Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
File: Q1w_GpeQPnlikqKsenjUGxwh24U.mft (raw, json)
Hash identifier: kz8LKrRn8x6DVEoSUJteUXaHDuO7zMmGHUMf0TTAvhA=
Subject key identifier: 06:05:90:4F:86:07:68:BF:CF:37:D6:0F:E0:F7:EF:B3:E6:02:18:BD
Authority key identifier: 43:5C:3F:1A:97:90:3E:79:62:92:A2:AC:7A:78:D4:1B:1C:21:DB:85
Certificate issuer: /CN=435c3f1a97903e796292a2ac7a78d41b1c21db85
Certificate serial: 01976C98AA0DD47FE0F9B1363BAE7DC6E08E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
Manifest number: 0EB7
Signing time: Sat 14 Jun 2025 04:00:33 +0000
Manifest this update: Sat 14 Jun 2025 04:00:33 +0000
Manifest next update: Sun 15 Jun 2025 04:00:33 +0000
Files and hashes: 1: IB6At0eMkw1jy1fdpcIgarxWKQ4.roa (hash: rOQggKg6yCYoTFHyozZzxf3+Jia2rL6WXiIW/P0HCuo=)
2: Q1w_GpeQPnlikqKsenjUGxwh24U.crl (hash: 5MKE+CeK7lOeQ+8fnb+j9ePkEmxGCuMC3J3gOPp7kwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:aa:0d:d4:7f:e0:f9:b1:36:3b:ae:7d:c6:e0:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435c3f1a97903e796292a2ac7a78d41b1c21db85
Validity
Not Before: Jun 14 04:00:33 2025 GMT
Not After : Jun 15 04:00:33 2025 GMT
Subject: CN=0605904f860768bfcf37d60fe0f7efb3e60218bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c9:e7:41:6f:33:f8:90:1a:09:a8:4d:51:8f:
b3:ba:3c:97:7e:d5:f1:85:d1:ef:15:aa:34:ed:84:
04:b1:ff:d2:99:7c:cf:db:db:81:41:26:b3:d0:b0:
bd:34:9b:d8:cc:02:95:a8:14:da:a5:26:e1:c4:9c:
29:12:ba:7e:ae:0b:bf:12:d9:89:18:1d:61:30:03:
46:37:86:d6:4f:6c:56:e1:64:ae:45:10:87:9c:47:
6a:db:42:cd:25:e0:fc:46:af:35:03:2d:e7:1e:df:
aa:b0:a6:6d:d6:95:4a:e7:15:d5:ec:bf:4f:5e:1e:
bc:32:eb:f8:f3:a6:d1:48:94:a2:1e:fc:05:3b:33:
93:0e:98:e1:a5:83:46:b4:55:07:bb:c3:1b:3b:a5:
cb:f5:6b:32:c2:b1:e2:05:db:08:f5:73:4b:b2:8d:
57:85:f8:84:da:dd:5d:d3:ab:75:cc:c3:93:d2:35:
ca:a7:08:3e:5a:38:fc:8b:bf:c3:b2:58:ff:b2:b4:
9b:e5:ea:da:06:45:12:26:b2:83:53:e4:ab:34:2d:
fc:0d:5d:9c:1e:74:b2:de:e5:0e:9a:8c:f0:fc:63:
92:48:2a:8d:50:5e:3a:fa:b6:e8:9e:49:a6:87:78:
e5:cc:8a:b3:8d:28:34:62:c3:d0:5c:2f:4b:30:37:
a7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:05:90:4F:86:07:68:BF:CF:37:D6:0F:E0:F7:EF:B3:E6:02:18:BD
X509v3 Authority Key Identifier:
keyid:43:5C:3F:1A:97:90:3E:79:62:92:A2:AC:7A:78:D4:1B:1C:21:DB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b0:7b:00:3c:96:66:ca:42:83:17:16:8d:17:fc:47:72:32:
8e:0b:d5:e6:50:b1:0c:da:11:89:15:bd:6d:13:b3:b8:62:a3:
7e:67:26:8d:cd:78:bd:31:ea:15:41:64:71:83:7e:bb:fa:62:
d2:09:55:8c:e3:e6:9d:e4:d4:02:73:54:3d:65:e5:1e:2e:26:
2d:62:7a:82:55:59:75:1b:b1:00:9d:04:3e:c0:4b:53:8c:1b:
e9:bc:80:ee:4d:46:68:91:f6:84:8a:9b:fd:41:72:16:b0:84:
43:fe:5a:fe:3f:7e:12:92:97:3b:00:0e:19:55:fb:d4:d9:bb:
a0:3d:6f:7d:87:91:e2:2c:d2:13:cf:ff:9f:35:35:c5:e6:65:
f5:31:22:b1:9e:21:a1:b3:b0:7d:e1:b4:65:f7:bd:ab:ae:fd:
70:a4:3f:c5:b0:e5:9a:c3:90:91:74:b0:78:57:2c:f1:3b:77:
32:7a:94:0a:fc:9f:8a:c6:8d:9e:90:48:2d:c0:c9:21:e3:fc:
3d:80:c4:bc:77:c8:9d:d9:34:77:58:8a:65:5f:a9:84:e6:6e:
b7:df:5d:03:c0:b0:d3:6d:db:ae:c1:ef:a8:dd:99:d2:92:3b:
10:72:c3:14:fe:85:6d:a2:ad:5e:df:e7:44:c9:e2:bd:70:ed:
04:a5:d5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:07:55 2025 by rpki-client