Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
File: qeC20TzRHzYRT6mEAzgElByC8UM.mft (raw, json)
Hash identifier: 4UexidlgYxZZPD8V0ht4kR+RmIJJ6J8Ir8xmGTi56xg=
Subject key identifier: 7E:EF:73:F8:E9:BE:9C:D4:CF:8F:F2:57:05:E0:EE:41:32:9E:2D:E9
Authority key identifier: A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43
Certificate issuer: /CN=a9e0b6d13cd11f36114fa984033804941c82f143
Certificate serial: 01975E3817BD24E0B61327A8920F5494B399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
Manifest number: 1162
Signing time: Wed 11 Jun 2025 09:00:23 +0000
Manifest this update: Wed 11 Jun 2025 09:00:23 +0000
Manifest next update: Thu 12 Jun 2025 09:00:23 +0000
Files and hashes: 1: lO3U7O5xn_SH8biBa02wbaj6rwE.roa (hash: Ur2/ddmmedYhTdeyhrYUxfNHrSlslVFvOy6wD+8Tc1U=)
2: qeC20TzRHzYRT6mEAzgElByC8UM.crl (hash: QtRgr51jMC4B0lKQD+YrZ4ZW17nSbhZIWmqtBxMbE0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:38:17:bd:24:e0:b6:13:27:a8:92:0f:54:94:b3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9e0b6d13cd11f36114fa984033804941c82f143
Validity
Not Before: Jun 11 09:00:23 2025 GMT
Not After : Jun 12 09:00:23 2025 GMT
Subject: CN=7eef73f8e9be9cd4cf8ff25705e0ee41329e2de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3e:8e:b3:bf:ca:38:03:e8:9d:4e:51:aa:55:
11:0f:07:ae:bb:59:a4:68:74:35:a4:4c:a1:f9:b6:
ea:85:24:45:c9:d4:73:c1:58:9b:71:fe:57:bf:02:
af:52:82:73:d2:c6:1c:2e:da:e2:7b:3b:bd:64:14:
61:8f:f4:d7:33:af:f6:8e:2d:37:dd:7e:3a:a6:e1:
1c:bc:58:58:81:ee:53:60:a5:5a:ee:69:76:8e:e2:
13:0a:29:88:44:ae:53:8a:88:25:56:3d:1f:33:b7:
7d:af:10:1c:cb:7b:0c:9c:e9:f3:39:9e:05:b7:12:
e7:48:f9:39:ce:3a:4c:66:83:49:f7:b1:6c:27:f6:
77:0c:b3:a3:18:4b:98:fc:98:71:2e:ad:0d:30:7d:
d7:16:0c:dd:36:bb:5a:9c:2b:26:87:4b:ed:0b:4d:
d2:ee:e2:bb:39:73:3d:b0:a8:19:03:c6:c6:af:4b:
0a:30:36:88:6a:cb:f5:9d:0b:67:7b:33:de:0e:59:
4a:31:dd:ac:b1:c0:bc:41:df:66:ac:50:c7:87:56:
79:13:6b:5b:58:32:7a:56:db:0c:94:ed:cc:97:f2:
5f:86:63:51:c3:c8:e2:ed:a8:fd:ca:82:68:b1:ad:
43:97:b8:91:0b:49:4a:21:85:6e:c4:bb:a7:94:98:
81:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:EF:73:F8:E9:BE:9C:D4:CF:8F:F2:57:05:E0:EE:41:32:9E:2D:E9
X509v3 Authority Key Identifier:
keyid:A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:fb:34:80:2e:49:6d:26:a9:f7:48:f7:a9:5b:70:bf:67:59:
3d:ad:7e:19:ac:8f:26:a0:55:59:8e:95:ad:3d:52:19:14:d7:
a0:25:e6:bb:0e:2e:e0:ed:27:a9:3f:61:a8:58:5e:c6:fe:f3:
b3:cd:3e:f5:89:26:9a:36:50:35:7d:e4:b2:38:db:ab:00:da:
95:73:1d:a1:9b:67:ef:70:28:d6:da:45:68:f3:ec:c1:c2:9e:
e0:87:29:83:99:73:6f:5d:ff:33:81:b9:ec:7d:8a:7c:77:76:
dc:53:c0:87:88:39:b3:03:c9:f7:76:23:fb:e4:d6:60:f7:28:
7b:0f:76:ee:de:88:4a:74:40:41:5c:c2:9d:32:c8:be:7e:cd:
1f:19:bf:25:84:97:a3:24:e9:4e:04:7e:93:a9:34:32:f6:45:
08:0d:6a:35:23:18:5a:24:b8:29:3f:e1:1d:a4:8f:a7:58:9c:
f7:c9:c7:8c:67:45:ad:fc:60:98:e7:dc:4e:fe:74:8a:ff:9b:
37:cd:af:ae:d3:07:e8:0c:0c:e0:cc:ae:bc:07:de:27:a6:da:
28:25:c3:82:09:b3:80:c1:af:02:ff:31:3c:30:f2:f5:8d:ea:
11:4d:87:ce:87:ea:88:07:35:68:fd:b9:6a:58:5d:56:8f:7a:
cf:81:79:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 10:57:23 2025 by rpki-client