Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
File: q5ioJj4GO4p709cYDnpKpklTRBw.mft (raw, json)
Hash identifier: PVIVfxNN6aCiqXxmwWdbEQwM+tN1dfYOZedJ8pq3neU=
Subject key identifier: D6:23:FF:4D:26:81:EE:B9:7F:53:06:7D:FA:7E:B3:32:BD:57:38:03
Authority key identifier: AB:98:A8:26:3E:06:3B:8A:7B:D3:D7:18:0E:7A:4A:A6:49:53:44:1C
Certificate issuer: /CN=ab98a8263e063b8a7bd3d7180e7a4aa64953441c
Certificate serial: 01976FD0E88424F7C06E9051F82CC36D69D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
Manifest number: 045C
Signing time: Sat 14 Jun 2025 19:00:51 +0000
Manifest this update: Sat 14 Jun 2025 19:00:51 +0000
Manifest next update: Sun 15 Jun 2025 19:00:51 +0000
Files and hashes: 1: 4fHNG3uqnKYRdS0KPogfVSeJ6Y4.roa (hash: EoqRZ5+OD3esILCMjil4nQygTYY9bzIijeRvhLDs9S8=)
2: kD0NYEJpgxaFFDcqPxx98oDLF4A.roa (hash: kEfgwntStfXPUtLxcdJZBEv9NrzPqg0tH8aS2VZkZpA=)
3: q5ioJj4GO4p709cYDnpKpklTRBw.crl (hash: 7dgwGY0bpW2NPO7Z8w27WLBqaMM0AZjPskp0+W20Eqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:e8:84:24:f7:c0:6e:90:51:f8:2c:c3:6d:69:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab98a8263e063b8a7bd3d7180e7a4aa64953441c
Validity
Not Before: Jun 14 19:00:51 2025 GMT
Not After : Jun 15 19:00:51 2025 GMT
Subject: CN=d623ff4d2681eeb97f53067dfa7eb332bd573803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:16:79:9b:99:98:28:0f:12:a4:89:55:66:e7:
b4:9a:41:48:f6:f7:dc:84:85:46:da:54:05:cd:c5:
96:c7:db:e2:00:3d:37:6b:78:45:b8:8a:ca:5b:d1:
a1:14:b3:fc:5f:84:c1:e2:ed:a5:2e:b0:17:4e:6b:
c1:b5:54:12:dc:10:13:e7:d7:89:cf:c5:b0:d1:18:
5c:75:6a:e1:99:d6:92:18:68:cc:d4:95:b7:e4:fa:
d6:79:b9:80:39:77:09:15:fd:29:4f:02:21:a3:d2:
03:d4:a8:7b:4e:ef:70:fa:83:71:2d:f7:db:8e:96:
95:f8:55:0d:88:e5:f4:10:41:e1:d6:60:10:02:a4:
3b:a9:a5:46:94:14:0a:aa:01:79:21:a1:3e:4d:dc:
13:70:a7:42:71:4a:61:9b:3b:1b:f8:12:0c:09:92:
32:0a:91:e2:a3:a5:be:26:bc:3e:67:1f:ef:e5:50:
02:6c:22:a2:20:d1:c3:b5:a2:e1:8a:9f:6c:6c:8b:
dd:88:cc:a2:7e:75:3c:e4:a1:35:29:a2:3a:ea:4f:
de:e6:f9:89:21:89:70:18:b2:ad:d1:28:ca:31:93:
cc:bb:a7:fc:e3:c9:56:e7:73:57:a8:69:ee:f6:67:
25:bc:72:59:07:21:a3:7f:d7:9b:04:7b:a0:58:d8:
13:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:23:FF:4D:26:81:EE:B9:7F:53:06:7D:FA:7E:B3:32:BD:57:38:03
X509v3 Authority Key Identifier:
keyid:AB:98:A8:26:3E:06:3B:8A:7B:D3:D7:18:0E:7A:4A:A6:49:53:44:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:c2:35:e7:13:6f:0c:8a:d9:fe:ba:6f:e3:9e:f5:96:15:3c:
8b:17:80:50:a8:75:99:cf:da:11:83:45:45:a9:98:01:09:74:
e2:54:59:13:fe:15:28:c9:95:a1:1c:08:e5:e8:b0:a5:d5:79:
63:0b:04:b8:c6:69:06:35:8b:99:e7:89:7f:19:c6:96:98:3d:
1b:6a:0e:98:ce:88:d3:5f:cd:e5:01:02:a9:89:6a:0a:a7:10:
2d:27:06:81:30:a4:ae:a7:be:08:1c:47:f3:8c:2c:88:a2:fa:
80:df:37:4f:a4:65:52:a6:03:30:9e:e2:ae:4e:d0:88:5c:04:
93:18:36:2f:91:87:d8:5e:a8:2d:7c:1a:09:5c:4c:c5:7c:bc:
8a:59:05:3a:dd:29:6c:c0:f3:9d:03:cb:80:46:2c:81:fc:30:
90:a3:fa:9c:89:8f:08:8a:21:a5:35:56:32:c0:02:7e:93:fd:
6a:28:ee:40:da:00:25:fa:ee:78:c9:30:bc:07:ca:b7:4c:db:
38:c6:06:73:60:45:61:1d:08:22:6c:1a:46:1f:d3:e2:9f:74:
a9:e5:5b:98:36:f7:86:79:ec:fd:fd:ec:bc:48:b4:f0:21:3c:
3a:39:af:3c:90:5b:ea:19:fd:fa:93:9a:86:cc:1f:f6:a2:4a:
c7:56:87:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:09:37 2025 by rpki-client