Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
File: q22oNLMssSxL2uM_Zy80jZg_MXY.mft (raw, json)
Hash identifier: VU/77E8rosh8dNO/3SL5a+gxQhWTn0KN6OVflRf6zgk=
Subject key identifier: E5:E4:79:98:64:44:38:B7:27:C2:0C:55:44:E7:29:4B:FF:D0:BC:D8
Authority key identifier: AB:6D:A8:34:B3:2C:B1:2C:4B:DA:E3:3F:67:2F:34:8D:98:3F:31:76
Certificate issuer: /CN=ab6da834b32cb12c4bdae33f672f348d983f3176
Certificate serial: 01974AE8FE3475551AE1AD2EE563463327AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
Manifest number: 0DE5
Signing time: Sat 07 Jun 2025 15:01:12 +0000
Manifest this update: Sat 07 Jun 2025 15:01:12 +0000
Manifest next update: Sun 08 Jun 2025 15:01:12 +0000
Files and hashes: 1: evpxyC_xQr6-9_i5vhF3SSD60QY.roa (hash: F+Lkz2iLknBGekmgWZevszL+qAh6hnFUDMady9RqMNg=)
2: q22oNLMssSxL2uM_Zy80jZg_MXY.crl (hash: ZhNE4diY6+GQxegeJjt9c8Ee+aiI4+sdXV3j3ZaXoaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:fe:34:75:55:1a:e1:ad:2e:e5:63:46:33:27:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab6da834b32cb12c4bdae33f672f348d983f3176
Validity
Not Before: Jun 7 15:01:12 2025 GMT
Not After : Jun 8 15:01:12 2025 GMT
Subject: CN=e5e47998644438b727c20c5544e7294bffd0bcd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e4:21:4a:34:d9:a6:88:5d:b0:ef:d1:2c:9a:
64:e0:e3:b8:a9:ae:c9:01:f0:25:db:04:64:71:d9:
40:44:1f:5f:aa:a0:cf:a2:b0:93:b0:0d:30:e1:6b:
ab:da:98:25:be:53:95:f8:24:bd:f2:0d:13:d3:d3:
d0:b2:4b:4a:91:30:16:7a:ba:5a:f6:af:c4:c7:b2:
89:3a:0b:64:3e:e5:7c:0f:ce:87:15:ff:09:ff:44:
0d:a1:87:58:08:fa:db:c0:ee:15:e0:68:50:17:c1:
ff:a5:01:54:d7:f9:87:aa:af:98:27:43:30:f3:f5:
a4:01:fa:79:43:cd:64:5b:70:cb:85:ae:d1:d8:f5:
ee:b7:6f:d7:4f:b7:12:56:fd:fa:60:07:31:7a:06:
2b:c1:2a:67:f3:0d:f0:9c:0d:db:52:7a:d6:c0:67:
fc:04:97:95:fc:e4:2d:db:10:43:ef:d2:26:09:a8:
9e:0e:c3:b0:9b:f3:eb:9c:97:34:3b:0e:f0:a8:c6:
58:fd:3b:c0:b6:94:dd:25:c4:00:b2:bc:b1:bb:c9:
c3:ba:19:cc:05:a8:bb:93:71:42:f0:91:4d:62:1d:
13:e9:6c:1b:f4:d0:93:b8:7b:04:cb:57:b3:25:24:
de:03:d3:b0:f1:12:49:01:2c:09:f6:a5:8b:57:95:
ca:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E4:79:98:64:44:38:B7:27:C2:0C:55:44:E7:29:4B:FF:D0:BC:D8
X509v3 Authority Key Identifier:
keyid:AB:6D:A8:34:B3:2C:B1:2C:4B:DA:E3:3F:67:2F:34:8D:98:3F:31:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:09:2f:4b:f1:1c:64:3c:90:d4:a8:c8:71:06:9f:86:99:58:
4f:d3:0e:5a:98:75:fa:66:60:e2:bd:0b:8a:55:02:86:ba:d2:
80:27:07:b4:14:56:c0:aa:29:5b:3e:43:f7:f0:c5:b7:dc:da:
cf:fe:92:7c:7e:fa:ba:5b:8b:7d:41:1c:77:be:11:a8:5a:e8:
81:0e:a9:ed:49:34:1c:f2:00:2b:c7:31:31:ca:48:9c:18:b1:
0e:2e:40:6a:89:8b:20:4f:e7:f5:be:6c:4c:b7:9e:10:06:6f:
ac:72:b1:42:4a:d6:ee:c8:ee:de:32:12:21:44:91:72:0e:28:
5e:3d:af:b2:75:41:92:e1:ec:32:c7:4b:bb:74:52:57:d4:0c:
46:21:af:99:a2:f3:e2:2a:0c:86:29:17:19:e7:82:cb:2e:bb:
9a:e5:21:1a:21:5c:0a:02:57:c6:bf:c1:02:6f:17:f1:84:40:
a2:c9:a2:cd:c4:68:3f:12:5e:65:e2:35:6c:b9:92:ed:fb:e1:
cd:f4:ba:dd:bf:88:48:14:88:fa:60:80:48:39:84:7d:12:20:
46:e1:4f:ab:4a:83:bd:c9:d4:98:40:d3:c9:af:cc:06:41:5f:
48:65:fc:cd:c7:e6:da:3e:bd:1f:5b:9a:65:31:9f:23:ae:5d:
fe:2c:cc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:31:07 2025 by rpki-client