Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
File: qCoCPr2xLpceeocp2Cankkz36DI.mft (raw, json)
Hash identifier: mL+fhT2hnrYsbH3Y1kZFbgI0WReHbjpAsIP1CZHgMGY=
Subject key identifier: 89:A6:9E:DC:7C:C7:6B:33:AF:59:6E:F3:60:3F:5C:EC:97:BA:1E:3A
Authority key identifier: A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32
Certificate issuer: /CN=a82a023ebdb12e971e7a8729d826a7924cf7e832
Certificate serial: 0197493183FB53EA704443E613F90E19590D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
Manifest number: 0A99
Signing time: Sat 07 Jun 2025 07:01:11 +0000
Manifest this update: Sat 07 Jun 2025 07:01:11 +0000
Manifest next update: Sun 08 Jun 2025 07:01:11 +0000
Files and hashes: 1: 0mOwovSQfaOTpOjMePlA1vJyx3o.roa (hash: UKn/uBWWad1ow9KJDqJ57gBdSqtGNkm8IvDuZQii3FA=)
2: Rb-9REf4Ku4-CgLC6REjl5LjwmQ.roa (hash: cTHupzsbPAMMKa56v6BN9R2pDgzgt3AMXO4LKaMqhQw=)
3: qCoCPr2xLpceeocp2Cankkz36DI.crl (hash: K0Ub5sjk+oEIZEqbWskettmPV+WQoRpLv57E1H8t8ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:83:fb:53:ea:70:44:43:e6:13:f9:0e:19:59:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82a023ebdb12e971e7a8729d826a7924cf7e832
Validity
Not Before: Jun 7 07:01:11 2025 GMT
Not After : Jun 8 07:01:11 2025 GMT
Subject: CN=89a69edc7cc76b33af596ef3603f5cec97ba1e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a4:10:07:4c:32:1f:f2:5b:07:c3:9d:4d:5e:
eb:af:d8:2f:a4:db:69:f0:cb:99:ca:a3:fa:01:6e:
22:da:f5:e4:a0:70:b4:6c:e4:6a:cd:07:23:62:b9:
51:6d:11:63:cb:ec:4f:e5:d0:69:3f:10:7f:15:48:
c3:5c:2a:08:97:6a:3e:0f:68:52:68:da:9d:82:10:
b3:92:70:7c:67:aa:6e:c0:da:29:4a:7a:1f:fa:34:
ae:34:3a:7b:c1:4e:b3:7d:0a:dc:c3:e4:ef:34:62:
4b:98:58:b6:79:b4:7b:b6:fe:4c:a7:29:ef:dc:b5:
98:a7:ab:17:6b:da:26:08:ee:fc:3c:6b:81:30:f5:
65:9c:31:80:63:e9:94:64:7a:7c:c2:6e:86:5a:f1:
cc:12:7a:aa:8f:d3:46:f5:85:c3:57:ea:74:c4:59:
a0:8d:09:53:1c:a8:56:2c:c5:c2:3d:db:6e:d8:d8:
29:ce:57:8b:a7:1e:0b:3d:4d:09:38:b3:ec:5c:bc:
7a:26:b6:78:4d:99:53:e5:64:06:59:db:38:4e:1c:
3a:cc:05:4c:40:b2:d6:ad:bb:51:71:68:f7:48:c9:
cb:7d:ae:22:53:52:42:a9:98:13:be:a4:8e:8b:7a:
ad:6a:61:96:bf:53:93:79:a3:19:ac:53:f7:3a:9c:
58:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A6:9E:DC:7C:C7:6B:33:AF:59:6E:F3:60:3F:5C:EC:97:BA:1E:3A
X509v3 Authority Key Identifier:
keyid:A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:6e:3f:83:9c:16:2a:2c:09:10:2c:d1:3d:3c:9d:6c:eb:a3:
58:ab:96:1b:d5:7f:50:12:07:1c:81:87:62:f7:a3:2b:a2:72:
ec:9d:d5:1d:35:3c:9a:bc:73:cc:6e:ca:a0:a3:69:6d:a7:d9:
36:65:b2:f6:31:b6:24:ca:f2:28:b1:70:d8:c0:dc:ac:4a:91:
be:37:c8:3f:7e:01:93:73:a3:f4:2d:30:3f:29:e8:48:48:f4:
f8:67:69:45:3e:2e:64:8c:e1:10:c3:81:c2:21:4c:29:58:f9:
dc:41:1c:e9:11:48:35:1f:92:3b:19:66:35:4d:0d:88:49:0e:
58:53:fa:8c:68:2c:c0:b8:43:82:da:1d:a8:dc:e6:b2:3b:82:
ae:07:f6:0a:2e:2c:63:61:7e:0b:c9:ff:97:9a:4f:79:56:6b:
16:be:4e:3f:c7:d3:47:62:03:de:0e:43:9e:8d:ad:92:00:93:
5d:68:90:ea:cd:5c:26:da:a4:35:16:48:c3:28:a0:0f:39:85:
69:01:3c:f6:6d:6f:d1:8b:36:27:1f:53:9f:d2:76:01:08:ad:
1f:52:3e:7e:cf:f1:d6:2b:85:05:e5:a1:fc:b9:3b:a1:e5:fd:
ad:0f:14:4c:c6:c5:c5:b1:b0:e8:22:be:9e:38:22:cc:f7:8f:
56:d6:47:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:51:02 2025 by rpki-client