Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
File: qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft (raw, json)
Hash identifier: JNuyKAiAjvrSty/Wflrit17QZ1ylCxnlX7+FH5l/4P0=
Subject key identifier: 7D:3A:38:1F:0A:94:3D:B7:08:FD:7C:5B:C4:D6:DA:A2:3D:81:2C:43
Authority key identifier: A8:D5:2C:C8:70:60:6A:3F:3F:32:C0:FF:F9:7C:F6:93:1F:A6:5C:A3
Certificate issuer: /CN=a8d52cc870606a3f3f32c0fff97cf6931fa65ca3
Certificate serial: 0197499F50C96BCB8895E45EA0A6E85055A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
Manifest number: 11D9
Signing time: Sat 07 Jun 2025 09:01:07 +0000
Manifest this update: Sat 07 Jun 2025 09:01:07 +0000
Manifest next update: Sun 08 Jun 2025 09:01:07 +0000
Files and hashes: 1: 9Usz5mjL7Eqg2BKdlKm61_qGXA0.roa (hash: tm7XoNOtROJxqpd0QLHAYI1n3J02MIzjMbI9J6S5daM=)
2: hYQ5Af5d91S_vu2hLfWPZokf1ds.roa (hash: b+J2iWbiq5H0kTA4RnCVkz8UkglYOscwMixBlHnjvIw=)
3: htWv83j5mtpGTlM4Lw1xIRvmIbk.roa (hash: cnK1fN2lnd7WvHE3Ad4lixpuor2/4VBvsHu1sSW/tYg=)
4: qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl (hash: paMd/WEnsLWgXVEyJRAYXTPRGEXGf3FJCe/fJURJtPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:50:c9:6b:cb:88:95:e4:5e:a0:a6:e8:50:55:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8d52cc870606a3f3f32c0fff97cf6931fa65ca3
Validity
Not Before: Jun 7 09:01:07 2025 GMT
Not After : Jun 8 09:01:07 2025 GMT
Subject: CN=7d3a381f0a943db708fd7c5bc4d6daa23d812c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f0:d1:e6:93:eb:37:7d:cb:7f:0f:17:41:aa:
4c:f1:57:7e:9e:d2:c8:67:5e:2b:af:40:ea:03:31:
57:1c:0c:03:84:99:c2:e0:81:4c:8e:78:3b:2e:23:
14:27:65:59:75:d4:0b:a7:84:7a:0e:af:ac:eb:37:
fe:3f:f9:2b:2e:c6:af:9b:f7:e8:f4:86:e8:75:4b:
6b:e6:aa:d7:20:4a:9f:15:12:52:2b:1a:fa:fe:71:
be:eb:06:7b:54:31:37:9d:bb:d6:85:3d:f1:61:c2:
b7:db:27:bf:3f:16:ff:6f:24:b0:6e:cd:80:08:58:
f8:39:cb:cf:be:a2:3e:ab:2e:cc:ac:a4:83:d1:71:
27:d9:d0:d6:e8:92:ad:b7:8b:1e:04:e4:50:37:f2:
96:a0:4f:67:bf:0b:90:42:38:92:a0:e2:24:50:f2:
b4:e0:43:c8:ef:c0:2c:22:42:49:5b:e7:b3:05:ff:
d2:2d:82:2c:0c:f2:47:b1:fc:2f:a8:99:28:45:74:
51:2c:77:fe:4d:37:43:8e:9e:cf:75:0d:44:1a:4f:
18:d7:52:c2:9b:81:e3:ff:6f:6f:33:5e:b2:0d:3b:
d2:90:93:4b:97:94:7e:ae:34:b3:ad:5c:32:86:4e:
d5:c9:59:97:27:7d:95:79:95:b2:6b:5c:74:b7:2d:
35:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3A:38:1F:0A:94:3D:B7:08:FD:7C:5B:C4:D6:DA:A2:3D:81:2C:43
X509v3 Authority Key Identifier:
keyid:A8:D5:2C:C8:70:60:6A:3F:3F:32:C0:FF:F9:7C:F6:93:1F:A6:5C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:bf:fe:d7:06:83:6b:7c:e8:69:18:c8:3b:43:4e:ad:5e:ed:
11:5d:8f:18:bb:f6:25:80:2b:56:5c:52:16:ef:d9:73:65:d0:
e3:0b:5b:e1:62:3f:58:07:aa:de:1c:78:f5:c3:b4:54:40:cd:
69:50:ca:8d:32:1a:56:a5:a0:48:80:de:55:f3:ec:12:c7:3d:
bd:03:84:f7:ed:e0:36:a1:58:d5:bf:5d:50:42:71:62:bf:f7:
09:73:d6:54:11:e5:d4:51:f0:b4:56:94:4d:09:3f:7a:1d:07:
c6:a8:ff:c9:fa:43:4b:84:b3:47:63:1f:38:a6:77:97:7a:18:
d6:fd:fc:3b:70:aa:a2:5f:93:26:22:27:24:be:dd:38:d5:51:
e4:8e:cb:66:db:68:75:21:c1:cf:55:88:ac:8e:e0:c4:0e:70:
bb:e9:71:f6:a5:73:af:d3:41:56:e1:59:df:dc:72:65:59:70:
7f:2d:01:32:31:5e:4c:f9:61:72:57:f3:e2:6d:12:bd:85:bf:
a6:63:e9:9c:49:32:9c:ad:d1:95:7a:eb:cd:c0:52:0c:75:1f:
0f:3e:1f:ef:38:b9:61:9a:fa:e2:67:f5:5e:58:1b:98:89:18:
51:1a:a7:8e:9b:be:9b:ea:73:63:8c:bf:0c:cb:80:93:8d:0f:
85:81:bf:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:42:17 2025 by rpki-client