Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
File: qqxhl3mf1otuW74LV-ZS_YDdNiE.mft (raw, json)
Hash identifier: 22y0jffKwu4mItAa2mhFSVws3lV6mGAtRnAmu4ijOFo=
Subject key identifier: ED:A2:65:93:50:10:2C:F4:18:2E:15:3C:7D:71:E3:0D:1F:24:AF:EC
Authority key identifier: AA:AC:61:97:79:9F:D6:8B:6E:5B:BE:0B:57:E6:52:FD:80:DD:36:21
Certificate issuer: /CN=aaac6197799fd68b6e5bbe0b57e652fd80dd3621
Certificate serial: 019751FCF23C268489AF837D4C37CEB53E94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
Manifest number: 016E
Signing time: Mon 09 Jun 2025 00:00:20 +0000
Manifest this update: Mon 09 Jun 2025 00:00:20 +0000
Manifest next update: Tue 10 Jun 2025 00:00:20 +0000
Files and hashes: 1: HW--gyFyIjJfbbNnSxJATPWJGEI.roa (hash: shKJNjvcZlh2Drp2JswFM6L89Fwml75F7pDB0H15/3Q=)
2: qqxhl3mf1otuW74LV-ZS_YDdNiE.crl (hash: TJKTSS6vQqcB67pc1QpKb1DsK/J4rLJq2NoW4jiEFwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:fc:f2:3c:26:84:89:af:83:7d:4c:37:ce:b5:3e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaac6197799fd68b6e5bbe0b57e652fd80dd3621
Validity
Not Before: Jun 9 00:00:20 2025 GMT
Not After : Jun 10 00:00:20 2025 GMT
Subject: CN=eda2659350102cf4182e153c7d71e30d1f24afec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d1:68:2b:b9:35:58:27:1b:85:99:84:f1:1d:
13:87:99:b1:0f:d3:2e:f5:0b:44:67:1a:bf:e9:14:
c5:d2:f4:18:23:14:d7:fd:68:c6:55:38:6c:25:10:
49:28:58:c0:02:8b:de:f7:d0:dc:e2:66:1f:ad:4a:
a1:a0:9d:23:b6:00:7c:f3:02:58:15:50:d7:e3:1b:
51:5b:03:54:05:ab:be:8d:ae:7f:63:23:3d:8d:4d:
39:ce:a3:2c:df:a7:1f:1d:28:bd:ed:3b:fa:0b:f6:
06:9d:99:47:cb:e5:a9:d8:22:a7:66:dc:2f:36:51:
a9:a5:1d:4b:d0:cd:79:7e:ee:71:e1:2e:f6:52:f0:
9a:e2:f8:6a:99:ed:71:c1:4a:07:18:ed:42:2e:ef:
97:69:43:89:fb:7d:e1:e5:bd:b0:36:47:04:5e:70:
ca:e7:aa:1e:dc:5e:6a:2a:82:fa:b0:51:4b:3a:a9:
cd:03:dd:97:9f:bf:47:45:52:dd:89:66:68:ca:65:
73:8f:56:ce:16:5e:5e:bd:ef:36:b7:f6:1b:c2:95:
24:63:ba:3a:59:7f:74:10:31:f1:9b:8f:65:f0:a1:
4b:c3:12:7b:46:78:45:a2:72:25:78:0d:0d:1b:3a:
14:3b:59:34:b8:1e:58:6e:d5:08:15:27:e1:9f:fd:
3b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A2:65:93:50:10:2C:F4:18:2E:15:3C:7D:71:E3:0D:1F:24:AF:EC
X509v3 Authority Key Identifier:
keyid:AA:AC:61:97:79:9F:D6:8B:6E:5B:BE:0B:57:E6:52:FD:80:DD:36:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:6b:96:78:8b:03:5a:0e:ec:8a:fe:20:c8:ca:3d:ea:a4:78:
0a:16:e9:d2:7b:98:66:7c:76:c6:0d:ac:4d:7e:95:c6:d0:c0:
6f:a1:73:d3:60:86:64:c8:11:62:66:f4:5e:5b:cb:38:a4:94:
87:7c:34:d6:12:48:d4:aa:eb:64:7a:05:74:13:94:41:09:ed:
ad:3a:d3:bd:d3:69:33:33:5c:f9:83:98:a9:f1:06:34:d8:98:
08:d7:9b:b9:0f:87:a9:ca:3d:cc:58:3a:c3:c0:c4:7f:55:b4:
6e:51:26:1a:16:66:fd:2f:99:0b:c6:dc:36:dc:84:0d:03:2c:
55:59:69:fa:b9:90:91:90:fb:88:89:3c:30:91:04:1f:e1:75:
14:fb:fa:55:aa:e0:76:0e:05:f6:e2:4d:2b:20:ef:0d:2f:51:
eb:85:75:05:79:7a:b0:96:3f:e4:93:0b:5f:a1:11:59:6a:61:
cb:65:0b:eb:41:c1:c6:00:ee:26:f0:10:a9:9c:85:35:24:01:
e4:09:9f:5e:c8:0c:ce:54:02:fb:ce:dc:a1:42:df:59:22:a9:
75:bc:9b:f8:3c:eb:43:e4:26:27:fe:9d:46:8f:29:1f:a7:84:
52:66:a4:28:0a:9c:ac:54:4a:95:09:7a:d7:63:37:40:ca:d2:
52:41:8e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:50:31 2025 by rpki-client