Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
File: qeC20TzRHzYRT6mEAzgElByC8UM.mft (raw, json)
Hash identifier: QDL15vdlNK/ScxGcQl5HRZ5PyGqFBYaYoRDk/1Z0qPE=
Subject key identifier: 65:44:BE:89:09:CB:87:58:A5:0A:69:28:20:D0:87:A8:10:93:DF:26
Authority key identifier: A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43
Certificate issuer: /CN=a9e0b6d13cd11f36114fa984033804941c82f143
Certificate serial: 01975C4A5F85FD5267AFDA7132EA4FC61048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
Manifest number: 1161
Signing time: Wed 11 Jun 2025 00:01:07 +0000
Manifest this update: Wed 11 Jun 2025 00:01:07 +0000
Manifest next update: Thu 12 Jun 2025 00:01:07 +0000
Files and hashes: 1: lO3U7O5xn_SH8biBa02wbaj6rwE.roa (hash: Ur2/ddmmedYhTdeyhrYUxfNHrSlslVFvOy6wD+8Tc1U=)
2: qeC20TzRHzYRT6mEAzgElByC8UM.crl (hash: dgG8zl6PvF9ZjoA6/OkwdrpjB3damztg4cTIxTrgK9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:4a:5f:85:fd:52:67:af:da:71:32:ea:4f:c6:10:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9e0b6d13cd11f36114fa984033804941c82f143
Validity
Not Before: Jun 11 00:01:07 2025 GMT
Not After : Jun 12 00:01:07 2025 GMT
Subject: CN=6544be8909cb8758a50a692820d087a81093df26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8a:8a:c8:77:c6:ef:75:8b:4a:1b:e2:61:cc:
a3:9f:01:a7:10:e5:01:8a:e1:7c:61:f3:02:26:64:
1b:d7:e2:d0:e5:18:0f:23:4d:51:18:3b:16:a8:a4:
2a:8a:81:e5:c7:af:0a:b6:2d:83:f8:f9:77:13:ee:
4a:62:f9:82:8e:56:aa:8c:66:67:5a:51:16:cc:74:
89:4b:f7:fb:10:50:dd:6e:69:3c:51:1d:43:33:d8:
08:2f:74:ea:11:36:54:4b:9c:14:d2:72:f2:58:77:
f0:d3:38:6f:d0:e3:60:46:57:08:ee:ba:21:1a:a5:
20:b1:20:51:2a:70:a4:ac:9d:67:eb:d0:a9:61:45:
f5:56:b3:8c:8b:06:07:02:6d:d1:ae:2b:2d:72:d3:
f1:d5:5f:11:ae:e7:91:d5:d5:d9:40:95:58:b3:fa:
8f:b4:76:ff:78:17:26:c6:f0:73:ee:e6:1c:d8:f1:
3d:26:ec:a4:10:42:dd:1b:e9:61:9a:1d:c7:e6:2c:
21:68:2b:02:af:11:4a:46:98:db:86:a0:5c:c8:26:
55:75:4e:d2:b2:ef:b7:28:49:ff:a2:fd:bf:6c:8b:
62:2b:14:78:24:b0:ae:6e:27:d4:94:6e:93:bd:5c:
3b:8e:26:6a:42:a4:88:ba:0e:79:b3:7b:4e:3e:0d:
c5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:44:BE:89:09:CB:87:58:A5:0A:69:28:20:D0:87:A8:10:93:DF:26
X509v3 Authority Key Identifier:
keyid:A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a3:93:e4:98:a6:4a:96:58:c8:19:56:d3:d4:9c:42:77:f0:
04:85:7b:81:4d:72:8a:b3:9a:fc:1e:1a:c6:a9:72:0d:9f:a1:
be:a1:8e:7a:d5:b4:5e:02:35:17:62:b6:70:ee:56:98:eb:7a:
47:1b:33:35:49:0f:4e:93:04:e2:2c:ac:c0:c8:a7:10:99:ca:
33:19:e8:d9:11:45:fc:4f:7c:c1:12:fe:b9:cf:03:3e:96:ac:
83:9a:2e:5a:c4:9e:60:6b:6f:93:16:a0:0a:d4:c4:b2:b4:a0:
f3:fe:52:92:34:37:fb:e0:82:08:a2:61:b2:51:a5:34:1b:97:
47:bb:93:60:22:38:52:93:38:75:eb:4e:33:ab:d4:eb:bd:e9:
27:fd:68:af:20:23:4d:e3:8b:3b:e5:f7:50:68:c7:97:db:89:
01:67:0c:ee:33:5f:8b:96:00:5d:32:7a:6d:e8:fc:63:8b:2e:
24:99:90:d8:0c:d7:16:da:da:fe:c1:2d:bc:c1:1c:41:73:71:
b7:95:94:a0:76:78:8d:75:58:57:7a:61:97:4e:e6:31:93:bc:
85:b4:d7:a0:10:67:59:39:fb:e0:64:72:60:fc:05:17:88:aa:
d3:46:7b:a7:20:38:ec:3c:12:09:7b:1f:83:0a:e8:09:49:12:
20:61:2a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 08:44:59 2025 by rpki-client