Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
File: qipYxpehRJl2sNEdbxJgJeFAicY.mft (raw, json)
Hash identifier: End3B9aay3VIK/Y9d+JgCeomnaLWYoJs93+dlmJrrR4=
Subject key identifier: CF:05:EC:38:97:E1:5C:02:04:6A:56:CC:E5:A6:53:C8:44:8E:F7:2E
Authority key identifier: AA:2A:58:C6:97:A1:44:99:76:B0:D1:1D:6F:12:60:25:E1:40:89:C6
Certificate issuer: /CN=aa2a58c697a1449976b0d11d6f126025e14089c6
Certificate serial: 01974E209DAAF0837CD8766C1B4017366D01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 06:00:49 +0000
Manifest this update: Sun 08 Jun 2025 06:00:49 +0000
Manifest next update: Mon 09 Jun 2025 06:00:49 +0000
Files and hashes: 1: VAOvYC0rpjyTuLuRBfTKmUOuh7I.roa (hash: 0vjmq1kF1TMQbQcMXUeFVD45hSzNPAtogdVXVCWqxwQ=)
2: iBm_nleUbu7zG2yhTM8e6MdS9CM.roa (hash: 6E9IJHdRNDgzTSIdwSFE5QhmL7tpMyjTB0okAPytvXs=)
3: qipYxpehRJl2sNEdbxJgJeFAicY.crl (hash: Jy65R3lQi83DEjo0X5CLIH2Mhnl5uGRMrM2yTkI42n0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:9d:aa:f0:83:7c:d8:76:6c:1b:40:17:36:6d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa2a58c697a1449976b0d11d6f126025e14089c6
Validity
Not Before: Jun 8 06:00:49 2025 GMT
Not After : Jun 9 06:00:49 2025 GMT
Subject: CN=cf05ec3897e15c02046a56cce5a653c8448ef72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b1:f6:14:85:5a:56:38:a1:65:2a:15:a8:42:
a3:65:4e:a8:99:53:62:da:b1:3e:8d:52:78:f2:7c:
3a:0b:95:2a:1d:8c:fd:e2:ed:c5:6f:2b:92:2a:11:
b9:bc:ec:bc:13:b2:60:90:f5:44:ce:73:8e:99:c6:
23:4b:f7:71:e6:91:1b:f6:e3:58:c3:a1:5b:12:01:
88:86:2c:67:2b:86:29:12:76:88:98:24:99:56:0c:
c3:8b:82:b2:c8:4d:f6:6b:a8:f9:32:27:99:41:f2:
b6:54:6d:23:ab:42:d5:9f:f7:4f:01:1f:16:ec:c2:
a3:8c:7b:4c:20:9b:ad:ec:51:15:44:b3:c4:41:1e:
b2:34:1e:cb:f5:46:0b:09:97:b6:d1:51:bb:d7:ab:
7f:e0:6e:58:8e:ea:16:59:4e:f0:66:c4:89:2e:a5:
88:66:af:94:77:32:97:88:18:3b:b1:2e:e4:d1:58:
b5:bc:cb:b6:15:32:67:c9:06:58:0b:dd:7a:5a:42:
ba:52:e4:3e:68:51:17:fe:9b:82:5f:e7:a8:b2:30:
49:58:22:23:a8:68:ae:f6:05:bb:1a:4a:cb:4e:30:
2c:9e:0b:63:d0:99:3f:b3:c2:83:31:1a:0a:08:38:
f8:11:69:66:8e:01:de:5a:e1:0f:c6:eb:70:7b:09:
25:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:05:EC:38:97:E1:5C:02:04:6A:56:CC:E5:A6:53:C8:44:8E:F7:2E
X509v3 Authority Key Identifier:
keyid:AA:2A:58:C6:97:A1:44:99:76:B0:D1:1D:6F:12:60:25:E1:40:89:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:3e:a4:2d:3b:6d:b4:c9:18:81:09:1c:81:26:c0:06:8f:3a:
3a:24:48:59:ad:d8:d0:a2:e3:43:7e:32:c0:4e:3e:8c:0d:cd:
d2:65:06:a0:7a:2a:3a:dc:f5:6d:8d:bd:4c:3c:e1:c8:b0:e0:
aa:36:c4:52:6c:01:9d:80:f8:4e:83:62:99:5e:45:08:ff:8d:
f3:62:ac:8d:73:d5:64:6c:43:6b:8b:fa:9c:62:00:52:5e:32:
f2:71:a9:ed:ab:5d:83:d6:ed:9e:a1:ac:8c:fe:7f:c8:d3:4f:
ce:12:31:ef:a4:fc:65:d2:ff:bd:85:a4:db:78:3e:09:8c:2a:
a6:35:9c:bf:bf:21:50:4d:65:72:63:61:25:80:fd:e0:83:00:
72:cd:7a:c4:3e:18:47:7c:01:62:5e:2c:1e:75:04:5f:68:23:
d5:4a:c4:4a:3e:63:ee:cf:9f:9a:28:7b:04:74:5d:c1:e0:fc:
1e:f9:71:df:97:67:0b:6d:f0:b4:ad:66:73:5c:63:90:b7:c6:
65:ba:6a:fe:b5:57:59:07:6e:3a:7f:24:82:21:06:40:47:97:
3e:25:3c:59:d2:a8:c3:51:51:1d:0c:f2:66:2f:e2:74:47:06:
76:86:42:20:ab:12:1b:0e:b7:d9:0a:ba:83:19:63:38:7d:e8:
0f:a9:23:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:55:53 2025 by rpki-client