Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
File: uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft (raw, json)
Hash identifier: PPjr3Ac4XsNs9lQ1DpEZltUMFDJXbnp9QCXBYIRZeAk=
Subject key identifier: C1:0B:55:17:60:F9:6D:76:42:67:44:4F:E1:47:CD:23:93:66:3B:9A
Authority key identifier: B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80
Certificate issuer: /CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
Certificate serial: 0197B745961139061FC8D7D908D66D87B213
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 16:01:20 +0000
Manifest this update: Sat 28 Jun 2025 16:01:20 +0000
Manifest next update: Sun 29 Jun 2025 16:01:20 +0000
Files and hashes: 1: 6KXLkC_cgd5ILMccrhh-m3RCwS8.roa (hash: Az+UEZWLV4uod4atp3pTmM4QksD0MTVrJp8g22f4T2Y=)
2: uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl (hash: kWCUggYCY41LTsEGR36oBa7yAssxgH6rzCP+TICPWrY=)
3: wCMVD4s-MzexAEYCNnm0u-lWVks.roa (hash: 1CzqXOjbHH5Z0NSEWz+9Qkw44w+rWwhDlrc+ZZXhbB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:96:11:39:06:1f:c8:d7:d9:08:d6:6d:87:b2:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
Validity
Not Before: Jun 28 16:01:20 2025 GMT
Not After : Jun 29 16:01:20 2025 GMT
Subject: CN=c10b551760f96d764267444fe147cd2393663b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fd:4d:4e:e8:36:7f:3a:27:86:ba:f7:2b:b0:
d6:64:f5:83:0f:38:f5:69:30:19:e1:f5:62:6a:67:
fb:de:ad:05:24:84:60:c1:4e:89:cf:6e:6b:8a:27:
9e:e1:89:23:71:d2:ee:9f:38:8a:e4:64:84:23:be:
41:ea:4b:1e:69:f1:26:d4:ee:32:7e:da:5e:3b:e5:
43:2b:71:9d:6b:b5:70:2f:92:95:42:66:7a:32:84:
bf:1f:16:e8:22:c6:24:f3:83:c4:7e:e8:8c:de:eb:
2e:81:d8:46:a3:1e:17:91:08:71:29:9c:9d:28:fe:
82:48:95:7b:4f:cd:3c:1f:59:79:27:1c:e0:32:ca:
89:57:60:50:e4:30:81:f8:09:41:5b:63:99:ff:37:
ce:90:93:39:c9:4b:d7:66:c0:a0:10:5c:8d:a9:52:
c7:e6:50:aa:3d:59:d6:f1:30:0a:80:e9:55:d8:56:
df:0d:9d:d5:fd:14:8a:41:6d:8b:f7:84:f1:0d:79:
e2:7b:2e:66:d1:e3:9d:29:bb:bf:08:74:63:fb:17:
26:ae:be:e1:8c:a8:f7:8b:f2:f1:e5:a8:67:84:f4:
26:d8:44:5d:76:33:cc:35:e3:1b:af:2a:37:79:71:
fb:e5:00:cb:3b:d1:c5:cb:ee:b6:ff:28:de:bb:f0:
9b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0B:55:17:60:F9:6D:76:42:67:44:4F:E1:47:CD:23:93:66:3B:9A
X509v3 Authority Key Identifier:
keyid:B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:18:52:1a:f2:e3:61:1a:1e:b1:a4:98:da:56:d1:9d:3e:84:
78:fa:72:51:d4:88:14:df:00:a6:27:f2:24:8f:1d:c0:65:de:
1d:8b:5c:f7:89:55:4b:27:8f:d4:bc:c9:6d:79:7c:d2:2d:cc:
1b:f2:ef:66:cb:e4:3d:59:c1:cc:68:4d:59:3d:72:6d:46:98:
f3:b2:93:2d:ba:47:02:d2:ed:c9:c4:ae:ae:1b:a0:20:87:82:
a5:d8:62:3a:f4:38:36:da:0d:f9:1a:10:d3:6c:83:ec:d1:d3:
b4:30:d5:08:a7:2f:f4:3d:1a:8c:8e:c8:d7:fb:ba:69:95:05:
05:a2:01:1c:b7:42:3f:8c:54:e2:7c:72:fb:81:43:48:17:82:
c5:ed:f6:65:a1:70:c2:97:d5:9b:4c:06:dc:7c:9f:69:c1:29:
84:fe:68:e2:53:74:5f:34:40:b2:19:f8:b3:e1:e2:b6:31:33:
78:a3:35:fc:c0:eb:c9:f0:96:1e:fb:78:d1:ae:4e:81:dd:c5:
8f:ee:34:2f:f2:85:d6:f5:76:b4:b4:0c:1c:37:56:69:23:b2:
7f:06:43:69:0b:b6:60:02:6d:13:65:44:c3:bf:9c:c9:26:f7:
2c:f4:a1:3d:26:6d:8d:0a:57:eb:30:35:b2:c0:6a:17:6f:c4:
4e:21:6c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:36:43 2025 by rpki-client