Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
File: qjHJjjyrghyE3e_yBp4CJZvW5hw.mft (raw, json)
Hash identifier: bc6I3HZzVaXB+B8RwZRaBuuYFi97KqtuzN2l2+6/+VE=
Subject key identifier: A6:F3:BB:43:B0:E3:97:E9:8B:EC:75:86:0B:DE:35:BD:AA:BF:FB:B4
Authority key identifier: AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
Certificate issuer: /CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
Certificate serial: 0197B9A1EA5F866D43229413928706BBF10F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
Manifest number: 0B27
Signing time: Sun 29 Jun 2025 03:01:25 +0000
Manifest this update: Sun 29 Jun 2025 03:01:25 +0000
Manifest next update: Mon 30 Jun 2025 03:01:25 +0000
Files and hashes: 1: AIeHAMlo02ixYJZr9DxoRfeqC_w.roa (hash: r/OyoKCdS9zD7ksUp6W0p8pqS4rPDdjM46a0P82mb/E=)
2: qjHJjjyrghyE3e_yBp4CJZvW5hw.crl (hash: 7bI/2uQqtFnfjoQfn65J8oZwBERTey5MoQ5suZKaipQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 03:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:ea:5f:86:6d:43:22:94:13:92:87:06:bb:f1:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
Validity
Not Before: Jun 29 03:01:25 2025 GMT
Not After : Jun 30 03:01:25 2025 GMT
Subject: CN=a6f3bb43b0e397e98bec75860bde35bdaabffbb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:05:cf:88:9e:b9:c0:44:cd:01:08:c9:ab:4b:
b0:86:9c:f9:de:28:6f:02:92:77:7b:7d:f1:bf:ee:
ee:d1:2d:9a:2a:6b:a0:af:55:c9:df:f6:52:62:c0:
d0:6f:5e:14:b2:e4:c6:fc:7c:34:f3:6a:1a:9e:a3:
33:04:56:2a:4c:f3:01:5b:35:ca:32:11:0e:70:dc:
c9:b5:9b:76:5a:f1:4b:a3:0f:33:8c:6e:44:6a:bf:
b3:19:1d:99:47:ab:dd:43:7b:e5:84:79:9a:d9:0b:
31:26:02:cd:8a:54:7c:97:18:f3:1d:a1:19:f7:d1:
c1:bb:d8:03:93:f7:41:e2:b3:10:28:26:00:3b:1d:
a9:2f:2e:67:fb:27:1d:f0:3f:ee:46:29:22:4b:77:
5f:dc:9b:b9:5e:8a:a9:6e:60:e7:cc:fc:f2:ca:b1:
7b:27:be:e7:70:69:34:77:76:9e:b9:b6:b4:a5:88:
eb:f3:de:72:ee:82:2d:33:e7:14:00:6b:9e:a8:9f:
36:8a:75:f9:03:ea:31:83:d0:5d:6b:22:ff:0f:89:
3c:de:b5:9f:95:4c:66:7f:2d:72:e8:cf:25:60:fa:
52:4c:03:ad:88:fa:c9:d1:92:fb:51:94:12:b6:e6:
cd:85:be:62:2d:94:e8:04:34:54:08:e8:73:a1:7d:
8e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F3:BB:43:B0:E3:97:E9:8B:EC:75:86:0B:DE:35:BD:AA:BF:FB:B4
X509v3 Authority Key Identifier:
keyid:AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b2:10:5a:bb:a8:97:9d:56:50:79:26:6f:de:54:39:d0:78:
8c:2e:ec:6e:3c:1b:13:10:da:72:1b:3c:48:60:d8:3b:af:15:
0f:6b:06:34:f4:38:a9:7a:7f:7d:ef:5e:c4:76:13:94:8e:b6:
46:25:22:c2:17:7f:92:53:a9:b5:f0:da:4b:21:fb:76:7d:ce:
f5:e0:58:d8:e7:e8:70:d3:c1:5a:ab:f6:f9:f0:f3:0c:0a:08:
c8:d1:e7:57:ad:a8:4b:68:cc:e4:7b:06:70:f7:cc:52:ab:b3:
b4:39:72:bd:13:a7:b0:b1:55:37:b8:eb:e7:2c:ca:01:77:30:
1d:1f:6d:b4:21:2f:23:77:00:ce:35:40:f5:7f:ec:71:70:ef:
46:3d:ae:60:a7:4a:86:e3:20:f9:1b:c6:a1:9e:63:8a:a7:76:
ad:8a:d1:73:67:70:21:1a:df:b2:0b:82:31:23:a7:5b:cf:23:
81:0f:a5:08:da:04:2d:96:98:21:74:51:48:d2:61:24:ca:eb:
bb:63:14:9b:b1:dc:04:4a:ee:6a:2e:aa:55:71:45:3b:84:62:
7d:0e:e0:df:a6:7f:a3:e8:77:ed:5e:6b:4e:9a:3a:cc:a3:94:
b0:b4:60:93:98:b9:40:26:57:5f:1b:08:1b:56:cc:a1:5d:66:
85:89:82:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:09:40 2025 by rpki-client