Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
File: _QxrK9KdMWhIfJ7F_eTD_ELZz74.mft (raw, json)
Hash identifier: VaHrvBIDZT7vNwGSgtThwVogKmSaNL4wFYNirl/T5Tc=
Subject key identifier: F2:51:88:8B:E4:A7:B4:68:08:A4:6E:29:38:10:1F:CC:F3:AC:95:8D
Authority key identifier: FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
Certificate issuer: /CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Certificate serial: 0197B96AB4DF201D95AC1FDC6E6DBC7AC5FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
Manifest number: 10E5
Signing time: Sun 29 Jun 2025 02:01:07 +0000
Manifest this update: Sun 29 Jun 2025 02:01:07 +0000
Manifest next update: Mon 30 Jun 2025 02:01:07 +0000
Files and hashes: 1: 1-Ofv8tDBMWs_4Hbhr7lMN_HF2TI.roa (hash: uH/td80fED56QPX1k1oOVphRVZ11UL29yzqyURnsYnc=)
2: _QxrK9KdMWhIfJ7F_eTD_ELZz74.crl (hash: SQ+s+AjyxmVDxh9/12B+nn8Aa2Ep+FANcWIKWvLZWe4=)
3: ptc21Pv_RMZdbmNfwt1t43MswfA.roa (hash: mrzhJeNsIe6my5EK8oo2DkozZxDWWdzOh94g4W2m17U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:b4:df:20:1d:95:ac:1f:dc:6e:6d:bc:7a:c5:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Validity
Not Before: Jun 29 02:01:07 2025 GMT
Not After : Jun 30 02:01:07 2025 GMT
Subject: CN=f251888be4a7b46808a46e2938101fccf3ac958d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:20:55:2b:a8:e7:a7:e5:76:35:26:21:b9:69:
55:9a:0c:5f:0f:eb:0f:8e:c2:60:69:4f:43:f5:30:
44:66:a8:ed:87:e9:c9:2d:2f:ea:4c:51:44:5b:79:
44:8b:30:68:30:83:32:47:66:9e:7e:91:87:b4:2d:
e4:af:fb:7e:ba:ed:f5:15:2b:f0:12:62:b8:66:2b:
ea:f6:c4:ce:b6:2e:66:c8:f6:1e:86:f9:f2:8a:c3:
98:c6:75:a3:02:c5:fa:47:3d:8c:d6:ce:7d:f4:e4:
b4:96:eb:b0:c1:9d:45:94:57:33:29:ff:0b:db:e8:
43:f3:ad:b1:0d:b1:6e:a9:08:59:62:1e:8e:98:61:
3c:4c:1d:4c:13:f3:34:d2:8e:61:63:c9:6b:a2:2c:
7d:6a:b7:37:5d:e2:21:c4:27:d7:31:23:71:3a:75:
e8:73:e7:88:2e:dd:87:44:de:43:cb:8e:cf:fc:81:
b0:6e:c4:b7:a8:1a:43:c0:17:8b:e4:57:e8:45:8f:
0c:d6:19:f7:cf:5e:a4:c2:64:24:3f:31:d2:be:5b:
57:77:39:18:5f:ad:84:78:96:4d:6e:ce:7e:22:5c:
de:30:bb:02:84:51:5f:99:0a:3e:10:95:ae:1c:10:
50:e6:b5:dc:10:64:f2:77:f4:30:0e:03:7c:04:1e:
12:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:51:88:8B:E4:A7:B4:68:08:A4:6E:29:38:10:1F:CC:F3:AC:95:8D
X509v3 Authority Key Identifier:
keyid:FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:fa:4d:af:e3:44:1d:80:dc:b1:fd:55:d3:5c:93:fe:c8:59:
a2:f0:d3:5b:f5:df:3a:cb:f0:93:16:84:1e:61:7e:fd:5c:45:
ab:da:57:a7:90:59:3d:55:aa:79:ba:f6:b3:4e:f4:f1:35:9e:
49:59:fb:4e:f0:59:9a:eb:6c:54:3b:ec:b9:5e:b9:c3:e2:c3:
39:6c:ac:77:27:cb:8e:ce:fe:df:45:63:0d:5c:58:50:90:52:
a5:b2:df:de:23:46:f2:17:ba:36:55:df:64:62:0c:bb:6a:db:
82:bc:de:db:53:ed:49:70:66:96:ed:75:36:80:74:85:45:8e:
fa:d0:79:30:f1:1c:ec:63:14:b4:95:02:8a:d5:1c:d1:6d:39:
6b:fa:8f:d6:3f:5a:cf:2c:55:cf:60:04:66:2c:f9:9a:bb:32:
79:1b:6d:79:14:e3:7e:a8:c3:a2:5a:2e:6a:bb:ac:3b:cd:64:
22:de:18:bb:52:7b:eb:b2:29:53:5e:1e:46:d7:d1:07:c5:2f:
fb:0d:c2:61:b5:25:69:8e:5c:72:4b:19:71:49:b3:7d:8e:3a:
fd:9f:ff:2e:82:8c:84:56:a5:fc:d6:13:f3:1f:c3:2c:db:b5:
85:c1:c0:e9:90:67:d9:57:99:55:eb:22:e2:7b:bc:95:28:76:
69:71:09:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:35:16 2025 by rpki-client