Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
File: qR_iZyyPHBKyetoPzLqnwhLL1xw.mft (raw, json)
Hash identifier: V2PQMVr3Ny8pn8mESpcW10ZuZLrZL3eNB4ekAUxlTpI=
Subject key identifier: CB:7C:31:79:A5:38:00:2A:19:9C:31:BC:FA:3B:28:F9:6A:08:72:AE
Authority key identifier: A9:1F:E2:67:2C:8F:1C:12:B2:7A:DA:0F:CC:BA:A7:C2:12:CB:D7:1C
Certificate issuer: /CN=a91fe2672c8f1c12b27ada0fccbaa7c212cbd71c
Certificate serial: 0197722CBD9AB16C9D3F3DF31BA15AF1126A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
Manifest number: 1591
Signing time: Sun 15 Jun 2025 06:00:24 +0000
Manifest this update: Sun 15 Jun 2025 06:00:24 +0000
Manifest next update: Mon 16 Jun 2025 06:00:24 +0000
Files and hashes: 1: 2Q0kx85pwBzfIMwLp9ldarIpih0.roa (hash: D6p/IFbJlNokn2XAUVSHhwdlOMDmGJADmbqv1d/nsjg=)
2: qR_iZyyPHBKyetoPzLqnwhLL1xw.crl (hash: I48rwahswYR6I7KaheAn6pXuTck8+1YwQUGZ44Ri0m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2c:bd:9a:b1:6c:9d:3f:3d:f3:1b:a1:5a:f1:12:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a91fe2672c8f1c12b27ada0fccbaa7c212cbd71c
Validity
Not Before: Jun 15 06:00:24 2025 GMT
Not After : Jun 16 06:00:24 2025 GMT
Subject: CN=cb7c3179a538002a199c31bcfa3b28f96a0872ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:34:1a:64:3d:48:97:85:00:87:1b:4c:7a:ba:
4e:7b:f0:56:1a:61:2c:60:e5:4a:1e:d2:cc:a8:70:
25:03:d1:a9:cd:91:da:c0:31:96:e1:b6:5c:08:05:
b4:28:e1:63:36:7a:d5:82:58:e7:2e:04:ee:6d:80:
87:52:fc:80:ea:fb:11:bd:69:bd:9a:da:5d:3f:9a:
f3:40:11:15:0d:60:7d:e3:ff:3d:73:a6:7c:16:d9:
2f:7b:3f:82:07:d9:c5:76:9a:fc:dd:7f:e7:31:14:
25:aa:67:94:db:df:dd:e5:e2:7e:16:7a:e9:2f:16:
9f:bf:e4:2b:fd:72:80:6d:53:df:63:2c:44:5e:bd:
e8:c4:15:de:55:eb:35:f9:04:e2:23:d5:4d:04:b4:
68:7e:21:ab:3d:6c:29:68:5d:52:ae:0c:db:b0:b1:
4b:cc:3f:6d:37:e4:ee:6c:06:d6:13:d0:05:a9:58:
e4:27:5c:c9:b8:dd:c5:e9:09:d7:91:f9:33:61:12:
60:05:f3:84:24:0f:3f:2d:c8:b2:a1:2b:d9:3d:49:
23:6c:d4:95:4b:4c:cf:e6:0d:af:ab:88:c5:ba:fb:
8e:f5:16:8b:04:c3:27:b1:58:e6:be:cb:c8:f8:1c:
a4:8d:d9:e7:80:84:c4:c7:20:e2:60:16:2a:71:ab:
59:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7C:31:79:A5:38:00:2A:19:9C:31:BC:FA:3B:28:F9:6A:08:72:AE
X509v3 Authority Key Identifier:
keyid:A9:1F:E2:67:2C:8F:1C:12:B2:7A:DA:0F:CC:BA:A7:C2:12:CB:D7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:87:06:b5:31:18:ba:d4:c0:38:f5:dd:a1:75:7d:93:d6:b7:
fe:f2:c8:15:9b:3e:c4:a7:41:a5:54:22:0d:43:6e:a3:5b:49:
9b:c5:77:47:11:45:37:4c:75:ee:16:eb:92:5c:c4:31:f4:44:
e9:b9:b8:5a:f3:09:20:99:8b:7e:f6:a5:e2:90:dd:2b:77:d3:
0b:91:45:5d:df:a8:33:3d:8a:bf:60:84:93:f6:a8:82:14:0e:
bc:5c:13:0a:32:e1:f1:28:79:62:8d:57:4e:7b:17:52:d2:8f:
0a:f1:4d:7f:cf:c7:67:a8:67:0f:14:20:41:12:eb:5c:b0:c7:
ca:7c:6f:e6:10:4e:f5:cb:70:9f:92:ee:29:c6:de:e0:46:3b:
99:00:35:10:3e:6d:e7:5b:04:8f:ac:43:fe:d0:20:46:44:ce:
07:c4:d1:9e:00:fa:ce:ac:ed:ca:cc:e9:96:d6:68:87:f6:d6:
6a:c5:9e:1a:de:f7:29:3e:d9:20:d7:d5:f6:62:74:dc:4c:7a:
ce:53:79:a4:fc:18:a5:bd:1c:b1:cb:77:3b:37:25:24:f9:d2:
18:5f:7e:b2:0a:ed:56:e0:33:fd:a4:92:62:3d:20:1c:5b:f2:
14:0b:f8:ec:51:e0:57:4f:2a:f8:6f:89:fd:80:b6:93:c1:80:
c9:03:39:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:44:41 2025 by rpki-client