Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
File: QwFWVAgleMSUbNJ74eiaPddWL6Q.mft (raw, json)
Hash identifier: 81yN8WGwQOVvnQeaX1O+qEqbID5gSfL8qx7eodzw2DQ=
Subject key identifier: 0A:7A:14:3A:88:D9:2D:3D:D4:35:9A:DA:C7:96:CF:4E:08:EB:CB:8A
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01976E5021BC805B978D246E8EA685DDA2A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
Manifest number: 159D
Signing time: Sat 14 Jun 2025 12:00:34 +0000
Manifest this update: Sat 14 Jun 2025 12:00:34 +0000
Manifest next update: Sun 15 Jun 2025 12:00:34 +0000
Files and hashes: 1: 3eQ1S8uuA5rjKr45UcvylppbYDU.roa (hash: vQeG0u4yjs22R45FJRm/clzO1Z1gNnp6n1vY2dqT/jk=)
2: QwFWVAgleMSUbNJ74eiaPddWL6Q.crl (hash: sDGXQjFzbmMG1h6qXCcWMo8O2xqzCMuGUPQ2hDn/lfU=)
3: v1Pwr5xvdbbmpnihx2cCK9c0-pk.roa (hash: cRnPjj7eiLAD4lbp2VFMgeLmxV7rEoy5VNzAeh72O+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:21:bc:80:5b:97:8d:24:6e:8e:a6:85:dd:a2:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jun 14 12:00:34 2025 GMT
Not After : Jun 15 12:00:34 2025 GMT
Subject: CN=0a7a143a88d92d3dd4359adac796cf4e08ebcb8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:49:6c:9e:53:de:45:eb:68:d3:19:61:ff:42:
89:d3:38:01:eb:17:6d:3d:e0:74:ea:b9:6a:45:8d:
23:f0:7a:b1:ee:ab:af:1d:c8:3e:16:06:30:10:2f:
f5:f3:0e:c9:cb:0f:05:a1:b6:f1:c1:ce:7b:f5:33:
bd:55:92:65:98:de:6b:34:b6:66:75:e0:40:90:90:
29:5a:2d:37:ee:f4:3f:02:fb:cf:fd:d7:5a:cf:d7:
ce:0c:17:40:7b:56:ef:89:a5:f8:a6:0d:30:2e:d0:
38:3c:f3:24:43:75:58:af:6d:3d:53:2a:0c:f8:67:
23:35:ac:d1:e8:44:84:0f:e3:81:e0:60:d6:4a:26:
03:96:5b:f8:72:d2:43:a5:dc:c0:e6:c7:75:96:29:
0e:f6:4e:f3:1d:08:7c:e0:4b:73:f9:8b:5a:58:7d:
e5:2b:bb:a7:2e:09:60:d6:1f:cc:a3:05:49:68:13:
e0:1f:ce:44:cb:53:54:5b:d6:f8:a6:06:27:e3:ac:
db:c8:a4:d7:a5:8d:59:1b:54:3b:d0:df:52:9e:31:
12:6a:fb:44:98:f9:a5:17:98:fb:75:02:4e:cc:fe:
c7:07:6e:7c:f3:5c:ae:39:f3:a8:05:f5:a7:d4:89:
c5:a4:ae:b5:dd:f3:e2:d4:44:cf:3b:a9:aa:8a:62:
32:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7A:14:3A:88:D9:2D:3D:D4:35:9A:DA:C7:96:CF:4E:08:EB:CB:8A
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:4f:d6:0d:06:94:a5:32:2d:c4:f2:bd:63:43:ad:b1:70:71:
9d:ee:e6:66:44:f7:bd:a5:0d:78:16:52:a5:7c:0e:f3:d5:05:
b6:8e:c1:0e:43:fe:ca:cf:2b:15:f5:4c:17:ff:77:8a:88:c2:
66:c9:4a:9a:fa:d9:d8:2e:5f:4e:33:e3:04:66:ff:bb:00:1b:
ef:42:d1:2b:c4:33:3e:a9:6d:5c:18:97:a5:5c:83:62:0a:6f:
5a:4e:0a:d0:67:ba:6f:3b:dc:d0:b4:67:a1:db:41:42:0e:5f:
b2:eb:16:96:9a:d2:9d:2a:e3:07:c8:ce:ba:f2:73:7e:d2:c3:
d9:50:ce:e9:29:c2:dd:8d:ef:6e:f1:b8:34:e1:4e:65:d4:ba:
c7:9d:66:b8:e7:5a:f6:a0:da:0e:22:8e:3d:1e:b4:85:c0:23:
a3:ad:5d:6e:96:56:ec:f6:b4:f0:47:73:6d:98:de:47:eb:17:
6e:59:fe:06:1d:22:7e:9f:ea:76:97:d4:95:77:68:8b:f5:19:
64:a0:e1:4d:9c:bb:f6:eb:d2:71:84:83:a7:20:f1:73:29:d4:
6d:02:04:7d:c1:65:53:77:7e:b1:2f:ee:fe:bb:f7:ff:8b:1a:
99:cf:e1:d4:2c:bb:35:53:6d:96:6e:80:48:ad:22:03:a4:21:
d4:83:1b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:06:09 2025 by rpki-client