Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
File: qEOOrPTQZOh6drtGLTtLLMOFikw.mft (raw, json)
Hash identifier: ppQvZSRmre4Fo48uD8jALKYKvMI3H41Tg/OYZushMEA=
Subject key identifier: 32:B2:88:FE:F7:B9:28:E0:B8:BA:E6:5D:5D:D0:EB:77:A5:1A:0B:F9
Authority key identifier: A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
Certificate issuer: /CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Certificate serial: 0197507CC0CDD2E55747EB859D8D8A03F025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
Manifest number: 0CFB
Signing time: Sun 08 Jun 2025 17:00:42 +0000
Manifest this update: Sun 08 Jun 2025 17:00:42 +0000
Manifest next update: Mon 09 Jun 2025 17:00:42 +0000
Files and hashes: 1: 1VL4lYJptkpi6ZtVoZgmoJ6ksn0.roa (hash: f1kBG9NlxREDPNdWOkJs8Cv0Ij2AV1IHOO/Hc9KsOpQ=)
2: eWIsK00nv-TBVtwDZCA3scOHg9s.roa (hash: y147gGaB8bkjz0BvOSbEDQ7Eu45dIgspzGe/6ZKyCR0=)
3: qEOOrPTQZOh6drtGLTtLLMOFikw.crl (hash: RZ9rka+Mv2eDju4KzTZRb6O+NopRGfkFKwRMo5gFh6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:7c:c0:cd:d2:e5:57:47:eb:85:9d:8d:8a:03:f0:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Validity
Not Before: Jun 8 17:00:42 2025 GMT
Not After : Jun 9 17:00:42 2025 GMT
Subject: CN=32b288fef7b928e0b8bae65d5dd0eb77a51a0bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4d:0f:da:7a:fc:2a:b5:2e:b0:b7:e3:37:68:
1f:56:3c:ba:ee:ba:d6:21:29:02:35:2e:61:a1:df:
e0:aa:03:2f:3d:bd:a1:b5:7b:3f:17:e9:f3:c6:aa:
3b:3e:b6:34:f6:52:e3:90:e9:4f:e5:a5:4b:ba:48:
a8:f4:e7:a2:4c:dc:29:46:00:45:af:bb:2a:74:67:
f3:cd:3a:88:4b:f1:0c:8a:c4:fb:05:0c:6f:9f:3d:
fa:8a:92:93:0c:c7:9a:22:69:10:cc:6d:b3:17:5a:
30:26:53:65:23:91:f8:e1:1b:73:44:7d:bb:26:c8:
c8:a7:2a:ac:51:10:a6:b9:48:49:0e:c2:7c:ae:cc:
d8:12:ca:17:d8:1f:54:4c:8f:d1:d5:94:66:24:f0:
11:a8:46:53:47:e9:c6:c0:72:26:b8:31:db:39:01:
ec:ea:af:25:10:c4:8a:a1:be:ee:fe:b6:82:84:75:
e7:e5:bd:2f:ce:98:51:9f:21:24:e0:ad:2c:d8:e0:
e2:24:08:80:9f:ea:e4:44:3b:0b:b3:01:ad:a4:b4:
33:37:70:4f:06:7a:46:8e:d8:e2:0e:80:2b:36:03:
25:fa:35:6d:9b:a6:a1:f6:93:5b:dc:58:a2:b6:e3:
42:d2:37:e5:3a:4d:2e:6d:6b:4d:c0:b5:86:d3:c1:
b9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B2:88:FE:F7:B9:28:E0:B8:BA:E6:5D:5D:D0:EB:77:A5:1A:0B:F9
X509v3 Authority Key Identifier:
keyid:A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:d2:93:67:c2:f0:2b:03:84:4c:0a:04:09:09:2d:58:b7:49:
58:ad:77:08:0c:27:c4:ab:29:0e:ae:0b:19:40:68:bf:82:ac:
e1:8d:85:79:f1:67:c7:cb:4e:5c:3f:a6:55:a9:28:37:7b:ec:
e1:45:28:88:74:e1:85:7b:f5:05:78:82:db:35:03:10:a3:d2:
64:3f:e2:6b:18:31:be:54:70:d5:4a:ff:7e:75:e2:a5:29:ac:
07:77:58:47:18:ae:2c:58:16:ac:0c:ea:c9:f7:60:b1:d6:7e:
b8:96:25:7a:75:f6:57:4e:df:5c:b6:01:43:72:0c:e4:7d:0b:
8f:31:e3:3e:be:ea:14:8c:3b:d8:0c:2f:60:01:80:04:29:cd:
42:93:31:f0:b6:b2:98:3d:bf:27:23:e1:48:10:78:15:9d:ca:
04:ec:64:31:74:90:d4:08:ac:0e:1a:1f:d9:d6:57:a3:f8:50:
31:7b:bb:8c:91:2e:7d:52:4e:5d:e2:d5:a6:87:32:05:24:fe:
f7:32:c9:42:46:ea:8e:17:e4:ac:94:3f:42:b7:43:72:61:a3:
95:cb:99:6a:52:77:d4:14:95:51:e2:64:e1:f1:8b:00:2c:52:
a9:40:51:9c:5b:f0:28:9a:f3:10:99:d1:fe:48:37:4e:04:74:
e1:b3:6b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:22:14 2025 by rpki-client