Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft
File: qQ35UgJATbHy5A7D3n7sON1qn-4.mft (raw, json)
Hash identifier: 2jCQe8pZbol6xbRmWPJMVfaD/Qqaa/uFo1+L+P3fIZc=
Subject key identifier: 00:99:06:6B:69:E0:ED:33:56:C9:A6:E2:52:87:D7:74:F4:78:F9:88
Authority key identifier: A9:0D:F9:52:02:40:4D:B1:F2:E4:0E:C3:DE:7E:EC:38:DD:6A:9F:EE
Certificate issuer: /CN=a90df95202404db1f2e40ec3de7eec38dd6a9fee
Certificate serial: 01974E8E134610DCBCD7BA8AC56B89776D51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ35UgJATbHy5A7D3n7sON1qn-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft
Manifest number: 0114
Signing time: Sun 08 Jun 2025 08:00:23 +0000
Manifest this update: Sun 08 Jun 2025 08:00:23 +0000
Manifest next update: Mon 09 Jun 2025 08:00:23 +0000
Files and hashes: 1: qQ35UgJATbHy5A7D3n7sON1qn-4.crl (hash: Ji04LWtnYFCUzKB6eLJKpgEXORt+eAZaQ27+/+jsVmA=)
2: xDaTSU1r08U3icbYzh9eT36EBN4.roa (hash: AXlgpTaBb24aHDSoXt8sy77THaBujLte6mCP+q3Zt1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQ35UgJATbHy5A7D3n7sON1qn-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:13:46:10:dc:bc:d7:ba:8a:c5:6b:89:77:6d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90df95202404db1f2e40ec3de7eec38dd6a9fee
Validity
Not Before: Jun 8 08:00:23 2025 GMT
Not After : Jun 9 08:00:23 2025 GMT
Subject: CN=0099066b69e0ed3356c9a6e25287d774f478f988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7e:ee:ae:5f:0e:b8:07:a3:28:dd:ad:e6:82:
c8:a9:bc:f8:da:d7:91:fa:03:99:2d:90:11:87:7e:
b5:3e:aa:fb:77:a9:b3:94:00:69:9b:84:c7:d4:05:
08:83:72:a4:8f:89:96:a0:e5:06:cb:c7:d6:69:dd:
9c:51:e8:e3:76:75:94:32:47:fd:9a:9f:c9:6e:05:
e9:d4:ba:36:d9:88:45:bd:d6:9e:4f:6c:e5:f7:ba:
51:0e:b4:52:4b:c1:f0:38:2d:9d:2f:2c:7e:1c:33:
41:94:44:19:7b:5e:14:63:08:e2:67:87:a6:78:68:
5a:70:f7:c5:a7:67:38:8a:20:9d:2c:93:5e:cd:c0:
7f:60:67:22:9f:4b:38:2d:89:3f:11:fc:67:0b:43:
f2:89:43:21:14:16:a8:77:fe:c0:47:cc:af:90:28:
b1:a1:50:ca:08:bf:4b:02:45:bf:af:f8:bb:8e:16:
a5:36:0b:0f:1f:5c:cc:7f:f7:a8:08:af:b6:b5:a4:
61:e2:5b:45:0b:08:0f:61:fb:85:94:ab:c5:8c:4b:
bf:63:48:08:22:ea:30:b5:95:4c:ae:cc:a6:28:e0:
ca:3d:63:44:af:1b:a0:71:7b:a0:6b:77:03:0f:04:
c2:c9:96:5a:1a:e9:ae:33:ab:c3:d1:f5:ae:7c:2d:
26:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:99:06:6B:69:E0:ED:33:56:C9:A6:E2:52:87:D7:74:F4:78:F9:88
X509v3 Authority Key Identifier:
keyid:A9:0D:F9:52:02:40:4D:B1:F2:E4:0E:C3:DE:7E:EC:38:DD:6A:9F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ35UgJATbHy5A7D3n7sON1qn-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:bb:7c:51:3d:26:d3:62:2d:dd:75:d1:96:cd:f1:83:71:c2:
8e:b4:7e:3a:99:91:97:a0:86:9f:a3:51:9c:45:eb:b1:f1:a1:
ae:30:c0:c1:35:b7:dc:02:92:88:e3:76:9e:7c:25:0d:b0:ab:
5a:4f:30:86:33:67:87:54:54:26:f0:d7:e0:47:4f:ae:96:fa:
0f:57:b4:be:52:c5:15:ed:ca:ec:12:fb:71:4a:96:91:85:64:
f7:83:de:ba:e9:85:97:92:f5:76:ed:cc:96:be:58:5e:9d:62:
9f:ab:a1:28:77:74:c5:19:7f:c9:64:24:71:9f:86:64:d2:7b:
58:9e:f1:15:39:57:52:3a:f2:63:29:7c:c4:a7:b1:54:18:29:
a9:89:01:6c:d5:b1:e4:f0:de:ff:e9:e1:7e:e0:ca:89:76:8a:
82:69:15:69:6d:61:3c:72:96:b3:d4:7b:0b:fc:49:4d:36:21:
6b:66:1a:f8:f9:af:30:82:ee:ae:c2:79:78:04:04:25:d5:65:
ad:91:17:5a:75:1a:65:3b:cb:b9:96:fb:d2:bf:7b:4e:7b:67:
ed:cc:38:f8:5f:c8:d8:dd:1c:21:6c:9a:2b:c6:8a:b8:a3:79:
a0:17:bd:11:f8:f8:7b:95:6f:db:05:fc:2f:29:55:7e:dd:65:
79:c3:02:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:53:00 2025 by rpki-client