Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
File: RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft (raw, json)
Hash identifier: C9eDQfWhYRxoc/URokj0pFypDVUm19PUR6Y9pXCT98A=
Subject key identifier: F6:A1:F9:80:0A:69:65:7D:5A:3C:78:13:B9:3F:AF:CA:3A:8E:9B:39
Authority key identifier: 46:AA:60:67:6C:13:0C:64:38:E4:5B:5A:60:72:10:E9:56:6B:68:32
Certificate issuer: /CN=46aa60676c130c6438e45b5a607210e9566b6832
Certificate serial: 01974CD6B64D290F7EA873B24795FBFD7679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
Manifest number: 0297
Signing time: Sun 08 Jun 2025 00:00:28 +0000
Manifest this update: Sun 08 Jun 2025 00:00:28 +0000
Manifest next update: Mon 09 Jun 2025 00:00:28 +0000
Files and hashes: 1: 4pIrmmCZWAO8NuTmun2AQKQETQo.roa (hash: Pf6nhAI8L5UL8XOlhvccLv1CzKTIGW/DapLLMv9479I=)
2: RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl (hash: oFDYS8G8iEMwVw9BZJSHYPi+Q5jyadm/IZy6IJlCZY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:b6:4d:29:0f:7e:a8:73:b2:47:95:fb:fd:76:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46aa60676c130c6438e45b5a607210e9566b6832
Validity
Not Before: Jun 8 00:00:28 2025 GMT
Not After : Jun 9 00:00:28 2025 GMT
Subject: CN=f6a1f9800a69657d5a3c7813b93fafca3a8e9b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:38:53:45:71:91:43:88:09:6e:03:02:57:c5:
79:81:c5:51:ba:1c:3a:27:c5:74:3a:1a:56:83:ee:
08:d8:80:30:af:aa:81:c1:16:d6:db:35:3d:4b:2c:
2c:18:38:2e:65:d7:bb:42:f8:b4:c7:0f:57:7e:e3:
8b:8a:d2:44:21:18:fe:ca:35:54:17:fb:37:36:18:
d1:c4:8b:92:c5:ed:1e:81:31:49:a4:93:72:e9:11:
2a:ba:62:44:a0:c6:29:6b:75:bf:8c:5d:b0:01:3b:
64:c7:a9:91:ce:d4:64:bb:5b:66:39:53:ca:9e:c9:
c1:76:52:16:f8:c0:f2:e8:5c:2c:17:77:56:ce:3b:
14:47:d4:17:6f:9b:1d:2c:27:c9:41:3b:8a:00:dd:
83:6e:dc:c2:77:36:48:e4:22:ac:32:f9:2f:fa:4d:
a9:47:4c:a5:ed:20:d9:b7:9b:86:70:74:64:09:8d:
8d:45:60:b3:b5:88:44:83:40:10:46:19:ec:9f:bd:
40:bf:c3:6b:39:70:32:e7:a0:cc:f2:92:ca:63:e8:
a3:8e:2f:5e:7f:2a:6f:3a:1d:61:68:a3:a3:95:d2:
83:cd:47:2c:2a:11:ab:df:0e:b3:93:b4:2d:2c:78:
6b:07:68:36:73:7d:10:7f:75:e0:f0:9c:f6:ce:46:
f4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A1:F9:80:0A:69:65:7D:5A:3C:78:13:B9:3F:AF:CA:3A:8E:9B:39
X509v3 Authority Key Identifier:
keyid:46:AA:60:67:6C:13:0C:64:38:E4:5B:5A:60:72:10:E9:56:6B:68:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:79:b2:a9:64:16:7c:58:7b:86:a8:7d:c9:13:7f:52:ad:df:
38:bb:e6:f9:8c:29:da:32:5c:79:d7:65:a2:f2:4c:2d:c4:a7:
7f:7b:c2:ea:f9:29:7a:90:98:3e:2f:e9:cf:be:2c:91:00:8b:
02:de:40:c7:4d:72:a8:54:c8:d7:65:0a:fc:33:f5:e5:b3:81:
fa:9a:44:86:e7:f8:5a:30:04:00:c2:c4:9d:26:65:c0:cc:0a:
8d:3d:ba:8a:f8:15:ba:7b:fd:2c:08:c8:cb:ba:3f:3c:0f:d9:
0a:17:9d:22:ce:cc:64:c3:2e:4c:54:ef:90:31:6d:a0:80:cc:
49:4d:89:60:b2:cf:e3:8d:b8:fc:c0:0a:fc:39:14:57:76:44:
de:5f:b8:be:08:cb:0c:23:4b:a4:6b:98:17:45:98:59:a9:d4:
c3:26:00:1f:b0:fd:80:1f:d6:fb:65:e0:6a:ce:04:ad:6d:22:
d9:a0:32:8b:24:35:1d:8e:2f:85:8f:0a:a1:54:37:8b:fa:34:
64:87:f5:7f:4c:59:47:54:f0:85:a0:49:f1:c4:05:2e:57:ca:
79:7a:e4:ea:7d:e9:a2:0a:82:3a:6e:7e:b8:a6:b0:3e:f2:cd:
d0:c4:b6:7f:bc:99:c2:ab:58:dc:c1:24:3e:68:fb:dd:a0:92:
82:0d:7c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:56:29 2025 by rpki-client