Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
File: qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft (raw, json)
Hash identifier: 0703qCx83mgo88l/X0RrDF6O9Hw3sBDFjspdZXLOqOc=
Subject key identifier: B8:49:C1:24:E5:12:40:80:FE:03:7A:02:F6:D4:E9:16:40:A9:84:56
Authority key identifier: A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
Certificate issuer: /CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Certificate serial: 019748FA400C41BA90EFA6624F67627D25E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
Manifest number: 0C11
Signing time: Sat 07 Jun 2025 06:00:49 +0000
Manifest this update: Sat 07 Jun 2025 06:00:49 +0000
Manifest next update: Sun 08 Jun 2025 06:00:49 +0000
Files and hashes: 1: O_hdcVHlxOZo_l-7xdIRhesWw_A.roa (hash: mfR5DtCjLIjJTqw++nVFAPPeJtIg5fCaC2S+CCvWR50=)
2: XwnrCE6pmPQ_ODmEcUdfJGretx8.roa (hash: 5lKgnXAmcufifa9qAWfP1aELwyqHVzg1TzDHW6nCY9c=)
3: qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl (hash: 4d7E7BnDIOqLRW3akUQvNGA94rtWg5LwBJkMoUzLl1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:40:0c:41:ba:90:ef:a6:62:4f:67:62:7d:25:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Validity
Not Before: Jun 7 06:00:49 2025 GMT
Not After : Jun 8 06:00:49 2025 GMT
Subject: CN=b849c124e5124080fe037a02f6d4e91640a98456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f2:17:e8:a8:c4:2c:bd:27:a5:74:91:f2:51:
02:02:4d:b0:b6:87:20:d7:61:87:19:1b:f5:09:aa:
93:0b:c3:f8:20:15:7c:46:24:4f:0f:e5:42:4e:ec:
74:38:d9:98:9e:4d:da:0a:0b:45:4b:71:4b:c1:52:
39:03:7e:d0:eb:8b:7a:79:f7:16:80:65:a8:da:90:
43:ad:9c:8b:46:3e:cb:9f:96:63:82:ec:a8:82:83:
ad:49:5e:97:3c:24:69:86:f9:b8:01:b2:f1:49:57:
96:a0:06:31:00:ae:9c:17:7a:f2:68:bd:6a:6b:14:
1c:0f:c3:47:0c:5e:a5:8f:6f:47:b2:a3:b7:0a:53:
57:51:2c:48:a6:c2:4b:d9:99:80:b5:79:07:4d:5c:
5a:0a:31:93:95:c4:6e:58:86:90:f9:1f:32:3f:9e:
18:30:d4:60:1d:48:6c:0b:9b:70:7b:bc:9a:58:3e:
f9:49:12:3c:56:77:74:91:7d:25:4c:5d:59:6a:eb:
f8:4e:89:23:a1:01:8f:ee:05:78:b9:7d:20:9d:fc:
52:e2:a8:fb:af:d0:e3:99:e4:86:23:59:5b:07:19:
09:ac:c8:61:20:d1:d6:03:87:ab:dd:41:d4:1b:4a:
74:b5:ef:1f:0e:a2:36:bd:04:eb:28:6d:a0:c1:bc:
75:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:49:C1:24:E5:12:40:80:FE:03:7A:02:F6:D4:E9:16:40:A9:84:56
X509v3 Authority Key Identifier:
keyid:A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:27:08:74:8b:80:9b:f0:89:51:7e:c7:f3:48:8c:f5:09:3b:
0f:00:bd:98:04:f5:ad:2f:82:44:6b:ed:fc:3c:d5:42:1c:5e:
b3:09:51:9b:7d:2e:d7:a7:3c:79:74:8c:35:3e:6b:63:a1:a6:
2a:53:a9:5d:8a:79:de:69:91:2c:9f:9c:4f:2f:a3:46:ac:da:
84:ee:1d:70:8e:2c:1c:5d:73:a3:1a:8c:a6:f0:9d:03:2c:bf:
3a:13:63:80:a9:26:db:78:b9:71:dd:47:7f:55:02:01:8f:31:
e2:a8:7c:28:da:d7:c5:9c:12:8d:e4:97:b9:9e:62:d5:35:ce:
b3:e0:b8:58:34:92:5e:2d:69:33:29:7e:ef:e5:0a:c0:b0:1d:
62:c3:8b:96:b1:86:36:8e:d7:e9:bd:fc:17:48:bc:e1:16:1a:
eb:89:cb:6e:b9:e4:fb:01:12:59:24:ba:09:eb:f3:a7:69:a3:
dc:bf:d6:b3:60:87:78:4c:0d:77:d5:a3:87:d4:e7:cf:e0:cd:
38:81:14:d4:5b:3f:26:df:60:9b:5d:09:9e:66:7c:25:39:94:
a1:99:b1:8d:11:17:1a:79:c6:59:7e:a2:be:a9:2b:72:5e:61:
8e:f9:11:33:7f:0b:0a:5c:ae:ee:fa:14:0e:cf:af:ad:6d:fb:
7f:4a:d1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:23:00 2025 by rpki-client