Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
File: Q68umH0rY63apa3BePMekNh2qqc.mft (raw, json)
Hash identifier: Ug4jqFuzLy0Vj3FGFAt4qGfLbwi6GS/ZefTzvh864/I=
Subject key identifier: 97:8E:12:D3:DA:57:40:93:6F:93:D2:66:5C:92:5E:00:A5:92:C4:C7
Authority key identifier: 43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
Certificate issuer: /CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Certificate serial: 0197B9A18FC5D33B258D777DD9EBEE8233C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
Manifest number: 15BA
Signing time: Sun 29 Jun 2025 03:01:02 +0000
Manifest this update: Sun 29 Jun 2025 03:01:02 +0000
Manifest next update: Mon 30 Jun 2025 03:01:02 +0000
Files and hashes: 1: 71gvIX06FZhti5C8KqbG-iL3ji8.roa (hash: ixliMnZsbefklIbCdZSQC08KvvVc2/x3CDK+CGl2CBA=)
2: IEgYKG7Z6QdmhTg8jbadzlqUL0A.roa (hash: czHiBi7aC7gYGx6TuroDY+vPvsviuucmLi9+d2nYML8=)
3: N7dkJGPV_ClH0zdsWhUXQhLf-fI.roa (hash: 61rIBj7suoaRe9FEYDOMgKbW4Bfv19fnscul85uRvy8=)
4: Q68umH0rY63apa3BePMekNh2qqc.crl (hash: vZzilxlTWoTiCadvItFK9OewcyNilHj4BggKsv8rkuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:8f:c5:d3:3b:25:8d:77:7d:d9:eb:ee:82:33:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Validity
Not Before: Jun 29 03:01:02 2025 GMT
Not After : Jun 30 03:01:02 2025 GMT
Subject: CN=978e12d3da5740936f93d2665c925e00a592c4c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:af:39:2f:31:62:a1:c1:59:ca:ec:37:5a:c6:
87:2d:8e:36:b0:b4:f6:86:03:0f:95:e6:e5:92:37:
e5:52:dd:fd:88:58:66:f8:02:64:37:86:eb:b5:a1:
d0:36:f6:06:12:a2:75:1e:78:b8:c9:ca:c2:6e:78:
17:eb:0f:18:48:35:48:01:33:f4:05:0d:e1:fb:43:
11:5e:ba:e1:9a:cf:b9:03:c5:bc:24:ab:a3:77:d7:
ed:98:fb:03:d9:93:b2:6c:33:78:97:28:56:a9:e9:
79:98:4e:c3:92:b8:b6:83:fb:da:0d:3b:30:11:87:
e4:3f:aa:1a:bc:65:2c:a7:84:99:ce:ea:83:b9:e9:
02:86:ae:fe:c8:63:1c:48:09:ab:f9:8b:67:15:70:
16:8a:5e:01:3b:12:9f:7f:4b:fe:7e:62:79:57:64:
7d:02:bc:b9:3f:e2:3e:a0:25:d0:53:7c:8d:2f:9f:
74:a8:aa:eb:1e:c4:e6:20:05:11:78:43:00:5d:20:
c5:b4:ca:01:0d:fe:7c:41:d8:84:28:09:da:a6:75:
c8:a7:f5:89:4e:f3:7f:93:20:c3:f7:e7:fc:5a:5e:
86:53:e3:a5:1a:a7:f7:88:19:fb:04:68:27:79:22:
1a:09:84:3c:04:c0:44:9c:24:75:77:a6:82:c7:46:
e4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8E:12:D3:DA:57:40:93:6F:93:D2:66:5C:92:5E:00:A5:92:C4:C7
X509v3 Authority Key Identifier:
keyid:43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:4c:9f:8d:18:c7:55:e3:81:51:2e:8e:a2:34:59:31:37:cf:
9a:e0:c1:7b:83:82:53:4b:b6:5e:06:8a:d9:a6:4f:23:1d:1c:
30:69:a0:98:bd:8d:b5:76:88:62:39:94:c1:4c:d9:fc:43:aa:
d6:15:61:ab:85:24:1a:eb:69:18:92:7d:6b:aa:ce:31:c4:2e:
3a:7f:f1:36:73:d4:3c:2c:1f:25:0c:c7:5f:35:e3:38:27:54:
10:d4:98:b5:68:a8:05:99:9d:f2:f7:c3:65:1a:1e:a7:ca:3c:
ed:4b:95:f4:60:4e:da:7b:39:45:cf:51:41:6f:73:84:99:67:
56:13:27:6b:e0:78:94:14:bc:37:97:da:2d:e5:c9:c8:d5:6e:
ef:62:8f:a2:51:6b:8c:aa:b4:4b:de:2b:53:60:35:90:c4:82:
03:55:99:8e:ad:fc:42:3a:0c:5b:5a:68:6f:93:14:f1:39:02:
16:84:20:38:15:13:a9:00:20:47:e3:c1:bc:67:40:43:1d:b4:
40:3b:fd:86:5e:65:ba:a1:15:b7:10:cc:7e:d3:77:ab:ef:8b:
a4:76:db:c3:15:7d:c4:b3:80:4e:bc:18:ed:24:e6:bf:60:e7:
98:f2:c6:2f:ba:95:5f:9c:77:35:52:cb:97:3a:63:1a:34:b5:
2b:ba:4d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:56:43 2025 by rpki-client