Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.mft
File: QlQ5sMp_FNqpthsRvRe9zBunOGw.mft (raw, json)
Hash identifier: GsARZPCpgTL18XCJRgHmzuroGaOJf/wxAjDmmUNB9IE=
Subject key identifier: DA:FB:58:72:E6:32:58:E5:65:D7:67:40:C7:DF:0E:E4:39:B2:6E:63
Authority key identifier: 42:54:39:B0:CA:7F:14:DA:A9:B6:1B:11:BD:17:BD:CC:1B:A7:38:6C
Certificate issuer: /CN=425439b0ca7f14daa9b61b11bd17bdcc1ba7386c
Certificate serial: 019770AC576D004435286C21EAFF1A695711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlQ5sMp_FNqpthsRvRe9zBunOGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.mft
Manifest number: 0575
Signing time: Sat 14 Jun 2025 23:00:32 +0000
Manifest this update: Sat 14 Jun 2025 23:00:32 +0000
Manifest next update: Sun 15 Jun 2025 23:00:32 +0000
Files and hashes: 1: AKOMQZeZNylU7lZ2jfftfFZ_Z4U.roa (hash: Nv09RJ//WYPjGsqetOMSZHjfsxpAq/7Zyyhfe6u1lRs=)
2: QlQ5sMp_FNqpthsRvRe9zBunOGw.crl (hash: ETzXxVUhw1RVOEY6RfkTz677mQ7iZDnuwwcB0o6jVDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlQ5sMp_FNqpthsRvRe9zBunOGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:57:6d:00:44:35:28:6c:21:ea:ff:1a:69:57:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=425439b0ca7f14daa9b61b11bd17bdcc1ba7386c
Validity
Not Before: Jun 14 23:00:32 2025 GMT
Not After : Jun 15 23:00:32 2025 GMT
Subject: CN=dafb5872e63258e565d76740c7df0ee439b26e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5e:a1:49:1a:5c:b0:49:92:bd:47:32:42:23:
44:e5:84:61:fc:7f:71:5c:f3:39:5d:7f:2d:cf:46:
f4:14:ce:08:ab:53:ba:27:b5:d5:7f:32:82:c8:1e:
8e:55:4c:39:03:8f:cb:5b:ae:ca:97:31:61:7f:35:
11:f5:bb:3a:66:3a:e6:ab:e3:19:74:b5:d7:5a:15:
34:94:8f:3a:16:3c:f5:01:f4:ae:4d:49:04:1d:c5:
65:70:ca:ce:3e:e9:ac:50:83:9b:4f:89:b3:8f:4e:
4c:f4:c9:c3:78:36:d4:12:30:e9:65:5e:d5:25:31:
33:57:be:d3:bf:ec:71:d0:6b:87:d2:d2:ae:4b:36:
bb:09:b0:13:91:cd:d7:c1:f8:fa:03:3b:cd:1d:5b:
1e:30:e5:ef:06:8b:c0:75:68:5a:22:7e:41:71:55:
e7:a4:3f:29:66:2f:db:a1:87:3e:81:83:29:ae:55:
51:f0:e5:55:23:8f:cd:8f:2a:da:f5:64:bd:f7:8d:
23:a6:69:57:c8:11:49:31:b4:4c:67:e9:3c:67:9a:
5d:0e:3d:c0:5c:b1:eb:8d:30:a0:ae:e9:a5:48:45:
80:52:5c:00:ce:23:92:d5:2d:0f:5f:7e:ad:4c:89:
12:24:b5:11:af:7d:10:dc:56:3e:ee:86:e0:22:03:
b8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:FB:58:72:E6:32:58:E5:65:D7:67:40:C7:DF:0E:E4:39:B2:6E:63
X509v3 Authority Key Identifier:
keyid:42:54:39:B0:CA:7F:14:DA:A9:B6:1B:11:BD:17:BD:CC:1B:A7:38:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlQ5sMp_FNqpthsRvRe9zBunOGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:83:6e:ea:33:6a:70:b6:95:e8:0e:18:76:59:7c:72:c8:3b:
57:90:cd:6c:eb:4e:b6:72:b7:ab:38:8e:34:ca:9a:af:c4:cd:
54:d3:d8:da:de:db:d9:a8:fd:0f:c8:72:15:ba:b1:f5:71:69:
0b:0a:2c:95:44:32:3c:68:e4:cf:74:7f:c4:2d:cd:6a:10:86:
07:e7:1f:88:b3:92:a9:31:d7:79:09:e1:28:5f:fc:23:1c:bf:
09:b6:a8:42:65:11:04:d4:4a:0d:40:4a:09:07:cd:99:46:2e:
1d:04:c7:2b:f1:db:68:bb:5e:7a:5e:8b:4e:c0:59:74:2b:e2:
d8:88:17:03:28:b9:96:c6:ca:49:ea:62:5d:0f:66:a6:dc:35:
7f:04:be:a0:be:70:a9:09:42:c1:ce:60:b0:12:71:95:fd:21:
73:f2:f0:f5:4f:6e:ed:7f:7b:0c:d5:0d:36:5c:8c:23:5b:80:
fc:9f:34:10:8b:f4:c9:cc:86:54:25:7a:87:cf:79:d6:ff:3c:
47:58:38:c4:a8:9a:b3:5f:14:e4:03:67:b1:25:aa:d2:3c:eb:
99:38:18:17:69:48:b6:80:de:20:af:a4:e1:fa:2e:fe:31:99:
5d:e8:ff:36:ed:7c:dc:ec:ba:0d:f4:a2:32:71:0b:40:19:6d:
34:6d:f6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:17:52 2025 by rpki-client