Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
File: qNU0ujy0JM9cXjuiVLojJQgGWLA.mft (raw, json)
Hash identifier: 40ntwmcydTvIaLb0KN3x0ssuw5kjS6nV679//YZ/UG4=
Subject key identifier: 9D:DB:7F:94:CF:B6:11:16:CF:AB:DD:85:FB:92:AF:C9:3F:64:63:AB
Authority key identifier: A8:D5:34:BA:3C:B4:24:CF:5C:5E:3B:A2:54:BA:23:25:08:06:58:B0
Certificate issuer: /CN=a8d534ba3cb424cf5c5e3ba254ba2325080658b0
Certificate serial: 01974A43D232F76BB90C1EBBE472EB2E7BDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qNU0ujy0JM9cXjuiVLojJQgGWLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
Manifest number: 06C0
Signing time: Sat 07 Jun 2025 12:00:48 +0000
Manifest this update: Sat 07 Jun 2025 12:00:48 +0000
Manifest next update: Sun 08 Jun 2025 12:00:48 +0000
Files and hashes: 1: oATe-_oISha7IgG23AEM218xrRE.roa (hash: uddGyx2jLyok/qpchLVARkXw2HFXXOE6m1d81wn4B4M=)
2: qNU0ujy0JM9cXjuiVLojJQgGWLA.crl (hash: H1dBgVN3R4kdbBvqmCVdyIFCxcG97bRUJZ//8409TJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qNU0ujy0JM9cXjuiVLojJQgGWLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:d2:32:f7:6b:b9:0c:1e:bb:e4:72:eb:2e:7b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8d534ba3cb424cf5c5e3ba254ba2325080658b0
Validity
Not Before: Jun 7 12:00:48 2025 GMT
Not After : Jun 8 12:00:48 2025 GMT
Subject: CN=9ddb7f94cfb61116cfabdd85fb92afc93f6463ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d2:88:0e:98:12:14:76:e1:64:01:de:6b:bc:
80:76:14:4a:93:05:5f:04:ae:d5:4d:cb:f3:f0:81:
e6:45:27:eb:5c:06:c7:ff:bd:88:6d:62:9f:fc:fd:
29:78:ed:ca:53:a4:46:e3:7c:8a:f7:62:6a:72:3d:
9b:c3:db:f2:43:01:22:f1:d3:34:3f:c2:a2:6c:f7:
9b:7d:dc:93:f1:dd:a3:88:0e:07:91:de:0e:c2:8f:
a5:e2:13:5e:69:2a:da:13:b3:94:54:b8:97:a1:ed:
b9:15:e6:8b:20:dc:7a:27:4a:68:af:06:96:35:a6:
01:75:48:95:32:e0:57:eb:cd:c1:29:fb:2f:a5:df:
fe:78:dc:0d:9b:82:62:83:75:3f:82:56:90:27:e9:
82:bf:4f:1d:e6:ed:2a:f3:95:c9:67:cc:3e:f1:f8:
a2:00:fe:80:ff:ab:d8:22:8d:44:5a:af:df:04:6c:
ca:ce:6b:83:b8:29:8f:9a:76:65:71:d1:28:c2:33:
80:37:b1:f5:17:80:05:f8:f2:fe:78:15:2a:3e:af:
bd:34:c9:5d:8d:a9:f0:d3:ac:84:61:cc:dd:38:7e:
71:df:7d:89:4b:5b:3c:3c:ff:4c:33:e5:90:04:19:
5b:41:0f:f1:af:57:7e:c7:37:30:92:51:6c:14:13:
b4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:DB:7F:94:CF:B6:11:16:CF:AB:DD:85:FB:92:AF:C9:3F:64:63:AB
X509v3 Authority Key Identifier:
keyid:A8:D5:34:BA:3C:B4:24:CF:5C:5E:3B:A2:54:BA:23:25:08:06:58:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qNU0ujy0JM9cXjuiVLojJQgGWLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c0:a2:7e:b8:e8:64:36:a8:2c:72:30:6e:6a:00:2a:32:f4:
b2:72:6e:84:be:a0:c5:d4:3e:d3:35:85:13:89:42:44:d9:0a:
56:e1:dc:a8:40:71:09:e4:dd:9d:b3:78:f6:1e:81:02:08:0e:
46:dc:e4:ad:b5:89:99:17:b1:10:76:dc:c5:28:1b:f5:e1:68:
df:99:28:c5:da:2b:3e:07:2f:97:b9:91:cc:7a:b9:16:f7:54:
69:e2:6b:c7:9d:e5:0e:69:00:26:c6:c1:ff:66:74:db:60:f7:
99:45:97:85:38:bc:7d:06:e1:de:d7:b9:b2:eb:86:be:6a:87:
8c:b4:ce:27:97:aa:17:57:4b:61:af:e1:51:25:77:97:5b:32:
f9:f3:95:4d:ff:98:f1:3c:e3:a3:21:a6:b9:84:74:84:13:7f:
72:42:2c:31:ab:67:e2:7a:8a:22:c1:35:14:e3:6e:7a:13:c8:
a4:eb:f5:05:76:6e:12:ba:39:65:d7:d0:5c:8d:ce:56:50:47:
5c:12:5c:9a:dd:7c:95:f1:e3:fd:98:22:a2:68:e5:8c:c9:d6:
db:18:7a:5b:55:fd:22:2d:1d:69:6a:98:c4:05:50:a5:97:a8:
94:c4:e2:71:02:0b:ce:87:84:d8:32:7f:b1:ad:b4:7d:cb:dd:
f5:f9:d5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:33:00 2025 by rpki-client