Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
File: qeC20TzRHzYRT6mEAzgElByC8UM.mft (raw, json)
Hash identifier: 70nhzhKFKPKoSL4acibmBp4jVj89wy2llbh8YYXJqBo=
Subject key identifier: 69:AF:08:B8:76:F6:99:3F:C4:E1:79:36:9A:8F:D7:A1:05:8D:FB:CC
Authority key identifier: A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43
Certificate issuer: /CN=a9e0b6d13cd11f36114fa984033804941c82f143
Certificate serial: 019769CEAEEEAEC01E4AB543392B33FA7562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
Manifest number: 1168
Signing time: Fri 13 Jun 2025 15:00:42 +0000
Manifest this update: Fri 13 Jun 2025 15:00:42 +0000
Manifest next update: Sat 14 Jun 2025 15:00:42 +0000
Files and hashes: 1: lO3U7O5xn_SH8biBa02wbaj6rwE.roa (hash: Ur2/ddmmedYhTdeyhrYUxfNHrSlslVFvOy6wD+8Tc1U=)
2: qeC20TzRHzYRT6mEAzgElByC8UM.crl (hash: mEwBOnrewIX7AQLI5WfpGgZo3TFyWva3boJ4kfvNdxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:ae:ee:ae:c0:1e:4a:b5:43:39:2b:33:fa:75:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9e0b6d13cd11f36114fa984033804941c82f143
Validity
Not Before: Jun 13 15:00:42 2025 GMT
Not After : Jun 14 15:00:42 2025 GMT
Subject: CN=69af08b876f6993fc4e179369a8fd7a1058dfbcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ad:8d:83:73:83:fa:32:88:bb:de:db:4b:26:
77:de:3c:38:b1:15:35:f1:3d:e9:6d:95:bc:92:cb:
9f:27:6e:ae:9c:0b:09:08:d6:c1:79:d6:8e:c7:be:
8e:dd:3e:b3:62:ac:0e:75:28:21:a3:0b:48:da:3d:
88:89:4c:ab:10:92:92:8b:3f:09:1c:a5:a3:a9:69:
94:c3:87:de:c6:58:77:be:a8:b4:62:6a:32:8e:ee:
ee:ba:5b:10:5e:1b:76:0e:c2:cc:cc:f7:dc:40:a2:
c2:69:38:2a:95:68:26:c5:d1:8b:23:b5:5f:d3:70:
23:f2:b0:c8:3a:45:47:22:fb:dc:ef:2a:35:e9:c3:
f4:15:4a:66:9f:2f:5b:5b:88:95:22:d6:75:c4:52:
19:a4:13:0c:00:1d:98:39:d3:ee:0b:ba:3a:66:86:
87:b6:c0:74:11:a8:bd:cc:be:1d:48:4f:1b:92:a5:
2e:c5:88:e0:05:e1:14:d7:11:bf:77:5f:61:e2:28:
8c:64:5e:ee:98:8b:13:14:3c:7c:6e:d6:dd:e6:e6:
85:6b:a7:40:9d:19:9e:62:93:53:c0:66:59:b8:97:
bf:dc:40:91:9d:22:2e:3c:22:09:23:9f:5a:62:99:
ee:05:0c:e3:4b:91:f3:6c:a5:e9:ab:75:40:c4:55:
a8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AF:08:B8:76:F6:99:3F:C4:E1:79:36:9A:8F:D7:A1:05:8D:FB:CC
X509v3 Authority Key Identifier:
keyid:A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:90:49:90:bd:0f:52:e1:c3:42:01:70:50:bf:c6:c8:09:b7:
16:7e:04:1d:9e:90:c2:77:dd:39:00:12:30:8a:ec:f7:dd:2d:
d3:89:32:c0:9b:ed:dd:14:8b:bf:80:05:e4:71:aa:de:0c:7d:
5e:0b:42:0c:95:f4:7b:c8:e2:b9:79:46:b7:19:1f:a8:0f:ce:
e8:5c:d8:81:fa:00:59:8f:a5:d6:3c:09:36:0a:e6:4a:a4:b6:
67:9b:86:bf:1b:7b:37:5a:3f:43:e4:97:1f:55:bf:16:f3:fc:
ec:1d:21:aa:b9:90:f4:aa:34:a7:9c:19:98:fe:55:4e:81:01:
7f:a9:35:c0:e3:dd:4a:ef:85:2e:4a:37:bc:b0:8e:e9:66:b5:
4a:8f:11:38:0c:3f:bd:17:0e:f7:9b:22:cc:2c:49:d8:f2:ed:
60:26:b1:e2:7f:b2:18:23:67:54:b1:54:74:2c:9c:10:d8:99:
a4:19:fa:e4:56:5b:69:d5:80:9c:7d:04:af:e8:54:bd:a3:9b:
73:fb:ce:5a:b4:88:76:80:53:bd:a8:9c:54:fa:b9:e6:54:fe:
69:a9:f1:36:b0:8b:31:91:9d:65:cf:e0:1c:93:5b:cc:6a:f3:
8a:d6:a7:40:24:1f:63:9a:13:64:a7:2f:a4:24:b2:63:07:a6:
31:04:48:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:42:40 2025 by rpki-client