Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
File: aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft (raw, json)
Hash identifier: dIvUBG4qypzu0C9LWmD7yktoK0f2679t2oq0kjLm88k=
Subject key identifier: 7A:FC:B9:43:03:EC:9F:95:8C:EA:F0:A1:C4:CE:63:25:96:C3:85:D9
Authority key identifier: 69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D
Certificate issuer: /CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
Certificate serial: 0197B70E7B002D1AE0DE2575ABD6E672532E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
Manifest number: 11FA
Signing time: Sat 28 Jun 2025 15:01:08 +0000
Manifest this update: Sat 28 Jun 2025 15:01:08 +0000
Manifest next update: Sun 29 Jun 2025 15:01:08 +0000
Files and hashes: 1: PzCzJjGgoPXtrlh76B1G7PxDa5w.roa (hash: 0mC70+WY3sICObRriEKv1EjaSi7E87FOmh2jLXs4uxs=)
2: aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl (hash: Yi5tgJqrO14Af/lAqxvPj5dvcFfOUFfRQdxUlU4ljNk=)
3: xkqO4aVLIZUckL31oh3PJoWcGDw.roa (hash: U3ieRFwqG7N/E8wCUCYGjMDFUjBJb6rB66D0tY2rBtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:7b:00:2d:1a:e0:de:25:75:ab:d6:e6:72:53:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6904daf858b7b00b51cbb94afb28f03ea21e411d
Validity
Not Before: Jun 28 15:01:08 2025 GMT
Not After : Jun 29 15:01:08 2025 GMT
Subject: CN=7afcb94303ec9f958ceaf0a1c4ce632596c385d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f6:6a:22:2a:99:52:60:6c:bb:fa:49:43:cf:
6c:d9:06:3f:75:87:96:eb:3a:3d:a3:aa:0e:74:9a:
96:8c:70:54:0a:c8:c7:f2:1e:1b:54:5e:ce:2e:ac:
20:c0:59:a4:e2:82:ad:35:5d:ae:ff:42:64:e9:e8:
ac:be:94:07:55:0c:e0:48:ed:43:86:70:7b:df:9d:
f5:b8:60:ad:0c:a0:e6:3f:51:6b:6f:1d:3e:0b:58:
d1:91:7d:c0:46:dd:96:f5:d2:0d:0e:e8:ca:79:85:
07:b9:c8:ec:5d:e3:eb:f9:3d:41:55:7d:e2:8b:19:
c6:08:4b:06:83:94:47:14:11:36:f2:10:08:c8:58:
3d:08:8f:89:10:23:02:7c:42:8e:4a:24:32:67:5e:
65:48:85:bc:e3:77:8c:08:04:a5:e3:42:19:dd:a3:
10:fa:32:dd:b7:ab:f9:ce:db:1d:bb:13:52:a8:e7:
39:4d:73:39:21:0b:b3:a0:00:25:e8:fb:f5:48:09:
44:7c:83:4d:ba:83:79:19:0e:b5:4e:ef:21:76:fd:
75:03:51:b0:9a:bb:26:df:c7:53:c2:2d:c6:25:93:
72:8a:4f:26:aa:5a:6a:fe:d8:76:1d:1d:6a:ef:4e:
72:8e:bf:32:b5:9f:26:37:f4:16:ff:38:51:4f:22:
fd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FC:B9:43:03:EC:9F:95:8C:EA:F0:A1:C4:CE:63:25:96:C3:85:D9
X509v3 Authority Key Identifier:
keyid:69:04:DA:F8:58:B7:B0:0B:51:CB:B9:4A:FB:28:F0:3E:A2:1E:41:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/183656-0dc5-4a94-ae6d-8ad1d0f80217/1/aQTa-Fi3sAtRy7lK-yjwPqIeQR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a6:25:d0:fd:7e:9d:4c:77:e1:49:c6:19:7a:24:5f:06:75:
16:9a:c2:e7:a6:9b:a6:fb:a0:d7:55:54:5f:46:00:34:1d:3b:
98:58:76:2e:e3:b8:e2:54:01:f6:bc:98:81:6b:86:d9:e8:01:
05:49:8f:ef:c3:69:3f:b0:7d:43:ba:78:63:25:bb:81:13:fe:
ac:5b:91:1e:f8:a9:ba:28:58:38:87:fc:4f:1b:86:a5:90:b8:
c5:1d:87:cc:b8:6a:93:15:54:df:1e:f7:49:9a:a2:80:41:59:
53:d2:2a:ae:3d:d2:f8:56:a7:66:78:d5:e3:d3:ec:20:53:05:
0a:68:02:a5:11:be:75:dc:bd:bd:2c:f7:ee:06:7b:97:ea:2e:
68:ff:9e:d0:e6:65:ae:32:f1:f6:4e:15:c5:6b:6c:30:76:2b:
cd:21:46:23:d5:db:74:1d:f3:c6:20:f0:f4:ba:12:c2:d3:34:
d7:e5:7d:e3:b3:ba:02:25:27:0d:be:f4:a8:f1:0d:81:6c:4b:
03:e4:01:f7:c3:56:80:ee:dc:0c:4c:54:86:53:cf:86:36:53:
8b:ad:5d:7e:a6:d1:5b:99:e0:cb:79:ea:ef:99:10:37:aa:43:
f8:ee:0c:b1:f7:10:6c:c0:96:e3:38:04:3f:db:8d:77:bc:b4:
d6:b2:ec:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:44 2025 by rpki-client