Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
File: qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft (raw, json)
Hash identifier: egpgUBV71IX6xz5Kk9Mi/8Tw8OObOAuLod3+hgOtSkQ=
Subject key identifier: 9C:64:79:62:F7:53:4E:BE:B2:FA:B2:61:04:2A:3D:84:76:E7:AC:41
Authority key identifier: A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
Certificate issuer: /CN=a9480cf18fd7859df9ad997940013a99b8dee374
Certificate serial: 0197670437EB942E83FB60DEF605FF8AF37C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
Manifest number: 158A
Signing time: Fri 13 Jun 2025 02:00:19 +0000
Manifest this update: Fri 13 Jun 2025 02:00:19 +0000
Manifest next update: Sat 14 Jun 2025 02:00:19 +0000
Files and hashes: 1: 1-498Z7vh8fq99O9xScVcy6k-waA.roa (hash: 5X65ydohKF6qHxzYtE3Ac9naZbToLy0QuSQ9mwUuJtg=)
2: YCaC2D8L5OtL6F6domigXArqF2c.roa (hash: 3VcxChRnU4HThrx+KUbxRb/2EVyI8+silVMvgGd2Xn0=)
3: qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl (hash: pp2qb7KbQl82GHrUFE83iNTn8YJLaom47KYWGLMOlSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:04:37:eb:94:2e:83:fb:60:de:f6:05:ff:8a:f3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9480cf18fd7859df9ad997940013a99b8dee374
Validity
Not Before: Jun 13 02:00:19 2025 GMT
Not After : Jun 14 02:00:19 2025 GMT
Subject: CN=9c647962f7534ebeb2fab261042a3d8476e7ac41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:47:a4:c1:21:06:84:69:22:98:78:6b:86:1d:
11:f2:b6:a4:04:ef:4b:51:55:98:84:ce:2b:81:22:
69:c8:9b:9d:28:56:ed:77:15:b8:cd:a7:df:0b:9e:
c7:d1:ab:00:3a:70:bf:ff:4b:75:2b:18:84:bd:62:
6c:a2:33:b2:bc:8a:9e:c5:c9:43:54:e1:dd:42:60:
c1:f6:52:bf:8f:7b:ee:97:65:0c:60:38:fa:fe:c0:
58:86:03:6a:fc:3e:7c:54:10:ac:58:75:d3:18:12:
fd:ef:aa:44:17:e2:a4:5b:d1:c4:33:91:16:ec:87:
3c:72:1e:48:ae:1e:59:ea:ae:2e:2f:4e:4f:e0:48:
60:11:ef:59:42:41:11:c1:fd:65:b2:bb:07:d4:c7:
c7:24:51:14:ff:d6:d8:85:d8:e4:17:05:cf:99:3e:
07:46:1d:4f:25:7a:fc:31:8a:0e:63:70:d9:3c:b1:
a9:3d:73:43:6f:0c:69:e6:e7:01:29:bb:3e:56:0f:
9c:1a:f5:84:16:3e:46:ba:7b:bd:03:42:44:c8:65:
68:80:50:07:3b:d1:7c:16:a9:28:38:ab:f1:bc:be:
6f:e2:df:f3:cb:56:89:07:08:96:5c:02:67:ec:fd:
49:cb:ec:a9:40:01:8a:6f:c2:83:4f:4a:9f:85:f8:
75:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:64:79:62:F7:53:4E:BE:B2:FA:B2:61:04:2A:3D:84:76:E7:AC:41
X509v3 Authority Key Identifier:
keyid:A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:89:86:5b:00:10:95:07:77:94:ab:37:ee:33:b5:38:ba:0c:
fa:e7:30:db:92:ea:2f:a2:0c:62:7b:90:d8:67:ed:86:92:4f:
e1:3b:fa:5d:af:b4:aa:4b:97:e3:2b:b6:b7:96:d4:ab:b4:40:
dd:e6:94:69:6a:67:d2:77:63:f9:d3:25:88:14:89:04:aa:be:
4a:83:ad:56:98:79:8b:9e:76:a6:e8:be:34:fb:2c:0b:34:a2:
07:56:2f:29:65:88:62:ed:01:d0:b8:30:29:50:52:41:86:55:
64:31:60:6b:38:19:f2:45:48:ee:c3:37:36:4c:b7:68:bc:8c:
14:55:33:cd:9a:ee:f8:6d:58:d4:a2:c4:90:0b:57:3f:2e:3a:
47:28:1f:1e:9a:bc:c1:93:77:31:6a:b3:99:b8:fa:f7:a4:5e:
9c:a3:73:29:ac:35:78:9b:71:74:00:59:f5:ea:e3:9b:36:20:
20:93:df:4a:cb:3e:89:f1:ea:84:aa:86:bb:f4:5e:8c:2f:6f:
4f:62:19:2d:fc:b9:e1:7c:76:46:c9:5e:dc:59:42:42:0d:d7:
ec:c5:c3:32:a6:91:23:52:07:77:cd:78:2e:27:fd:2c:25:94:
2d:d7:c5:76:69:04:df:62:2d:4c:36:0e:15:ff:e7:ff:38:6e:
9b:62:3d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 07:50:48 2025 by rpki-client