Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
File: qs5nJaCg3dFoBICoN4XSzVe_arA.mft (raw, json)
Hash identifier: /6B5FrnfK3ckq/yfUNKr9W/DOkqdWd/3SwZCVfhnw48=
Subject key identifier: 6A:0D:58:3E:FD:E4:50:66:AD:8B:A1:48:E5:F9:90:2B:C7:73:70:72
Authority key identifier: AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0
Certificate issuer: /CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
Certificate serial: 0197B6A0FF1A667FC1467A7639CEC8783268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
Manifest number: 09F4
Signing time: Sat 28 Jun 2025 13:01:33 +0000
Manifest this update: Sat 28 Jun 2025 13:01:33 +0000
Manifest next update: Sun 29 Jun 2025 13:01:33 +0000
Files and hashes: 1: LGoIVCfyeg-EZH_cOgrdiy2TPwk.roa (hash: dGCLqqCykyXwmqrTu57eC+iNpUcOeyFsBoySlkBpsAY=)
2: f00necdCYsOtLA09vtcvA-KOmsA.roa (hash: Ln1z19NPMKA7PbsbJsMQ04rbx28+DicO/rDcVFYN3W8=)
3: qs5nJaCg3dFoBICoN4XSzVe_arA.crl (hash: QUoing+qdXeEguMJr2zY/j1AL2fE8fyuA0Xz4QxfSxI=)
4: tPirfcovOkq_f6ORw4qTDcBMYwM.roa (hash: YI04iLKTA2ElngcnawjReFNoZnCJvny+G11HRulhdOo=)
5: wCVsvqWRahQ-a8qZpU_P5hfC6fo.roa (hash: zXnXIwQPC/ukVsvs/CWHd4opckhB/IeyNk2RyXjvBzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ff:1a:66:7f:c1:46:7a:76:39:ce:c8:78:32:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
Validity
Not Before: Jun 28 13:01:33 2025 GMT
Not After : Jun 29 13:01:33 2025 GMT
Subject: CN=6a0d583efde45066ad8ba148e5f9902bc7737072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:78:ff:58:47:d2:a1:0d:99:49:10:a2:a1:eb:
e0:44:d6:21:7e:17:3c:22:54:6f:fa:86:73:ec:33:
d1:9c:f2:cc:d4:d6:0a:86:a4:61:51:37:9e:b9:48:
e8:91:bc:7d:b2:b5:0b:13:4e:c7:6c:31:d6:c7:92:
6e:0d:88:bb:aa:35:e3:4f:e7:8d:fb:c8:28:b9:b1:
f8:01:0b:d8:9f:98:e1:2b:ba:d2:cb:fa:22:7e:ef:
92:8d:a8:97:0f:69:f6:b9:b6:2f:b3:00:b3:c6:34:
e9:7f:03:6a:4f:24:7d:3c:1c:89:89:32:ee:09:04:
fe:d6:49:55:f6:6a:99:3d:69:3a:32:cf:65:c3:76:
d2:e1:d0:fc:28:d1:eb:9a:c6:b5:9b:c6:ad:8e:10:
fe:26:99:98:46:60:2d:26:33:b3:77:5f:e4:36:bc:
34:ff:e9:62:bc:81:2d:ab:ef:5d:c6:3f:06:3a:19:
0e:4d:ce:d3:d8:df:4f:78:ec:19:7e:72:92:de:4d:
7d:8e:51:7a:10:33:75:26:c0:7b:71:d1:44:9e:c0:
fb:1d:e9:5d:d2:d2:f1:06:cf:cf:0e:15:aa:84:84:
d9:75:7d:c3:e0:d4:ea:fa:da:cd:ff:e8:b3:33:fd:
85:f6:0d:df:1a:ae:ce:39:eb:01:95:61:1b:75:9b:
ca:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0D:58:3E:FD:E4:50:66:AD:8B:A1:48:E5:F9:90:2B:C7:73:70:72
X509v3 Authority Key Identifier:
keyid:AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:59:c1:22:c7:e8:d4:b6:3c:be:fa:84:a1:ad:7a:4d:b1:f0:
67:86:fb:83:38:c6:da:6a:78:36:9b:04:4e:a5:f1:ae:5a:7e:
77:fb:7a:41:97:32:f9:a3:bc:2e:43:c2:6c:3a:bf:f8:6d:20:
d8:c0:08:f6:d5:d6:06:59:a5:7c:8c:4d:3b:0a:2b:26:fe:4e:
c1:04:f7:1f:f9:1a:72:bd:93:bd:56:c9:1e:b8:e7:17:f8:7e:
44:cc:2d:e5:72:7c:2b:ad:b4:cc:f7:89:a9:b6:d0:b8:b9:32:
31:15:0a:06:d4:80:fd:0f:a3:53:b4:75:8e:a2:6b:a1:3b:7a:
02:bc:97:0c:fc:01:83:36:d4:0e:b9:6b:df:0f:9c:4b:c7:ae:
80:7d:f7:2c:0c:b8:84:18:be:80:23:a2:ae:5a:4a:7f:8b:a7:
ae:17:c8:90:cd:5d:6b:5a:c3:32:dd:0b:a2:a1:f4:9e:38:2f:
f3:93:c1:50:11:f2:98:da:21:a2:05:c3:5d:e8:53:ff:f4:33:
ae:43:8c:82:48:6d:35:bd:43:f5:af:d5:04:c1:2f:1e:10:4a:
9e:c4:03:bb:f4:2a:be:e2:18:e5:a9:0a:3c:32:36:17:c8:08:
76:e7:c7:07:13:27:16:33:47:fd:48:78:fe:38:fe:76:bd:ef:
ce:07:73:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:56:58 2025 by rpki-client