Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
File: qNU0ujy0JM9cXjuiVLojJQgGWLA.mft (raw, json)
Hash identifier: 4/rqwQwSo5RE5rfVnbHGIyv1KRVob/VSlOHYNHaqncc=
Subject key identifier: 60:7F:11:57:5A:AF:42:BF:71:9F:49:B0:53:23:04:1A:98:95:11:CF
Authority key identifier: A8:D5:34:BA:3C:B4:24:CF:5C:5E:3B:A2:54:BA:23:25:08:06:58:B0
Certificate issuer: /CN=a8d534ba3cb424cf5c5e3ba254ba2325080658b0
Certificate serial: 0197B6A0BF95A7CFC4225969F0C78EA7ECBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qNU0ujy0JM9cXjuiVLojJQgGWLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
Manifest number: 06F8
Signing time: Sat 28 Jun 2025 13:01:17 +0000
Manifest this update: Sat 28 Jun 2025 13:01:17 +0000
Manifest next update: Sun 29 Jun 2025 13:01:17 +0000
Files and hashes: 1: oATe-_oISha7IgG23AEM218xrRE.roa (hash: uddGyx2jLyok/qpchLVARkXw2HFXXOE6m1d81wn4B4M=)
2: qNU0ujy0JM9cXjuiVLojJQgGWLA.crl (hash: eLrcMZMdJvnUFhwZSJdyL1CeEEghivrS/VZM9m8CsgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qNU0ujy0JM9cXjuiVLojJQgGWLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:bf:95:a7:cf:c4:22:59:69:f0:c7:8e:a7:ec:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8d534ba3cb424cf5c5e3ba254ba2325080658b0
Validity
Not Before: Jun 28 13:01:17 2025 GMT
Not After : Jun 29 13:01:17 2025 GMT
Subject: CN=607f11575aaf42bf719f49b05323041a989511cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:66:5a:69:94:b4:cf:f6:3c:cd:d8:5e:09:d2:
26:6f:ba:45:a2:bd:17:99:a8:88:69:0f:cf:95:4f:
f5:1c:e8:23:72:48:1b:b2:d7:3f:05:a0:16:12:2a:
cd:b0:e7:40:b4:f1:30:de:70:5e:6c:37:2f:f5:03:
b9:d2:16:5c:d1:f9:3c:6a:66:fe:ba:9c:2c:73:02:
54:f0:c7:03:83:40:d7:31:d4:ae:7d:3a:41:8d:62:
19:99:bc:a9:9b:45:5b:fc:f5:94:a4:03:d9:10:11:
9f:55:c6:45:f4:28:dc:ae:2f:45:f3:86:00:db:19:
a0:80:d9:f8:a3:b1:08:09:d4:ae:67:20:29:a6:71:
7a:1a:fb:5e:ce:db:12:5e:aa:25:f5:f0:ae:31:93:
54:bc:45:ed:21:57:59:fd:34:94:03:e7:03:9c:2d:
fa:ff:e4:27:0c:e5:94:55:d4:3b:4b:1e:f0:ac:2e:
7d:6c:09:c5:82:36:4f:63:41:55:0d:98:3a:5a:7b:
55:ea:75:b6:f3:be:9d:1e:b7:3a:2b:0a:7f:b3:89:
5e:06:2b:6d:f6:70:45:34:c7:3e:68:41:d8:1b:22:
04:67:f8:74:63:7c:a5:11:21:0a:99:50:36:7b:3b:
8c:07:50:65:d4:13:73:73:d3:fd:6e:b9:c2:38:39:
03:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7F:11:57:5A:AF:42:BF:71:9F:49:B0:53:23:04:1A:98:95:11:CF
X509v3 Authority Key Identifier:
keyid:A8:D5:34:BA:3C:B4:24:CF:5C:5E:3B:A2:54:BA:23:25:08:06:58:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qNU0ujy0JM9cXjuiVLojJQgGWLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:01:73:3d:24:33:44:3d:66:49:a2:c0:04:bc:9e:56:50:86:
e8:8d:e4:7a:90:26:86:61:a0:99:b5:5f:dd:10:17:32:56:bf:
02:ac:2f:91:e4:63:91:88:fe:e9:c0:eb:91:bb:58:54:2a:c4:
d6:07:7a:e2:5f:fc:09:0b:c8:a9:9b:58:2c:be:f6:9e:dc:9d:
d8:71:81:43:ae:f9:b3:72:ab:8e:4a:54:ee:f0:83:64:5f:f7:
a2:06:ca:29:c5:09:d5:4f:8c:36:43:e3:81:14:3f:81:34:cd:
08:ef:85:55:75:f3:c9:1d:15:ba:77:b4:97:99:d7:da:6d:3a:
88:19:4d:95:25:b5:0e:34:09:81:e6:d1:f1:82:53:7c:0f:82:
93:0e:f9:71:a2:da:83:9e:0a:b0:3e:2a:04:a3:5a:9e:ee:85:
4f:3e:53:53:14:4d:0f:21:cd:c2:3c:f6:82:74:f7:a1:ac:4d:
53:e7:80:b5:24:c4:40:c9:67:ac:fe:c3:61:64:54:98:ba:95:
2a:75:68:9e:32:4b:13:ca:fd:61:55:6f:ae:8d:7b:1e:76:34:
b2:a9:44:fc:45:bd:3d:5e:2a:7c:7c:68:9b:97:42:dc:e7:1f:
92:05:3e:1e:c9:83:b3:8a:5b:ea:63:5d:ba:1c:b2:2d:e2:54:
3f:52:49:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:33:21 2025 by rpki-client