Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
File: qFOfk1XT63eLG7juJyMyYBGhIps.mft (raw, json)
Hash identifier: c6O5V+mVGgdNohaJt4NdRLusEUr1qqn9zyzrUobFIDA=
Subject key identifier: EC:F4:13:39:AF:08:DD:E6:EB:96:C4:AF:57:60:8E:BD:5D:46:05:75
Authority key identifier: A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B
Certificate issuer: /CN=a8539f9355d3eb778b1bb8ee2723326011a1229b
Certificate serial: 01974B1F24460520A0A4488BDF0227722356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
Manifest number: 150E
Signing time: Sat 07 Jun 2025 16:00:21 +0000
Manifest this update: Sat 07 Jun 2025 16:00:21 +0000
Manifest next update: Sun 08 Jun 2025 16:00:21 +0000
Files and hashes: 1: ShowtNM2m2UKeBL8F3fZYKX41FQ.roa (hash: fLdZxXolLRuOUGV4tUzHHqmQm+iuYEtRLW2OEHSE+Js=)
2: qFOfk1XT63eLG7juJyMyYBGhIps.crl (hash: GuN/Ttw8/I1I33nrqQYSXRnxEbhM+ahHjGEF6g0tweU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:24:46:05:20:a0:a4:48:8b:df:02:27:72:23:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8539f9355d3eb778b1bb8ee2723326011a1229b
Validity
Not Before: Jun 7 16:00:21 2025 GMT
Not After : Jun 8 16:00:21 2025 GMT
Subject: CN=ecf41339af08dde6eb96c4af57608ebd5d460575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ed:67:0d:57:63:41:50:f5:0a:70:dd:85:d4:
a5:61:2f:24:f4:78:df:08:4b:60:87:05:d0:ea:af:
da:7a:71:90:49:84:ea:b0:1e:50:f5:aa:55:61:39:
e1:c3:f1:c4:97:02:90:7f:f2:86:8b:22:c2:5b:2b:
bc:a7:91:1e:bc:cd:f1:51:8b:73:99:7f:e8:d5:49:
2f:13:7d:82:e1:80:9e:4a:e9:2a:69:e8:eb:fa:8b:
0a:80:66:a7:fc:b0:19:97:7c:0f:ee:00:82:b9:05:
58:9f:1d:48:6a:ac:1f:a3:60:91:a2:42:11:2a:93:
20:c3:a2:a3:a8:63:c0:e4:8e:b7:54:92:f9:c6:e9:
96:fd:8f:62:aa:42:2a:d7:c7:d0:d1:63:3b:a8:6f:
a2:99:80:93:4a:db:70:41:5f:e3:d9:a7:b2:d4:9e:
72:00:03:ed:a0:c1:ad:80:e7:07:e2:1a:02:47:a7:
69:3a:96:78:95:13:e1:0a:69:ce:8d:ab:30:d6:70:
20:80:76:fa:2d:4c:3e:7d:69:f3:60:2b:a6:7b:69:
0f:f7:87:eb:cb:ca:0a:63:ed:72:41:58:51:14:05:
92:89:2f:a1:53:fa:c8:dd:31:76:b0:0d:d8:3b:b2:
d1:6e:68:b1:66:2c:01:0c:06:6b:84:cc:52:ab:c4:
9f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F4:13:39:AF:08:DD:E6:EB:96:C4:AF:57:60:8E:BD:5D:46:05:75
X509v3 Authority Key Identifier:
keyid:A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:de:a4:94:a4:30:f3:02:85:b2:31:df:53:ca:fd:18:76:98:
6d:c2:d3:ec:68:5b:d6:11:87:28:f9:0b:8f:f4:8c:13:55:e8:
57:77:a6:98:70:ff:b8:0e:08:af:26:46:e4:76:16:33:f4:48:
5c:b7:1b:40:59:82:df:52:7f:43:5c:09:a2:77:d3:82:36:76:
8f:2c:dc:04:1e:ab:a7:16:05:42:07:4e:d4:c2:7f:76:98:69:
21:a6:5e:2a:7d:23:2c:08:e2:31:76:26:e6:17:ff:d5:f0:e7:
b7:80:45:bc:fd:ae:1c:d3:33:03:b4:e5:43:1c:1f:06:5d:54:
42:b3:aa:b1:a6:62:de:b0:89:bb:7f:49:3f:9a:92:4b:37:6b:
26:fe:cf:5f:64:ed:14:e6:71:c0:18:71:06:ca:e6:46:5f:a7:
b4:8f:a2:a0:68:c5:ea:2b:26:a4:6e:4b:44:e6:26:fe:ee:f3:
22:4b:ac:01:a0:cf:bb:b6:db:90:87:08:03:c3:89:27:d0:5b:
f2:89:9f:74:fb:21:e8:13:6f:57:d4:ae:cc:e6:73:fd:fb:e6:
8d:97:2a:04:7e:5e:83:7c:cf:61:4b:ee:18:8f:30:79:33:42:
4e:10:e3:01:f5:22:5a:93:3d:7c:93:15:fd:c6:72:13:6f:a4:
0d:e2:6f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:14:33 2025 by rpki-client