Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
File: Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft (raw, json)
Hash identifier: vXrbsQTCfqpNLjb62C/MH+yd1+R6bfGxyOpfYPVVdPY=
Subject key identifier: FC:7A:5F:11:BE:0D:C7:63:96:38:21:7B:12:C3:D1:B8:7E:94:96:C4
Authority key identifier: 43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24
Certificate issuer: /CN=43cf416193a1c2ed3056b647e5a46503148e3824
Certificate serial: 01974D0D7F7C2FD8202AB9C24BBBEC05B97B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
Manifest number: 063E
Signing time: Sun 08 Jun 2025 01:00:19 +0000
Manifest this update: Sun 08 Jun 2025 01:00:19 +0000
Manifest next update: Mon 09 Jun 2025 01:00:19 +0000
Files and hashes: 1: EVfs3Ty5us2kONM9lNbKxeOpQy4.roa (hash: XNAy20rJW1bN/SCZtyAydEWkC3qMnBorsPnV2qCqZ6A=)
2: Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl (hash: hMW3g9jZSMDTC0rgyGEEWEGdE07cmqiw2Huv11JWWLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:7f:7c:2f:d8:20:2a:b9:c2:4b:bb:ec:05:b9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43cf416193a1c2ed3056b647e5a46503148e3824
Validity
Not Before: Jun 8 01:00:19 2025 GMT
Not After : Jun 9 01:00:19 2025 GMT
Subject: CN=fc7a5f11be0dc7639638217b12c3d1b87e9496c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:14:0a:ee:31:ac:94:6f:85:14:e6:c9:0c:1e:
04:57:37:bc:c6:98:ec:92:16:92:32:c9:91:54:57:
be:d7:2b:7a:ab:e2:36:77:09:95:1f:e8:24:4a:e8:
f4:62:17:62:44:0b:fe:0a:91:a3:29:dc:4f:db:96:
c4:1b:5c:88:5b:85:f2:72:91:5e:05:d7:d7:ac:a6:
e9:65:23:a3:f9:57:14:86:74:8f:e7:07:40:4a:dd:
48:e9:f9:86:15:86:12:2e:66:66:56:92:4e:dc:4d:
7b:0d:52:28:50:e1:cd:14:06:ce:72:f2:e4:38:2f:
78:17:c8:ce:bc:b8:21:a9:04:b8:a9:5c:44:c9:d2:
36:59:f4:92:70:4b:a8:ac:02:8d:e9:b2:11:ca:86:
88:fc:85:8e:84:f8:b9:51:a6:45:27:f6:fb:fe:dc:
e3:ee:56:7a:6e:80:51:41:70:2c:ca:07:ed:8d:1a:
9e:cb:f2:e3:c5:e0:20:33:39:f9:fd:86:9a:e5:1a:
86:ec:0a:d7:ca:7d:fa:9c:a6:4d:a6:f0:33:0b:04:
7d:36:5f:60:1f:5c:08:87:cb:39:7c:01:21:52:29:
bf:de:00:33:9d:ae:7f:f2:e6:e1:2f:bc:58:86:bc:
fa:e7:fc:c4:1f:aa:f7:52:14:7d:5d:6f:72:66:6f:
b6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7A:5F:11:BE:0D:C7:63:96:38:21:7B:12:C3:D1:B8:7E:94:96:C4
X509v3 Authority Key Identifier:
keyid:43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a4:26:a4:b9:22:bb:28:1e:bb:a5:65:b6:df:a3:a3:a4:e2:
b8:45:51:ad:95:e9:3a:7a:37:ec:d9:b9:a5:09:26:d5:a6:79:
98:d5:bd:42:76:9e:a9:64:6d:4b:99:2e:8b:fb:b9:69:57:81:
67:a1:38:ab:65:83:ae:15:c4:82:39:86:b8:7c:e3:15:85:fa:
9c:5f:d4:a3:7c:d9:fd:c0:db:0d:5f:d0:02:e3:77:a1:ce:b6:
70:25:35:d8:a8:18:3e:1c:53:a1:fb:a6:cf:41:80:69:a7:90:
bc:f4:0e:47:dd:86:17:d8:fe:29:0e:c8:88:31:2f:da:35:d2:
8b:a6:2b:f2:6d:5a:d7:f8:77:46:b9:09:b4:45:08:d9:d8:ae:
b4:ed:96:5d:56:1f:24:5a:80:76:93:ef:8b:f6:f2:73:38:5c:
0c:bb:83:e1:f9:9e:61:8b:e7:03:8b:42:d9:46:7d:c4:39:54:
17:3a:46:cd:9f:ee:ed:34:32:4f:3e:81:ad:02:e5:8f:c3:22:
e1:d2:d9:41:c9:a6:87:a1:1e:5e:93:37:cb:f0:45:de:5b:bd:
03:1b:eb:58:68:ce:8f:c3:1d:4d:53:0d:c2:b0:ea:31:23:10:
5d:63:f0:3b:61:1b:e8:ff:6e:56:6c:21:e9:4d:8c:e0:a5:a6:
8e:51:ff:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:17:19 2025 by rpki-client