Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
File: qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft (raw, json)
Hash identifier: 176zzbqylVw9gSy+hWTS3yZG/g2a+fo1S83MJyZE5u8=
Subject key identifier: E3:1A:9C:42:30:56:1E:BF:20:68:06:A5:F1:8C:3B:20:AF:FC:9A:51
Authority key identifier: A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
Certificate issuer: /CN=a9480cf18fd7859df9ad997940013a99b8dee374
Certificate serial: 019768F29F8E757C3EF7A3267EE225896D12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
Manifest number: 158B
Signing time: Fri 13 Jun 2025 11:00:20 +0000
Manifest this update: Fri 13 Jun 2025 11:00:20 +0000
Manifest next update: Sat 14 Jun 2025 11:00:20 +0000
Files and hashes: 1: 1-498Z7vh8fq99O9xScVcy6k-waA.roa (hash: 5X65ydohKF6qHxzYtE3Ac9naZbToLy0QuSQ9mwUuJtg=)
2: YCaC2D8L5OtL6F6domigXArqF2c.roa (hash: 3VcxChRnU4HThrx+KUbxRb/2EVyI8+silVMvgGd2Xn0=)
3: qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl (hash: 68HeQqfn+/3KnXbTeaymYh+Jci8OqRshDUe8ntt6FFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:9f:8e:75:7c:3e:f7:a3:26:7e:e2:25:89:6d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9480cf18fd7859df9ad997940013a99b8dee374
Validity
Not Before: Jun 13 11:00:20 2025 GMT
Not After : Jun 14 11:00:20 2025 GMT
Subject: CN=e31a9c4230561ebf206806a5f18c3b20affc9a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dc:f2:b4:ba:0b:0d:de:05:ec:33:47:67:bf:
58:e6:cb:d8:b0:8b:55:e0:0c:29:97:23:f8:03:32:
b2:4e:55:60:50:94:76:78:00:a6:f9:99:d9:18:47:
65:d6:dd:75:a1:ac:18:cf:05:a2:21:5e:a9:39:aa:
b6:18:90:80:28:bf:85:d3:58:73:9c:dc:fa:60:ae:
5c:db:ea:67:78:7e:c0:a8:93:8f:a3:4b:31:ee:5e:
e6:35:39:5e:e2:1c:3f:65:14:c3:14:f8:26:a1:48:
67:87:70:73:7d:be:68:03:01:f6:c4:77:17:4b:9c:
d0:66:4e:49:d0:25:f6:7a:be:f9:b9:b3:a5:60:1e:
b4:f0:72:57:d9:10:ac:69:5d:a0:fa:a6:26:2f:9e:
f2:91:73:9c:ff:cc:4f:e4:b8:dd:c6:ae:b0:af:d5:
88:80:05:cf:8c:69:85:fa:61:52:56:09:92:73:9f:
28:70:41:0e:ab:37:a1:03:c1:71:f1:85:45:4d:02:
0d:8f:dc:f7:2c:ed:95:fe:5c:48:9d:17:07:c9:f8:
3e:eb:d4:a2:08:13:a3:21:57:8d:96:f2:bc:ac:1e:
69:c5:b3:6b:bf:5c:bf:2b:b7:a6:61:b8:4e:a6:3a:
ed:04:86:52:3f:5a:bf:02:5e:57:ba:86:be:70:31:
69:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1A:9C:42:30:56:1E:BF:20:68:06:A5:F1:8C:3B:20:AF:FC:9A:51
X509v3 Authority Key Identifier:
keyid:A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:46:5b:be:98:d6:ec:35:3e:8d:57:13:1c:24:5c:72:57:07:
0d:5c:6f:2a:79:03:b7:84:65:29:06:ff:b4:1c:5f:db:5d:3b:
0a:9d:57:d8:54:8a:0b:33:2a:a6:5c:24:15:3b:8e:eb:cb:3e:
bd:58:c3:76:76:a8:be:af:c9:cf:d2:51:11:e2:7a:27:fd:1f:
50:91:60:50:62:fb:13:73:54:64:3a:e2:c9:6e:99:48:43:67:
b2:ba:64:a6:8a:2e:77:88:0e:a4:28:cf:b1:f3:02:8a:6f:48:
c1:14:06:e7:4e:26:f6:ba:f8:59:f4:8c:d9:79:9d:13:4a:5f:
24:13:90:45:df:3a:39:5b:dd:dc:ed:e9:27:17:2e:c3:d8:5a:
13:61:8d:c2:84:8a:35:5b:da:7f:73:15:23:85:73:27:09:f6:
1c:3b:54:4b:98:39:23:e4:87:13:a5:ee:03:d9:76:d2:3c:82:
d0:03:03:e3:70:23:e1:11:db:1c:b5:75:ff:72:59:e6:98:7d:
5d:7d:fe:bc:26:8f:ab:58:4a:d6:8b:4d:47:51:0e:25:de:51:
5d:bf:23:f5:15:b2:4d:94:c5:65:a1:df:c1:7f:f6:6c:76:62:
eb:a1:67:bb:dd:b9:f3:9d:14:fe:40:79:45:36:d6:c4:52:03:
5f:db:e6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 15:00:26 2025 by rpki-client