Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
File: mq5G4hNZMNomjAZNzlrbtjoM7DY.mft (raw, json)
Hash identifier: 1FdEOlZeEIjQVNs0QsgCo9e1VKw7duegN+beNv2R4f8=
Subject key identifier: DF:E7:9D:88:07:FC:FB:9F:97:CA:B3:00:21:88:A1:7C:E3:27:3C:E7
Authority key identifier: 9A:AE:46:E2:13:59:30:DA:26:8C:06:4D:CE:5A:DB:B6:3A:0C:EC:36
Certificate issuer: /CN=9aae46e2135930da268c064dce5adbb63a0cec36
Certificate serial: 019774F70B2FC9547151A5FA62EB23C765A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mq5G4hNZMNomjAZNzlrbtjoM7DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
Manifest number: 0F5E
Signing time: Sun 15 Jun 2025 19:00:36 +0000
Manifest this update: Sun 15 Jun 2025 19:00:36 +0000
Manifest next update: Mon 16 Jun 2025 19:00:36 +0000
Files and hashes: 1: STbkSsaZ4h0iV7Ywpice3xeLm7Q.roa (hash: OYYfvGM7goZ9gxelNf2ly9w5B8haX1abcCwOvQfYiPk=)
2: mq5G4hNZMNomjAZNzlrbtjoM7DY.crl (hash: 3ROwvEDy44cZwcNcuDl06sHTv0gTIFoWpT0EFdS3I+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mq5G4hNZMNomjAZNzlrbtjoM7DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:f7:0b:2f:c9:54:71:51:a5:fa:62:eb:23:c7:65:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aae46e2135930da268c064dce5adbb63a0cec36
Validity
Not Before: Jun 15 19:00:36 2025 GMT
Not After : Jun 16 19:00:36 2025 GMT
Subject: CN=dfe79d8807fcfb9f97cab3002188a17ce3273ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:93:43:e5:3d:ee:78:53:3c:b4:5c:de:37:19:
d9:f3:1c:a3:8c:4c:4c:58:a7:a8:86:8c:66:7a:97:
70:f9:08:8e:07:71:af:f6:fa:7d:9d:d8:0a:f5:3e:
1c:f2:89:b2:dd:6c:21:1c:b8:53:a5:95:92:0e:af:
04:95:56:4c:d9:35:7d:df:2e:c6:6b:97:c0:27:9d:
5d:4d:91:07:c6:05:ab:de:a2:d0:3f:9a:24:2d:4e:
57:f0:7f:52:ec:c4:07:2d:67:26:76:70:d2:78:b0:
6e:a3:1e:ea:85:c1:cb:01:04:72:d3:fb:f7:7a:5c:
b6:b8:21:22:05:c4:ce:43:65:07:89:0b:f1:22:a1:
d7:4b:6f:cb:55:4a:ae:3e:47:1f:9f:f6:a8:46:65:
89:3a:bd:48:0e:d9:bf:67:4b:97:b1:e7:8a:6f:44:
65:93:2a:17:c7:fe:2f:d8:68:8d:e9:64:41:c1:54:
64:8b:21:a1:52:86:19:2c:3a:47:e0:06:ad:ed:97:
1d:95:e5:09:a5:8d:a3:98:da:df:da:40:2b:ec:b1:
ed:0a:0c:f6:03:ef:04:bd:ce:46:2d:f7:06:0f:6a:
1a:85:da:29:ee:b4:9a:2e:66:4f:48:04:f3:76:74:
30:47:c3:d7:6a:c6:0e:f9:8d:00:57:d1:10:25:47:
9b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E7:9D:88:07:FC:FB:9F:97:CA:B3:00:21:88:A1:7C:E3:27:3C:E7
X509v3 Authority Key Identifier:
keyid:9A:AE:46:E2:13:59:30:DA:26:8C:06:4D:CE:5A:DB:B6:3A:0C:EC:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mq5G4hNZMNomjAZNzlrbtjoM7DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:57:83:6c:ac:5b:d3:a3:5f:5e:b3:7d:7d:e4:54:68:a2:2b:
a8:4e:6d:ee:a8:18:ee:24:9e:15:73:bc:99:fe:ca:bb:d2:92:
35:9d:7d:49:9e:46:bd:29:8a:74:cf:05:ee:17:a3:b2:05:15:
9a:ba:4e:37:23:31:d2:df:88:a3:6c:b3:16:69:2d:3a:e0:60:
9e:ee:a7:ad:94:90:81:6b:8a:6d:79:ca:2b:36:ea:4f:77:ee:
07:d2:bd:38:5d:2d:bc:ed:49:f5:b8:ce:be:e2:73:e9:03:b8:
91:98:e8:ad:ea:79:fd:a8:6d:8a:dd:4e:15:fa:b2:b9:67:27:
72:11:92:c6:08:68:1a:a4:1d:92:4a:02:a7:7d:9f:6a:f0:68:
4d:04:91:97:7b:96:a1:b0:c5:94:db:71:ee:98:28:62:d1:c0:
77:85:e6:9f:da:2d:3d:62:a5:29:ed:0f:ac:15:04:51:c5:e1:
43:0f:fe:4b:31:f3:15:7a:b8:c8:4c:e5:6f:e8:0c:c6:98:b7:
6a:ca:73:e5:fd:87:32:1d:4f:91:d3:81:15:ab:32:af:3b:0e:
5b:a6:68:55:ec:57:bf:67:97:6f:e1:8f:1c:b5:8b:a6:ff:54:
a6:9c:3d:77:43:b9:88:90:91:ae:87:c6:ec:80:10:b9:02:51:
7d:a7:b7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:11:06 2025 by rpki-client