Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
File: QeQtgw7KmKUz9DctoWnJx5LDk7I.mft (raw, json)
Hash identifier: dHiBxKGHuYua5KevUf1/1oBl5UfvLR8CMld6cpfXKVk=
Subject key identifier: 7A:06:06:BA:C6:75:B5:0D:8D:71:21:DB:08:D0:40:20:21:15:7A:D5
Authority key identifier: 41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2
Certificate issuer: /CN=41e42d830eca98a533f4372da169c9c792c393b2
Certificate serial: 01977C42B5E8E4A7A686F1F22B75723843B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
Manifest number: 1597
Signing time: Tue 17 Jun 2025 05:00:36 +0000
Manifest this update: Tue 17 Jun 2025 05:00:36 +0000
Manifest next update: Wed 18 Jun 2025 05:00:36 +0000
Files and hashes: 1: NcqRg7UrtJE68j0DY1PSHwYSu_4.roa (hash: O3F0k70QFpKk+LVxYcWwtpQ0YuG4zUsaxS4NlfXzPQ0=)
2: QeQtgw7KmKUz9DctoWnJx5LDk7I.crl (hash: m22F8D9m+u3R/0pFtsWulAMxI15nC4FhFYOGU4WXfDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:42:b5:e8:e4:a7:a6:86:f1:f2:2b:75:72:38:43:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e42d830eca98a533f4372da169c9c792c393b2
Validity
Not Before: Jun 17 05:00:36 2025 GMT
Not After : Jun 18 05:00:36 2025 GMT
Subject: CN=7a0606bac675b50d8d7121db08d0402021157ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:81:7d:01:9e:c6:28:91:0c:f8:6b:96:46:c4:
ae:23:da:48:14:a1:5c:fc:4c:62:53:81:f4:96:d7:
18:e5:37:02:87:ca:31:f5:2d:4c:59:f5:57:d9:a8:
8f:ab:2c:b1:1c:67:da:5a:f3:86:b1:6a:97:81:e8:
c2:31:44:05:97:d3:e7:73:b2:6a:ec:1d:82:59:9d:
81:23:9c:7b:14:6f:76:bc:bc:e0:17:35:62:1f:78:
43:bb:04:46:33:e2:73:af:ea:ec:9c:aa:c2:9b:ee:
5d:20:4c:6f:ce:9b:7a:14:d2:80:a7:9e:15:d2:8f:
0c:9b:74:19:ee:55:d8:c1:c9:86:32:c8:d9:79:3e:
73:e6:72:7e:8a:17:66:87:01:fb:37:a6:08:28:45:
59:79:29:66:ab:6f:b0:c9:64:ed:ef:06:fb:34:77:
a2:84:2e:e8:28:7a:54:db:76:e0:29:9c:e7:1f:2e:
85:25:b9:4b:f8:6f:7c:bd:02:4f:c5:8b:f2:f8:65:
f9:ff:09:aa:61:31:60:1d:39:44:61:20:75:cd:7c:
eb:f2:04:72:b8:11:32:67:cd:16:37:8c:8a:8f:e0:
9d:d8:be:51:c0:dc:fe:a5:21:a3:06:5c:cf:ce:58:
9d:a2:21:d9:55:06:0c:26:6a:44:c1:91:83:d3:03:
92:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:06:06:BA:C6:75:B5:0D:8D:71:21:DB:08:D0:40:20:21:15:7A:D5
X509v3 Authority Key Identifier:
keyid:41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f1:1c:13:cd:cc:9b:d2:53:10:4a:f0:52:14:a9:33:b7:a7:
9f:e2:e4:45:8e:b2:64:6d:d8:4e:a5:55:20:91:69:f0:51:a7:
63:b9:3f:a9:00:43:6e:2f:e2:91:1e:58:bb:a2:30:29:0a:98:
f5:e5:ab:00:a7:ca:a5:19:6a:b7:5a:bf:58:7f:04:0f:9f:fb:
7b:72:8c:72:df:e9:6d:ca:43:f2:b9:3b:bb:21:f4:38:d0:be:
a3:8a:8d:40:45:d9:f1:37:b3:51:da:f8:e2:25:9f:66:88:4a:
b7:71:b6:1b:df:59:02:fa:45:b9:a4:3d:54:8e:c7:ea:0f:c0:
9f:09:23:52:59:ae:84:2c:b4:9c:ae:f2:80:fd:a2:c1:3e:90:
1b:b1:7c:77:ab:81:b7:51:d1:09:c2:b1:a3:f7:db:9d:f0:ac:
32:fa:02:ce:d1:f4:44:c5:89:f4:a3:80:3e:49:c2:b6:c6:b5:
33:80:5d:dd:b2:c8:dc:75:65:ac:b3:5f:f7:7a:22:a5:d0:f9:
2d:bc:63:64:5e:5e:ba:b1:5d:17:21:4c:f9:3f:5c:55:1e:7f:
2a:f4:26:d2:34:cc:2a:25:5b:0e:97:d6:7e:c1:61:43:a6:63:
07:67:55:f2:4f:48:77:80:21:e5:ec:f1:d6:d4:21:a0:e9:e4:
f5:de:b7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 15:32:25 2025 by rpki-client