:37:fa:26:2b:93:52:4c:e3:e8:7e:61:82:e2:73:
5b:fb:06:4e:f1:56:2b:c7:8e:1e:9d:e6:4d:72:7a:23:d9:e6:
40:e8:11:3d:a7:77:67:f8:65:56:c5:1c:49:47:68:b0:f8:7f:
fe:13:b1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:05:53 2025 by rpki-client