Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
File: qD8d69XUeEhD-qKIsuAciFBsHMk.mft (raw, json)
Hash identifier: GOBmAQiOz3oK/XRU+JZBS9G4B8gAnqGJZVm/1l1dztU=
Subject key identifier: 81:2F:E0:36:51:49:A9:9F:D3:24:AE:DC:16:50:B0:8B:D3:7E:99:80
Authority key identifier: A8:3F:1D:EB:D5:D4:78:48:43:FA:A2:88:B2:E0:1C:88:50:6C:1C:C9
Certificate issuer: /CN=a83f1debd5d4784843faa288b2e01c88506c1cc9
Certificate serial: 019748FAB93B56D6F9512263CA76A12E2181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
Manifest number: 13D9
Signing time: Sat 07 Jun 2025 06:01:20 +0000
Manifest this update: Sat 07 Jun 2025 06:01:20 +0000
Manifest next update: Sun 08 Jun 2025 06:01:20 +0000
Files and hashes: 1: BZ13VNeYDJ675QrTvza6Su89fFQ.roa (hash: 1LD0YSVmtKovTGtmhUY3CjQg1PtKAp7I1QWK9ijZOII=)
2: qD8d69XUeEhD-qKIsuAciFBsHMk.crl (hash: c6MrtkV2ZGW/0fpY2/GOeWIg0P0Bjjd1gGeNge7k8+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:b9:3b:56:d6:f9:51:22:63:ca:76:a1:2e:21:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83f1debd5d4784843faa288b2e01c88506c1cc9
Validity
Not Before: Jun 7 06:01:20 2025 GMT
Not After : Jun 8 06:01:20 2025 GMT
Subject: CN=812fe0365149a99fd324aedc1650b08bd37e9980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ba:b0:b9:93:8b:81:a8:81:32:dd:f4:56:d9:
72:44:d7:59:0f:ee:ff:4c:23:58:25:3e:a1:58:00:
05:46:be:49:e2:ae:fb:dc:7c:af:65:25:4f:07:87:
f7:f6:43:c0:5c:e0:56:a0:f6:63:b0:f8:2c:ba:a1:
b7:34:07:4b:a6:78:78:f9:f8:14:59:c9:dd:54:a7:
72:e2:25:d0:43:12:59:aa:11:f6:be:a9:76:42:e2:
20:bc:8a:32:fd:60:0e:73:e7:c9:a0:a8:d2:5d:5a:
c2:b4:7d:10:c2:f8:35:db:f3:e1:63:8f:32:30:67:
5f:5b:26:87:dd:0a:0d:06:26:7e:20:31:74:ac:f6:
db:46:d0:e0:ce:b6:6f:d5:60:9e:23:6c:08:f1:72:
53:39:c6:cf:04:75:a5:68:cb:de:ae:20:48:4e:c5:
2d:fc:34:f5:c4:32:44:2e:09:4a:fb:9f:b2:f4:c2:
67:f5:c9:17:e7:8a:be:13:ff:f9:7b:31:f3:a8:7b:
37:c1:71:8b:0f:1e:04:aa:ef:c5:75:ef:5a:bd:86:
b5:3d:3c:0a:d5:a9:9d:f1:0d:85:fb:d3:aa:0a:d6:
0f:0c:81:a7:33:43:6d:51:a8:91:cb:91:49:9b:2e:
c6:36:7d:a3:ab:69:de:18:06:b7:b4:4a:2b:b1:b7:
1e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2F:E0:36:51:49:A9:9F:D3:24:AE:DC:16:50:B0:8B:D3:7E:99:80
X509v3 Authority Key Identifier:
keyid:A8:3F:1D:EB:D5:D4:78:48:43:FA:A2:88:B2:E0:1C:88:50:6C:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:00:8f:bd:e8:32:3f:89:79:7b:0c:9a:77:74:55:16:61:87:
06:6b:46:f8:cf:d2:2c:7c:87:82:f3:59:da:88:11:68:d8:7b:
d5:6c:85:50:f5:1c:fc:63:32:a2:c7:1c:2b:31:b2:e3:ac:36:
b0:0f:1f:83:af:32:7b:5d:93:fb:3e:6d:25:d9:c4:3c:1c:a1:
71:a1:ec:22:60:65:fa:de:a5:12:3f:37:9f:23:74:9d:bf:ab:
8c:c5:d0:fd:17:53:a7:3b:2b:39:1d:23:96:18:a0:d8:65:95:
f9:58:b0:de:e4:1a:b8:c1:db:e2:4a:64:90:9b:d4:7e:67:96:
31:c7:01:30:18:47:7c:8f:37:2b:71:d7:85:62:03:2a:d3:fa:
3a:82:a5:ed:2d:6f:22:9d:5a:89:66:a1:b5:c6:aa:76:aa:cf:
97:e5:cb:b4:e7:21:16:e6:4a:dc:cd:37:51:4a:60:6e:7d:da:
18:7e:4e:d5:c7:ed:bf:9a:79:18:37:7d:1e:a2:45:8b:08:9d:
ee:b7:21:41:b7:6e:ce:59:dc:b6:72:aa:7f:9c:5d:10:02:f6:
7a:e4:64:c9:78:18:fc:bf:de:95:2e:34:e8:a9:55:31:af:20:
38:74:98:0f:3b:5b:db:a9:52:4f:27:22:2c:9e:0b:1a:47:48:
7b:2b:a0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:45:49 2025 by rpki-client