Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft
File: qpB64Zd8I1J6rWZWoUjHA3LpslY.mft (raw, json)
Hash identifier: 2BC3+PztZnG2TNTElWdyshg83ahYFTMUqaLmt9zGynk=
Subject key identifier: DC:88:71:10:A7:4C:F4:DA:24:EB:0B:65:7E:C0:CD:02:C0:34:C6:00
Authority key identifier: AA:90:7A:E1:97:7C:23:52:7A:AD:66:56:A1:48:C7:03:72:E9:B2:56
Certificate issuer: /CN=aa907ae1977c23527aad6656a148c70372e9b256
Certificate serial: 019748FA93EE1554732023EC67EA49EA68F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpB64Zd8I1J6rWZWoUjHA3LpslY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft
Manifest number: 084A
Signing time: Sat 07 Jun 2025 06:01:10 +0000
Manifest this update: Sat 07 Jun 2025 06:01:10 +0000
Manifest next update: Sun 08 Jun 2025 06:01:10 +0000
Files and hashes: 1: ea2Y-dwaT445EGlgfXN8R70YRos.roa (hash: hFopTbVTP9tQkxA8ISdrfSlJKlSYxul+sHm5GKjmi5o=)
2: qpB64Zd8I1J6rWZWoUjHA3LpslY.crl (hash: 6TwQtG2pipjB7TzNkLrlOymFIEweZxGkQCXkbUpqPLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qpB64Zd8I1J6rWZWoUjHA3LpslY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:93:ee:15:54:73:20:23:ec:67:ea:49:ea:68:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa907ae1977c23527aad6656a148c70372e9b256
Validity
Not Before: Jun 7 06:01:10 2025 GMT
Not After : Jun 8 06:01:10 2025 GMT
Subject: CN=dc887110a74cf4da24eb0b657ec0cd02c034c600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ec:08:28:c7:7b:e0:0f:6f:d2:d5:42:db:e9:
83:4d:6b:cb:89:1e:f9:a6:9d:55:e8:55:0f:21:a7:
51:a2:d6:e9:63:c2:d8:c4:b7:b2:99:5a:9a:aa:71:
86:4b:a8:05:a8:f9:7c:d8:1a:98:f7:d7:83:51:ab:
47:3f:a0:3b:59:3a:3e:c4:a3:f1:bf:6f:11:de:17:
03:78:7b:b8:5e:a8:b8:b2:66:12:b2:c3:72:e3:b9:
87:85:68:86:3a:8a:03:b4:2a:73:48:cc:81:25:42:
bf:9a:a3:d7:1b:23:cd:df:91:2b:fc:4d:d9:90:01:
78:f5:1c:6a:46:73:9b:4a:78:aa:1b:d5:91:e4:b6:
3c:04:84:ea:67:17:3e:a6:3f:d0:39:82:85:f6:8d:
16:3e:62:cc:2a:2d:b3:cd:22:ce:09:95:da:d6:6c:
ce:0f:77:47:a9:31:85:d5:5e:a2:ef:ba:29:c7:52:
ff:7a:7f:89:94:ed:17:97:23:d5:8b:36:1c:50:e7:
ce:bc:6f:fc:48:76:66:b4:1b:51:1c:b2:99:1e:21:
5d:cb:cf:02:b3:0d:f9:4f:23:85:47:f3:76:49:bc:
65:26:4f:11:cd:4c:c7:33:32:84:dc:d0:8e:90:c3:
18:2f:9c:fb:b8:ca:59:64:ad:9d:b5:d4:9f:3b:bf:
f3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:88:71:10:A7:4C:F4:DA:24:EB:0B:65:7E:C0:CD:02:C0:34:C6:00
X509v3 Authority Key Identifier:
keyid:AA:90:7A:E1:97:7C:23:52:7A:AD:66:56:A1:48:C7:03:72:E9:B2:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpB64Zd8I1J6rWZWoUjHA3LpslY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:8f:fd:5e:5b:99:a2:bf:df:84:26:95:ec:26:b6:fb:4f:7c:
f2:10:0a:67:97:34:c3:0d:6f:0e:56:fd:a0:59:0a:87:f8:d2:
2b:42:00:57:a7:b9:f2:ba:3d:1e:89:62:af:83:97:30:62:88:
c4:a7:03:79:8a:50:db:db:b7:bf:2b:3e:63:ed:53:60:5f:1b:
e5:f8:ad:69:3d:0e:b7:5b:29:0d:36:9d:7a:ab:96:0c:f7:a4:
c0:6b:f4:da:4d:16:fc:60:a8:e5:ba:ce:4c:5c:d8:26:7a:ad:
6b:cf:72:41:19:a1:72:a8:44:0a:ed:66:c4:68:a0:1b:9d:97:
c7:c3:c7:c9:eb:71:30:b3:e5:7e:7f:e6:cf:4e:09:f6:9a:01:
64:85:1f:eb:2e:ac:55:7a:29:26:7d:ce:47:fb:f5:b9:81:98:
05:0b:73:6c:aa:04:76:f0:93:67:97:2d:c8:ec:1f:73:47:5e:
93:fe:e2:57:9c:fa:f2:2f:2c:85:4b:67:81:0b:63:6f:e8:a0:
ea:62:c3:3f:f6:e3:f2:01:ff:33:e2:f6:10:52:91:f3:59:0d:
5d:48:95:76:55:35:95:f1:2f:6c:a7:47:38:af:ae:83:a0:df:
88:50:4d:35:51:11:27:9b:3a:dd:ed:96:ee:13:ca:c2:ff:27:
8d:3b:18:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:31:10 2025 by rpki-client