Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
File: uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft (raw, json)
Hash identifier: Hy83zsHoq+oeulEXYHIuz5P9VGgh2gDzYVyR7eaRk40=
Subject key identifier: C8:0D:98:FF:78:8D:BB:68:8D:37:0F:DF:05:11:D9:FA:D0:CE:4F:81
Authority key identifier: B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80
Certificate issuer: /CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
Certificate serial: 01974742BC30E3F1ED5CB8BF89BC7DFC87D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 22:00:45 +0000
Manifest this update: Fri 06 Jun 2025 22:00:45 +0000
Manifest next update: Sat 07 Jun 2025 22:00:45 +0000
Files and hashes: 1: 6KXLkC_cgd5ILMccrhh-m3RCwS8.roa (hash: Az+UEZWLV4uod4atp3pTmM4QksD0MTVrJp8g22f4T2Y=)
2: uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl (hash: hYgqbtv8BYR0OIilLMwxV7u2k09E00Cj0Ev9m5gmPQM=)
3: wCMVD4s-MzexAEYCNnm0u-lWVks.roa (hash: 1CzqXOjbHH5Z0NSEWz+9Qkw44w+rWwhDlrc+ZZXhbB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:bc:30:e3:f1:ed:5c:b8:bf:89:bc:7d:fc:87:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
Validity
Not Before: Jun 6 22:00:45 2025 GMT
Not After : Jun 7 22:00:45 2025 GMT
Subject: CN=c80d98ff788dbb688d370fdf0511d9fad0ce4f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:95:c1:9e:49:07:44:c8:f3:54:52:75:cb:04:
ad:14:5e:83:80:19:91:95:1a:db:e2:07:20:d9:ea:
9a:b4:1f:4b:8f:6e:c1:4f:17:b3:4d:6e:f7:2f:d0:
b7:0a:41:2d:79:7a:d1:84:11:9d:67:2b:b4:1b:3d:
db:6e:9f:30:36:ab:0a:e9:08:8b:9d:9e:1f:57:9b:
70:fb:3f:c3:5b:d9:c6:56:9c:b1:89:45:56:ba:05:
43:45:96:c2:8d:d4:0f:01:7d:04:f8:94:39:db:b7:
f5:6d:d7:68:a1:b4:8a:3e:21:e5:5b:89:6f:f8:d0:
e5:fa:50:0c:f4:b3:0d:22:2e:7e:19:5c:9a:20:f2:
b2:db:e7:6c:87:8c:5a:61:4c:21:25:67:be:d6:92:
28:d0:9a:86:0c:6e:b6:a4:78:53:33:08:94:11:ca:
a8:a4:0c:2b:56:6d:a2:99:9a:ee:7f:41:99:e3:d1:
f8:49:be:34:e9:2a:99:f6:57:3e:b0:b5:8e:0a:f6:
b9:d9:8c:d1:92:87:31:64:e3:d8:6e:2e:7f:96:68:
d4:6e:d2:8f:cf:84:89:e7:61:3d:ee:e7:2d:8d:eb:
e9:09:ca:5c:93:4e:a2:7a:8a:7a:95:2d:65:68:44:
9e:3e:2f:89:ba:fc:0a:32:6c:77:c9:cd:47:c5:11:
43:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0D:98:FF:78:8D:BB:68:8D:37:0F:DF:05:11:D9:FA:D0:CE:4F:81
X509v3 Authority Key Identifier:
keyid:B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:26:27:37:3e:ba:a7:84:c2:71:e2:b0:75:7b:e5:4a:b3:86:
3c:ed:fd:e0:93:83:6b:0b:7c:79:8b:ad:22:ba:ca:3e:17:6b:
7b:50:71:a8:d8:4c:bd:95:b6:6e:0e:00:f7:8f:42:af:15:8a:
d3:b7:de:80:7b:ea:ac:93:95:5a:8d:49:73:49:89:c2:4e:23:
c6:be:a1:93:37:9a:5c:59:5b:b5:9c:10:38:cf:87:c7:33:16:
cb:53:df:ec:f5:b1:16:81:0d:74:ad:70:e5:fd:ab:a5:60:12:
42:e1:17:54:7f:16:77:ca:10:98:04:71:60:6f:55:02:71:16:
84:38:97:15:b5:de:d8:6b:ba:f9:2a:9a:7d:85:96:64:92:4c:
cb:c8:bd:4a:36:93:91:41:70:ea:bb:59:e4:e5:ac:50:3d:65:
33:a1:02:9e:52:2d:d2:e3:be:9c:cc:38:f7:92:f5:89:57:e3:
b8:33:2f:6f:39:df:55:12:0a:36:b9:14:2b:70:7a:b2:f3:a7:
4c:01:00:f5:30:43:04:28:d5:61:df:b5:1e:36:b4:51:14:b6:
05:31:59:8d:db:98:a3:d2:77:16:bb:12:2a:a2:58:3d:39:31:
1d:4b:db:b4:ec:e9:40:d8:6b:09:1d:5d:1e:d3:a7:d3:ad:17:
77:eb:dc:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:00:34 2025 by rpki-client