Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
File: qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft (raw, json)
Hash identifier: +/lTchj+/+snXIi6VjJ/1PDLTrjr3AMY9QYulUUHV84=
Subject key identifier: F5:C6:CC:D7:D9:2E:97:95:5D:06:26:83:56:6F:BB:7F:F0:FF:0A:AD
Authority key identifier: A8:45:70:85:4F:E8:86:B9:4A:E6:25:36:3C:62:5D:DA:60:BB:3E:FC
Certificate issuer: /CN=a84570854fe886b94ae625363c625dda60bb3efc
Certificate serial: 019749D582107B42D0E56C59CC4A8BC2F6ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
Manifest number: 150F
Signing time: Sat 07 Jun 2025 10:00:18 +0000
Manifest this update: Sat 07 Jun 2025 10:00:18 +0000
Manifest next update: Sun 08 Jun 2025 10:00:18 +0000
Files and hashes: 1: jdn52CanAogysSSsHvxl8oKYqEU.roa (hash: nA6uVwF0uVARnhrLjCGdNBrWcovmnCAcVghKvtj+qwk=)
2: qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl (hash: GjBikk5cYJE2hRIBuLhtTK3g6VP6Yr2qbnUVq/QmwJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:82:10:7b:42:d0:e5:6c:59:cc:4a:8b:c2:f6:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84570854fe886b94ae625363c625dda60bb3efc
Validity
Not Before: Jun 7 10:00:18 2025 GMT
Not After : Jun 8 10:00:18 2025 GMT
Subject: CN=f5c6ccd7d92e97955d062683566fbb7ff0ff0aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a7:68:7a:35:1e:ca:e2:f2:a1:7b:45:2c:db:
1d:d3:92:fc:18:6a:ba:5b:9b:84:94:eb:5b:33:56:
f5:c9:7b:05:76:ea:ad:85:e6:ae:17:ed:5f:d0:91:
57:3c:83:7e:b8:91:62:8c:ca:ae:0f:5a:f3:1d:1f:
8d:57:0c:36:16:27:1e:aa:7a:12:fc:5e:38:cb:f1:
5b:b8:ea:aa:be:9e:d1:30:47:39:73:b2:cc:30:25:
5f:41:09:c0:25:01:b4:65:8a:51:c2:29:0a:bc:fd:
df:eb:07:36:8a:71:83:95:1b:a6:4a:b7:40:a4:47:
6b:9d:c6:a8:2b:96:69:f4:04:35:24:f4:a6:86:94:
71:ef:ab:57:46:dd:85:28:b1:45:b7:d3:44:83:a2:
fa:6b:d6:07:1c:ed:0a:b0:15:85:fe:24:72:cd:70:
f8:78:63:a2:9f:40:a4:06:7e:9c:9f:29:60:c8:29:
e2:7d:5c:34:73:52:4d:cc:f1:aa:24:52:27:3b:21:
55:b3:2b:bb:b6:a3:40:5e:21:0d:b5:21:ad:71:ca:
3f:fc:af:93:e8:8f:3f:de:ea:79:21:79:2c:b9:31:
56:29:8d:21:60:58:1b:53:d2:8b:4e:ce:b2:a0:d2:
c1:87:46:c2:bf:f1:c7:ae:b3:48:d8:a4:45:52:15:
36:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C6:CC:D7:D9:2E:97:95:5D:06:26:83:56:6F:BB:7F:F0:FF:0A:AD
X509v3 Authority Key Identifier:
keyid:A8:45:70:85:4F:E8:86:B9:4A:E6:25:36:3C:62:5D:DA:60:BB:3E:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:5e:89:07:be:53:1d:cc:27:be:9c:7b:9d:fd:ea:d8:3c:df:
ec:10:14:52:71:f6:9c:47:06:2d:97:a2:95:73:34:14:33:37:
d2:81:d9:dd:16:3a:2c:eb:b9:f7:2a:21:3e:49:53:02:68:ad:
ac:ec:d8:06:e7:f8:17:b2:9d:e8:50:f8:66:9e:ee:6c:20:be:
6b:0b:81:e1:82:2c:a2:a4:1a:7e:21:12:dc:55:7f:9b:65:a1:
a1:69:98:a8:48:11:59:03:68:df:ea:ea:b4:87:1f:cb:db:47:
b0:43:90:80:03:52:a0:47:6b:84:6d:8f:82:5b:ef:f7:81:33:
3d:48:03:38:75:13:4e:d5:40:a0:90:da:1b:9a:ad:2f:54:87:
85:10:89:dd:a9:d4:0f:88:c4:2a:79:8c:16:29:6d:14:3e:4f:
0d:ef:8e:25:ee:e4:86:16:f6:99:a8:0c:5c:1a:9a:53:85:c6:
23:41:4f:85:83:97:5e:2a:1a:04:22:cd:57:b3:e9:1f:59:7b:
f0:04:ae:50:a4:f5:d9:d8:0f:c9:8b:38:d1:69:8c:bb:9f:67:
9c:82:88:03:c3:48:1f:80:db:ac:a6:0f:ff:b1:fc:94:fc:3b:
32:b9:ad:77:6b:36:90:c7:9f:55:3f:7e:99:47:07:5c:33:32:
8e:75:93:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:08 2025 by rpki-client