Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
File: QJgXTbRR2f797sFfm5x5KdqumYA.mft (raw, json)
Hash identifier: vnguL1cvrc4/RrpbtBMwRlU4fmVUvaYR6myiaioS0OE=
Subject key identifier: 74:A5:98:E3:28:E1:60:9B:B1:2B:B3:7F:8F:76:45:EF:0A:FF:D2:B4
Authority key identifier: 40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
Certificate issuer: /CN=4098174db451d9fefdeec15f9b9c7929daae9980
Certificate serial: 01976D3E03C1C83DE57D4B19E1582EBC414D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 07:01:09 +0000
Manifest this update: Sat 14 Jun 2025 07:01:09 +0000
Manifest next update: Sun 15 Jun 2025 07:01:09 +0000
Files and hashes: 1: QJgXTbRR2f797sFfm5x5KdqumYA.crl (hash: lCguinSLb2CmuillZ29y4YEBxGFq3fQBw9scuZIvo58=)
2: VEtZZf9DCZWbNoKnf7FdIgrreS8.roa (hash: TCBg4X7Dp/mq95gKrBY1sBflsLJVUkpMXJtFn3JhtO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:03:c1:c8:3d:e5:7d:4b:19:e1:58:2e:bc:41:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4098174db451d9fefdeec15f9b9c7929daae9980
Validity
Not Before: Jun 14 07:01:09 2025 GMT
Not After : Jun 15 07:01:09 2025 GMT
Subject: CN=74a598e328e1609bb12bb37f8f7645ef0affd2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1d:66:df:51:87:cf:27:e1:ae:43:7d:09:f6:
c4:aa:9e:87:d8:dc:9f:a7:e4:08:6d:30:af:82:d3:
c1:3c:23:b7:bc:f9:ce:a7:35:61:d4:82:ae:8d:fd:
a1:e5:f4:9c:46:f9:ee:4d:34:67:20:df:0f:cc:02:
7d:f7:1a:96:62:fa:a3:d8:3b:d7:14:37:e4:70:fa:
74:59:d7:12:56:cd:71:7f:80:96:60:18:35:6d:6b:
1c:36:09:9a:5b:91:2c:61:a7:54:f6:19:34:36:49:
86:19:74:e1:f4:b3:be:9f:1a:5e:84:2c:d9:c4:ee:
1f:13:31:f9:cb:f4:e4:e4:9e:7a:d6:e3:21:5b:e6:
d6:26:47:e7:05:48:e8:f6:41:dc:ff:e5:8d:39:65:
14:94:25:ae:c7:56:de:0a:87:e1:6e:21:77:57:2c:
c3:dc:5a:b1:43:32:c6:5c:75:6b:8b:09:30:6d:3f:
eb:57:e5:6b:9c:35:b7:38:85:14:d2:4a:82:b8:cb:
b3:cf:53:4b:20:fd:8e:7a:1f:fe:ca:c8:1f:fd:bf:
5e:cb:18:08:5f:8d:97:d7:a2:30:30:36:a3:90:5d:
91:23:dd:ab:37:10:b9:a0:ec:61:83:97:c2:3f:8e:
af:8a:1a:1c:8c:8d:49:ed:c1:9b:0b:a1:45:e9:06:
5c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A5:98:E3:28:E1:60:9B:B1:2B:B3:7F:8F:76:45:EF:0A:FF:D2:B4
X509v3 Authority Key Identifier:
keyid:40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f2:36:e6:91:30:7d:b0:04:99:76:33:5a:80:eb:a5:45:a5:
9f:00:49:79:c7:b8:72:d0:f8:73:e9:d1:e4:c7:53:c3:ab:95:
eb:ec:a6:72:cf:ed:f6:e5:3a:b4:2a:6c:b7:48:e3:94:23:05:
7b:4f:bc:07:02:b4:1d:54:f9:1b:96:6c:3f:67:cf:ef:64:de:
9e:8c:9d:cd:e1:a5:93:b5:58:25:0f:c3:ab:ae:0b:07:4a:83:
08:0a:7e:bb:8a:1e:4d:46:c2:ea:4e:c2:b2:eb:1e:40:2b:4d:
50:0e:8a:b8:58:48:62:c1:52:5b:47:b2:0e:9e:0a:b1:55:04:
2b:62:a8:35:98:56:53:b5:9a:b3:e3:62:e7:53:08:04:66:0b:
6e:9c:9b:a7:05:63:fd:16:2c:bd:1d:a2:e5:4c:22:a3:d4:9c:
1b:21:25:f4:9c:1a:a7:b9:d4:7e:f6:83:60:7a:d5:90:e7:be:
1b:b3:2c:f7:8d:b8:40:b9:00:cd:7a:4f:12:f4:d7:5d:d3:12:
96:8c:6e:06:76:e8:25:26:96:c5:43:4c:bc:84:ef:bc:19:6d:
12:78:92:af:24:78:39:74:f3:bc:8f:dd:0c:f0:a9:28:fa:9a:
38:85:ce:7a:37:db:71:4f:34:4b:e6:14:3a:cd:06:c0:5d:05:
5a:32:73:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:23:31 2025 by rpki-client