Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
File: h_Qa4HeeN978abKlsPerj9QM0-c.mft (raw, json)
Hash identifier: pOtYxGHIcKb8OG/duPaVWzOy9cblx4Q+8nxBPGZwz/Q=
Subject key identifier: AA:69:0E:E1:2E:37:02:27:69:C1:01:5E:2F:5C:EA:F9:30:A2:AA:B6
Authority key identifier: 87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
Certificate issuer: /CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Certificate serial: 0197B7EA90E598F628C73AD41C14AED6B685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 19:01:32 +0000
Manifest this update: Sat 28 Jun 2025 19:01:32 +0000
Manifest next update: Sun 29 Jun 2025 19:01:32 +0000
Files and hashes: 1: 9a42cuWC_BNDA4DIJ7JykE7wjb4.roa (hash: qRT9zf7xfXIljPHzFl0mxSNGtfeCmpUyqkEyE4RnCGQ=)
2: KqEu5jotrlVlkvOlW0cERo3_YvU.roa (hash: Ef6oWYOyhbekzNl2fidznurlFufl1VnCP1Vvg7sBYuQ=)
3: Ms_pDtAjK9tb1e5h7bLoQWbyHs8.roa (hash: cL+zxxB8p9BDEROGB77OysHEV8P4dX2U5M5xqP9Q6C0=)
4: h_Qa4HeeN978abKlsPerj9QM0-c.crl (hash: 5wsmWXAevJVWex/YopXYJE4Wn9uBv2tovBjwmunBY6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:90:e5:98:f6:28:c7:3a:d4:1c:14:ae:d6:b6:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Validity
Not Before: Jun 28 19:01:32 2025 GMT
Not After : Jun 29 19:01:32 2025 GMT
Subject: CN=aa690ee12e37022769c1015e2f5ceaf930a2aab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cd:06:e4:f6:e9:4d:40:ab:31:e2:b9:4d:ff:
49:a6:b3:fc:24:0a:64:37:57:ed:f6:68:3a:ea:bc:
38:ed:88:96:dd:26:74:26:64:bf:73:f4:6d:fb:3a:
e7:e4:a7:25:31:6d:ab:75:71:8e:45:28:26:f2:74:
d0:f1:35:e6:23:61:c9:69:d6:1d:ba:6c:15:6a:8c:
3a:38:f1:56:46:49:bd:75:09:0b:75:ca:c1:39:3a:
a9:d9:99:b6:2e:50:d1:8b:0d:11:a4:78:2f:1f:24:
90:95:e6:ee:65:c8:19:2a:b9:a6:f9:58:88:39:2d:
00:80:43:f5:e4:b2:dc:96:36:a0:10:4f:17:8c:a6:
a2:43:81:33:0c:3d:47:90:d0:5a:c8:9d:74:b8:2d:
44:94:09:57:1b:5d:50:90:3e:29:ce:b5:3b:9b:5e:
2d:ad:29:83:dc:2f:6f:00:d5:76:72:c1:6d:9b:8f:
21:f7:84:ae:f4:90:b1:42:bd:68:5e:13:c2:59:66:
56:b4:0f:07:88:69:dc:22:3c:21:92:5b:51:a0:6f:
9d:7a:89:8c:91:f0:d1:9d:71:07:13:33:a4:89:c6:
ff:62:0a:06:66:e8:e8:8b:36:d5:c5:d7:d9:77:58:
1a:16:be:7b:be:32:aa:be:3f:7c:8d:18:86:df:14:
c7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:69:0E:E1:2E:37:02:27:69:C1:01:5E:2F:5C:EA:F9:30:A2:AA:B6
X509v3 Authority Key Identifier:
keyid:87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d5:80:a1:5d:13:d3:53:56:0f:4e:91:fe:a8:25:d6:b8:99:
22:01:3c:c0:18:17:af:b7:af:16:45:11:e2:49:02:ce:19:8f:
6a:e7:8b:5f:23:15:ac:0d:8d:6c:65:2b:d9:8b:c3:17:4c:fd:
0e:4a:fd:f8:45:e6:a7:53:bf:ab:a5:b0:a0:00:ed:b0:50:41:
06:5b:26:a1:fa:cb:c3:f6:02:12:3d:c7:3b:6a:9f:65:a9:63:
75:66:23:ab:92:5a:4a:20:8a:d4:7f:d3:dc:8f:44:1d:50:3d:
64:27:1b:41:e8:9e:f9:39:57:b9:e4:50:42:16:8a:96:1a:cb:
6b:21:29:2d:3d:67:41:3b:86:b9:14:38:b9:80:fd:b6:f1:d0:
19:c4:12:ee:41:bb:ca:26:1a:50:bd:fa:09:ff:a8:a3:3a:4b:
40:3d:c0:e1:80:91:97:6e:01:84:9a:0a:b8:d6:eb:24:51:8a:
57:b9:60:0e:86:e8:f5:82:63:0f:2a:4d:52:4f:de:8f:b4:d3:
cf:64:d5:9e:1f:e7:bf:d0:ea:d2:83:47:69:60:0a:e1:a5:3a:
8b:5a:29:9d:fc:b6:aa:1b:c8:2f:53:20:8c:e5:65:9c:35:07:
4d:19:0a:46:94:35:1c:9c:27:e1:35:c8:d6:c5:9e:66:fe:64:
7b:f8:68:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:10:34 2025 by rpki-client