Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
File: qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft (raw, json)
Hash identifier: IsvAsuTvPJSwmkFSG12BWEUI47JYoL42jYPyI6182Z4=
Subject key identifier: 86:0C:66:0E:27:01:56:E6:53:DE:FA:98:EB:D6:5D:49:EC:5B:5D:4F
Authority key identifier: A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
Certificate issuer: /CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Certificate serial: 019747B0FAE2FB752F92A0D3350825A42F36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
Manifest number: 0ABB
Signing time: Sat 07 Jun 2025 00:01:10 +0000
Manifest this update: Sat 07 Jun 2025 00:01:10 +0000
Manifest next update: Sun 08 Jun 2025 00:01:10 +0000
Files and hashes: 1: eZOZdw0xvypBF51rN4RfpY5h6vA.roa (hash: Rrqkszl7rnzrAJTcRtFLjvZXJPc9ZovjcSYFWUvutzY=)
2: hefvQQC5HBlbQ-EPV5xNwJ9mr8s.roa (hash: Ud9jnh2NMlpw3d8NsGfrdGK8oljkEFrFbqnJTHG6eJE=)
3: qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl (hash: /SBdyCMHdkHPZAywn5B/Q4mq6pCIMRntFqL2SE03CC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:fa:e2:fb:75:2f:92:a0:d3:35:08:25:a4:2f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Validity
Not Before: Jun 7 00:01:10 2025 GMT
Not After : Jun 8 00:01:10 2025 GMT
Subject: CN=860c660e270156e653defa98ebd65d49ec5b5d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:03:68:2b:40:4e:75:70:8d:2b:c3:a0:d8:25:
ca:2a:55:30:bb:c3:89:60:4a:3f:82:a6:c7:f2:77:
71:56:80:95:ef:4b:b2:b6:4c:3f:d0:44:0b:6e:17:
3a:6e:14:99:f0:48:db:f1:3f:a4:ac:0f:3b:0f:32:
fd:2b:ec:c3:85:58:7e:0f:7a:c1:7a:a4:c4:6e:f0:
a5:e3:06:65:d4:11:9e:d5:5f:0a:cf:93:94:4e:b6:
5a:d9:e9:fc:44:4f:de:9c:af:7c:5b:65:72:c6:c9:
fa:e7:17:35:5c:fa:d7:be:91:19:ba:81:a3:0e:5c:
0e:2b:f0:ce:9d:99:02:bb:77:b7:3b:4d:7a:89:cf:
65:09:28:3f:1e:8d:ba:05:7e:30:43:69:3c:34:9e:
1b:25:21:55:06:5e:75:90:ae:c3:ec:c8:81:33:a8:
0e:4b:b6:91:f1:c5:ab:f5:25:05:2b:37:27:22:49:
59:1a:1f:49:bd:8a:a1:2e:d5:67:6a:9e:25:9d:76:
69:b8:25:fe:f0:ff:bf:08:e4:dc:af:ed:1f:c4:47:
18:ff:eb:ac:73:4b:a1:53:9f:28:be:f0:4c:79:9b:
41:62:79:49:55:ac:20:2d:0e:3c:b2:b5:f9:1f:67:
79:ce:17:7e:a6:0f:d2:11:77:84:ac:8d:ad:45:16:
83:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:0C:66:0E:27:01:56:E6:53:DE:FA:98:EB:D6:5D:49:EC:5B:5D:4F
X509v3 Authority Key Identifier:
keyid:A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:9c:d8:7c:b3:0e:5e:9b:ae:b5:f5:a0:9d:25:0a:3c:bb:1a:
e9:c7:64:ce:b4:2f:61:85:b1:ba:ae:3e:50:a2:89:b6:9c:37:
8f:97:be:a7:8c:4f:63:2f:0b:f6:50:67:f1:10:dd:55:a4:c0:
ec:d1:66:8d:a7:b4:0c:09:ae:38:6c:c8:8e:53:df:42:0d:7b:
df:df:a3:6a:a4:1f:f4:8e:24:7b:da:e7:96:5f:af:1d:20:b7:
9c:0d:12:ff:a4:67:ce:26:55:b2:01:71:d8:42:6a:1c:57:18:
d5:7b:ca:f5:42:e0:46:c9:88:46:78:2d:e6:6f:5c:a7:40:22:
e0:10:8a:bb:f0:f9:ae:ed:20:2d:06:fd:fb:86:ff:3c:1c:6f:
17:bc:1f:6d:bd:19:46:01:ba:c4:1b:20:bd:e4:a2:0a:c0:09:
65:55:ef:70:59:2a:09:eb:ed:9a:0a:8e:24:6f:80:93:96:e2:
37:5c:79:c0:c0:4a:43:00:e8:4c:26:c6:73:7f:77:58:ef:0c:
71:9f:44:bb:02:10:e2:81:e7:d6:b6:ed:ef:4e:ca:2f:9c:f4:
5d:14:fe:39:48:74:73:e0:f6:7f:dd:07:c6:a7:13:df:bd:af:
c9:33:49:2d:4d:46:db:b1:4e:50:52:5c:43:7a:f4:7c:60:60:
0a:8b:52:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:10:13 2025 by rpki-client