Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft
File: qLq2HDYOoQjNGSx856ftVWW9--A.mft (raw, json)
Hash identifier: afLWrTn19swOzG4hCKpcb+gSrF12hgTZg8ouEbRDxYc=
Subject key identifier: 73:B6:F8:D4:4E:1E:8D:7D:07:70:BF:9B:B1:D4:0F:22:53:EE:02:EB
Authority key identifier: A8:BA:B6:1C:36:0E:A1:08:CD:19:2C:7C:E7:A7:ED:55:65:BD:FB:E0
Certificate issuer: /CN=a8bab61c360ea108cd192c7ce7a7ed5565bdfbe0
Certificate serial: 019748FA18F66DACB0FE32E7D4165D8E29DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft
Manifest number: 0CF2
Signing time: Sat 07 Jun 2025 06:00:39 +0000
Manifest this update: Sat 07 Jun 2025 06:00:39 +0000
Manifest next update: Sun 08 Jun 2025 06:00:39 +0000
Files and hashes: 1: llKmEV0JVzIG0_MZWPlP8ygpeC0.roa (hash: jPaOJ8ND+JyHLtdhEIszWBX4EhT8804ihxPfOvX+M6g=)
2: qLq2HDYOoQjNGSx856ftVWW9--A.crl (hash: w1qjd5ae+CpUbjq0xBEYSzZP7lfE1oio5A64z5GDFwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:18:f6:6d:ac:b0:fe:32:e7:d4:16:5d:8e:29:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8bab61c360ea108cd192c7ce7a7ed5565bdfbe0
Validity
Not Before: Jun 7 06:00:39 2025 GMT
Not After : Jun 8 06:00:39 2025 GMT
Subject: CN=73b6f8d44e1e8d7d0770bf9bb1d40f2253ee02eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:59:b6:82:89:7a:ba:91:f6:7c:29:56:15:d3:
15:ef:87:9a:72:e9:67:39:85:12:fc:04:24:fa:5b:
19:d4:7b:46:8c:47:5b:93:53:a1:da:93:55:76:92:
3e:27:09:13:c2:8e:4e:fd:76:67:9e:ed:b0:b6:81:
0d:d6:33:ab:1e:ea:ff:27:2a:91:53:f0:4a:36:a6:
1a:c3:a4:bd:f6:81:a0:c1:c8:46:4a:3b:af:e0:da:
2b:8a:f5:5c:d1:74:16:d8:8c:d3:71:7a:b2:ec:29:
09:e7:6d:a2:b3:14:d3:6a:f3:44:92:34:78:52:8a:
27:ca:3d:89:da:a8:6f:d8:a7:be:66:d7:ca:73:23:
df:26:64:7b:15:9d:b9:88:4b:9a:2c:3e:bb:8a:20:
9f:a0:4c:13:7f:a5:2e:dc:88:92:c1:4b:b2:55:e9:
2b:d9:48:2b:ec:95:66:1e:4c:f6:b5:16:ad:27:ce:
d9:0c:f0:35:45:cf:80:9e:56:6b:9d:28:0a:a0:1f:
09:b7:2e:32:5f:15:6a:d5:38:1d:ab:32:69:59:37:
59:be:28:26:bc:68:8b:6f:4f:e5:8f:dd:ca:e8:1c:
7c:df:a3:e2:e7:c9:16:7c:a4:48:8e:5e:8e:3a:ed:
8a:b2:d1:72:51:52:0e:27:c2:2a:55:a1:e3:85:95:
dd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B6:F8:D4:4E:1E:8D:7D:07:70:BF:9B:B1:D4:0F:22:53:EE:02:EB
X509v3 Authority Key Identifier:
keyid:A8:BA:B6:1C:36:0E:A1:08:CD:19:2C:7C:E7:A7:ED:55:65:BD:FB:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:07:23:d7:a3:79:17:29:0d:59:0f:c3:65:d6:e9:7d:af:ec:
e8:3a:ee:40:df:65:09:0a:ea:d8:e4:29:45:d7:00:37:f7:77:
55:5c:71:cf:e4:d9:20:cc:22:7b:79:a5:0c:99:b6:33:2b:8b:
40:c6:a5:89:92:6a:13:88:29:e8:84:c1:12:c6:04:e4:62:c9:
9f:87:14:7b:cd:ce:95:7c:1d:08:4e:28:51:40:56:1e:09:34:
f4:9b:8b:eb:3a:11:11:b0:ae:ce:89:a0:2d:21:61:04:6a:8e:
f2:c4:54:5c:81:5c:73:5a:06:91:2b:d5:41:fb:ae:eb:fb:6c:
47:be:76:b1:5d:97:0d:d3:25:7a:a8:32:04:df:c1:c4:6f:cf:
aa:55:a4:68:e2:f4:f5:fa:91:b1:02:f5:88:7b:aa:4c:58:21:
49:72:19:30:7f:10:48:28:7f:92:4c:f7:7c:93:67:b7:a1:c1:
4b:fd:5f:b4:27:07:ad:f3:84:b9:59:c0:a0:5e:00:70:ad:6c:
2b:30:fb:4f:6b:df:17:39:fd:7b:db:aa:a6:73:d2:e7:f6:95:
b3:28:13:a2:74:15:27:2a:d1:4d:3d:30:59:d1:cf:14:59:db:
15:25:86:e0:03:e7:29:9c:4a:70:48:9f:87:32:ac:dd:6a:81:
8d:e3:3d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:18:15 2025 by rpki-client