Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
File: qOdYAufvuGU-OvWcvxvAZTi8pnE.mft (raw, json)
Hash identifier: ZQ0of1EylZr6mMKN7maJfrI6X8Eq6Hxrrs8cBSolE+4=
Subject key identifier: C1:5B:9C:63:39:F5:DB:D8:7C:6C:24:F0:BA:BE:86:56:AB:BE:FD:0D
Authority key identifier: A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
Certificate issuer: /CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
Certificate serial: 019749D5EFA8FA45587180E40C342D91096B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
Manifest number: 13B2
Signing time: Sat 07 Jun 2025 10:00:46 +0000
Manifest this update: Sat 07 Jun 2025 10:00:46 +0000
Manifest next update: Sun 08 Jun 2025 10:00:46 +0000
Files and hashes: 1: cl6-xP7qlNVenXtKej75GmET20w.roa (hash: FpmDKBHZRHAtEaN6sVmPZOXv3BRnJ5M9K7h5rDJV66Q=)
2: ftPX6ru82FwqHJ4CTaIfY0kPRSU.roa (hash: iKc9aP9F91n3SzRk10qNjCoKwRfXAgJ0qpka/jBdSo4=)
3: qOdYAufvuGU-OvWcvxvAZTi8pnE.crl (hash: lyF8NwHkVyXHw8s+wsp98Bq457w04N2ExY2MPHc3pEQ=)
4: tJWty-Myp1bMv-YOuzd4M1wDOVI.roa (hash: g/a3N7RSWTo3iJRyoUMcVa6AkUH9ej5k+J2S9ybi0Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:ef:a8:fa:45:58:71:80:e4:0c:34:2d:91:09:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
Validity
Not Before: Jun 7 10:00:46 2025 GMT
Not After : Jun 8 10:00:46 2025 GMT
Subject: CN=c15b9c6339f5dbd87c6c24f0babe8656abbefd0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6d:90:b0:b8:7e:cc:fc:b6:61:29:a9:8a:d6:
79:42:6e:7b:68:f3:b3:bc:45:17:b1:6d:60:15:45:
9e:74:37:fc:70:a8:bb:86:d9:1f:a4:eb:0e:74:b9:
ed:51:ea:80:e8:ff:6a:a5:83:c2:53:20:01:85:5e:
f9:8b:d4:39:ea:cf:1a:10:73:4e:c2:26:72:b7:a3:
77:8d:71:37:fd:bb:90:c8:f5:66:72:1a:be:d7:fe:
c1:4a:90:59:26:03:67:70:2b:c9:a9:d3:40:6a:a9:
ea:f1:59:31:42:4f:14:e5:e8:54:5c:f3:6e:92:f5:
a5:10:2f:05:f2:a6:cd:a7:f1:18:3d:7d:ca:89:87:
06:05:9a:25:15:db:17:c9:3b:40:d8:db:25:37:ba:
d9:44:92:23:9d:b7:49:e8:70:0c:3b:49:bf:49:80:
35:7d:a6:42:dd:20:ea:04:7f:b4:75:0a:9a:9c:2c:
64:36:77:56:32:35:68:2c:bc:0c:c0:a2:fb:3e:b1:
9a:c9:0a:51:9b:b3:0a:19:8f:10:e9:c0:6e:a0:82:
95:17:02:36:30:25:ff:18:90:74:8a:05:9d:6d:0a:
c8:28:a2:04:24:ad:ea:92:24:fd:0e:16:9c:84:33:
f1:87:98:bb:e1:9a:6e:75:41:0d:9d:a5:98:ed:19:
b0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5B:9C:63:39:F5:DB:D8:7C:6C:24:F0:BA:BE:86:56:AB:BE:FD:0D
X509v3 Authority Key Identifier:
keyid:A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f7:65:78:06:cd:3a:c2:df:d4:ab:95:60:c5:75:8b:32:3d:
91:37:08:e3:92:01:d6:a4:f8:74:b8:56:6f:d1:b8:28:20:cd:
19:b3:46:11:ad:cc:65:e0:51:93:67:ad:7f:6d:67:57:7f:33:
90:fa:a8:98:dc:47:b5:af:4a:34:57:fe:6a:33:eb:e9:6c:6b:
44:25:30:99:00:23:32:31:4e:eb:4b:1a:35:91:e4:e8:da:0c:
e2:11:d5:c1:27:82:2a:1c:44:63:e8:3c:8d:61:b2:a0:98:a6:
ce:37:55:4f:00:ea:9a:62:38:1e:d2:89:98:a4:f5:14:12:e2:
3e:57:69:cb:a4:4b:7c:89:64:44:6e:76:21:90:da:aa:f4:95:
08:5c:38:96:41:c9:4f:e5:49:4c:44:2d:35:ec:f6:07:90:6d:
cb:c2:7d:b9:ad:b5:9b:c9:a5:1d:04:21:6a:33:d2:04:1a:41:
40:20:a6:02:96:b3:59:38:49:9b:b9:dc:2c:52:65:18:b2:0f:
05:9d:52:41:bb:cf:94:73:ff:40:35:5a:b5:b9:95:ef:48:96:
28:9d:73:4b:a3:6a:06:1c:02:71:c2:fe:68:79:ce:0d:fb:e7:
b6:b0:ec:ae:47:e4:76:ef:a4:f1:61:ef:7c:d1:71:b1:8d:6d:
6b:16:2e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:50:10 2025 by rpki-client