Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
File: qsV1yvoAvEHVfElKwfXbz-54My4.mft (raw, json)
Hash identifier: fI4LliuFWOJ1DSYynjNfJYHyJK1ThN9fK4eVV2xuSRQ=
Subject key identifier: 3C:F6:69:12:4F:DE:89:4F:BA:5E:57:44:07:CE:35:E0:F6:47:1B:D3
Authority key identifier: AA:C5:75:CA:FA:00:BC:41:D5:7C:49:4A:C1:F5:DB:CF:EE:78:33:2E
Certificate issuer: /CN=aac575cafa00bc41d57c494ac1f5dbcfee78332e
Certificate serial: 01974CD73118E9D78364C67CFB40931E4A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 00:01:00 +0000
Manifest this update: Sun 08 Jun 2025 00:01:00 +0000
Manifest next update: Mon 09 Jun 2025 00:01:00 +0000
Files and hashes: 1: XtPvNkbtFvkSrn1XGkdkM55xfJ4.roa (hash: XvdvDvnaLffIXutFMAXtL47S87Pb9dwgFS/EYsDxu5Q=)
2: qsV1yvoAvEHVfElKwfXbz-54My4.crl (hash: RbaJJKxJhktyGWAlrUXiDllWuH0Q8E7Sc7qt+C7HEAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:31:18:e9:d7:83:64:c6:7c:fb:40:93:1e:4a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac575cafa00bc41d57c494ac1f5dbcfee78332e
Validity
Not Before: Jun 8 00:01:00 2025 GMT
Not After : Jun 9 00:01:00 2025 GMT
Subject: CN=3cf669124fde894fba5e574407ce35e0f6471bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6e:c8:17:18:cc:c6:39:11:07:e8:3b:e9:5f:
13:ca:04:87:61:44:db:0c:f3:83:65:7f:d2:2f:c2:
fe:cc:bf:0b:60:2d:8c:1f:4e:9b:01:6f:9b:95:77:
cc:31:82:dc:3c:38:dd:0b:60:48:a8:3a:5c:11:bb:
88:73:b8:ed:34:2a:4f:b4:0a:dc:6d:f7:71:f2:59:
23:12:5a:c6:07:94:e6:26:38:31:b9:94:d4:9c:34:
e5:38:4e:8b:02:ab:7b:27:f4:91:06:01:d1:5c:1a:
4f:d0:d0:6d:f4:60:ed:f4:6f:ae:63:08:3f:30:ca:
9a:30:4f:c9:be:a4:bb:6d:6a:30:a4:d0:50:ec:50:
3c:65:b9:f6:e6:11:e1:bd:58:9a:53:29:02:13:dc:
e3:78:b1:70:bc:3c:46:9d:d5:de:4f:a2:5e:c6:9a:
85:31:79:4d:92:34:28:63:52:ce:8a:22:81:62:e1:
11:50:0e:39:58:22:26:3c:ce:65:c4:3a:2f:e6:96:
ca:46:88:a1:a1:21:6f:02:d8:8c:f3:2c:21:ed:c1:
c3:ac:eb:19:04:50:bb:28:00:92:ab:be:2f:b3:ba:
7c:ea:dc:42:a6:48:32:9d:93:87:58:ae:eb:3c:d9:
54:df:74:ae:09:6a:4b:1c:86:6d:40:ac:4b:9e:29:
6d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F6:69:12:4F:DE:89:4F:BA:5E:57:44:07:CE:35:E0:F6:47:1B:D3
X509v3 Authority Key Identifier:
keyid:AA:C5:75:CA:FA:00:BC:41:D5:7C:49:4A:C1:F5:DB:CF:EE:78:33:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:51:5b:18:fd:65:54:86:6a:2c:4d:a5:7f:3b:1f:b2:9a:94:
26:79:e3:40:16:86:3c:75:76:1d:00:8b:07:11:e8:17:a2:a4:
8d:db:52:31:34:6b:38:a4:2d:27:7b:84:3a:8b:05:23:bc:84:
93:e6:4b:49:84:ff:23:c1:45:77:18:18:cf:78:24:ba:e9:be:
12:80:f2:45:6d:f8:36:f3:2a:ce:35:13:57:b8:1b:11:53:5c:
bc:d6:67:ec:73:97:10:cb:6d:81:c9:ec:14:ae:f8:a6:be:d9:
88:75:95:1b:07:36:8c:96:c3:4e:e0:b9:3c:03:bd:ce:b6:b4:
03:72:4a:02:87:76:9f:7d:0b:c9:37:dc:c3:0c:65:a3:06:ca:
ac:31:dd:f7:be:35:c9:ac:0e:5d:42:04:a4:19:3e:e6:3e:b9:
bd:5f:59:2b:21:f4:bd:57:9e:e9:de:80:17:75:6a:4f:ec:fd:
e2:98:c7:44:80:24:86:9a:58:16:f1:a6:ad:46:d7:ef:8a:b5:
81:36:1f:86:32:47:f5:97:f7:d1:c1:11:d5:30:3b:be:57:a5:
b9:5a:e5:de:f7:44:9a:ae:6d:3d:87:fd:0a:08:b6:b1:f8:2d:
0e:ca:d6:a6:b2:02:22:ab:f7:51:7d:3f:b8:aa:ca:51:ab:f6:
78:7b:f9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:37:46 2025 by rpki-client