Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
File: q4PmT3LdWIn7E9whjGg_bi-s9bI.mft (raw, json)
Hash identifier: +zgxhdnfaB4N1UKZqMCf/nx9Jds7p1pg5YxKtRviPRY=
Subject key identifier: 9A:1B:25:C3:95:32:48:A1:94:D3:DA:96:78:67:29:9C:E7:D2:1F:5C
Authority key identifier: AB:83:E6:4F:72:DD:58:89:FB:13:DC:21:8C:68:3F:6E:2F:AC:F5:B2
Certificate issuer: /CN=ab83e64f72dd5889fb13dc218c683f6e2facf5b2
Certificate serial: 019777F84FA209C8FBAAD8A79C64B4742EC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
Manifest number: 1599
Signing time: Mon 16 Jun 2025 09:00:51 +0000
Manifest this update: Mon 16 Jun 2025 09:00:51 +0000
Manifest next update: Tue 17 Jun 2025 09:00:51 +0000
Files and hashes: 1: HrD9axNwojGc9gn0e5_hxSYDCwc.roa (hash: l2Og23VbseBHlL6WgftV+a+c2UrUgOjU/jXZUXL4hQ0=)
2: q4PmT3LdWIn7E9whjGg_bi-s9bI.crl (hash: SEkNXJMQ79XKamPYZGE2dpcOGYjqQMT5R2InhEdLdss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:f8:4f:a2:09:c8:fb:aa:d8:a7:9c:64:b4:74:2e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab83e64f72dd5889fb13dc218c683f6e2facf5b2
Validity
Not Before: Jun 16 09:00:51 2025 GMT
Not After : Jun 17 09:00:51 2025 GMT
Subject: CN=9a1b25c3953248a194d3da967867299ce7d21f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8c:1a:0b:a7:8e:25:90:c9:89:ed:25:3c:75:
af:0b:01:59:6f:6c:44:f8:02:02:e6:e0:00:ad:67:
09:5b:5b:02:c9:80:22:ad:55:eb:6b:42:a5:a0:91:
43:65:fe:33:05:b1:c3:a7:aa:0c:dc:fb:51:f7:a8:
9a:0b:82:40:06:73:fe:6e:f6:b2:3c:6e:f6:c2:ec:
88:56:28:4b:8f:57:67:65:8a:a8:c7:95:8a:e3:21:
ca:54:b9:6b:70:87:5e:bc:6f:28:96:b0:c6:0f:d9:
5d:a6:8a:9c:f8:37:d8:b3:1f:f1:bd:04:61:c2:70:
d0:3c:bc:30:7a:0c:a0:31:7e:41:a0:ba:02:ec:60:
6e:25:15:a1:83:27:3b:4a:d5:c3:61:fa:6b:6f:ca:
61:7d:a5:ad:24:01:2e:0c:f8:3b:aa:61:bd:3a:be:
8b:9e:4f:fc:c5:fe:02:3f:31:35:4b:91:56:bb:79:
d5:33:1d:1c:03:09:71:1b:53:8c:d1:69:7b:5b:05:
6a:87:2f:bd:e3:a8:99:d5:25:6c:ef:19:34:d9:3d:
2a:f7:9b:c2:39:41:98:bd:d3:5d:88:8e:d2:5c:9c:
52:49:7d:f1:b9:b2:59:67:f3:c9:b9:0d:11:6a:d7:
5f:02:36:e0:68:2e:14:84:69:c6:21:f2:58:a6:3c:
51:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1B:25:C3:95:32:48:A1:94:D3:DA:96:78:67:29:9C:E7:D2:1F:5C
X509v3 Authority Key Identifier:
keyid:AB:83:E6:4F:72:DD:58:89:FB:13:DC:21:8C:68:3F:6E:2F:AC:F5:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d7:f6:20:1a:46:62:ae:5e:7e:a2:1c:c8:2d:74:dc:64:e6:
77:3f:3f:32:68:e6:49:2d:38:6d:a5:12:fa:f0:fd:1c:a9:07:
ef:90:ca:5f:07:c2:27:0f:d8:67:25:ed:f3:ec:28:d1:c1:d3:
7b:aa:1c:68:10:a9:e9:5b:3e:0b:22:0e:a1:91:d5:96:c3:dd:
9f:fa:da:3e:71:c7:d1:ee:c6:bb:9f:2f:29:6b:20:63:ce:98:
6a:10:0f:28:8e:7a:e4:6c:8f:b2:8f:94:5c:72:03:d8:fb:1a:
13:0b:f9:2f:db:1e:9b:06:da:ec:2f:b7:ac:e1:94:ed:c7:f5:
b2:fc:0c:35:54:a9:8f:f7:05:1b:1b:28:d5:63:78:ac:51:13:
e9:8f:92:65:b6:e7:c4:90:23:c8:e3:5d:da:a7:c8:83:19:72:
a6:2b:b4:22:fa:cc:9e:db:88:2a:c8:8e:81:3b:b8:57:95:82:
d0:08:08:00:6a:e6:4c:25:ae:6a:76:37:b3:2a:12:58:43:13:
c0:8a:05:d5:45:a7:72:85:82:a0:c3:6a:dc:5c:cd:8f:87:db:
6b:16:c2:0d:3a:25:0a:09:32:d4:dc:77:e8:61:fc:58:39:39:
f3:45:94:a5:be:f3:f7:b9:d5:5c:63:18:0c:a9:bb:d9:bc:56:
2f:59:6b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:23:47 2025 by rpki-client