Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.mft
File: qrHbDgCCCHbfogvsm3Gap5Wswd4.mft (raw, json)
Hash identifier: MvpWHiNgAIYyDDyaKeqE1drJGyLs9bgjvk0SDNLhGAI=
Subject key identifier: 52:E4:7B:AE:00:94:06:24:E9:D0:CD:4B:4F:9C:C6:2D:16:86:E5:AC
Authority key identifier: AA:B1:DB:0E:00:82:08:76:DF:A2:0B:EC:9B:71:9A:A7:95:AC:C1:DE
Certificate issuer: /CN=aab1db0e00820876dfa20bec9b719aa795acc1de
Certificate serial: 01976C2ADFD1877F30BD98ABB6B18D9EB01F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qrHbDgCCCHbfogvsm3Gap5Wswd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 02:00:38 +0000
Manifest this update: Sat 14 Jun 2025 02:00:38 +0000
Manifest next update: Sun 15 Jun 2025 02:00:38 +0000
Files and hashes: 1: qrHbDgCCCHbfogvsm3Gap5Wswd4.crl (hash: Xtk4+diLz34lsB3kOExuYsv7Im4aMikvaQxzv9PyYIk=)
2: w4EgtXymNG4qdDGffeejqhzCwgQ.roa (hash: VmcnuEKWSTHxVX4tEucguGz0L6uvVm7W7xv8HWe4KjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qrHbDgCCCHbfogvsm3Gap5Wswd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:df:d1:87:7f:30:bd:98:ab:b6:b1:8d:9e:b0:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aab1db0e00820876dfa20bec9b719aa795acc1de
Validity
Not Before: Jun 14 02:00:38 2025 GMT
Not After : Jun 15 02:00:38 2025 GMT
Subject: CN=52e47bae00940624e9d0cd4b4f9cc62d1686e5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3e:48:37:01:96:4d:4c:46:26:7f:70:e1:36:
4d:bd:48:0a:05:c1:ca:ae:ab:c4:e9:a7:91:88:7e:
40:7c:39:70:f1:f1:94:c7:67:84:af:e4:fa:e5:a6:
49:72:6b:6e:18:a8:17:53:76:b1:b4:ef:64:92:a1:
b2:10:7f:9c:d1:11:9e:d8:0a:e8:0d:94:c1:8d:0d:
3f:fc:d0:09:07:fd:ce:fb:2a:e5:4e:93:1d:a0:62:
3f:85:03:5e:06:64:8c:41:14:01:eb:12:12:46:0b:
d2:65:ac:d1:e3:f6:c0:c1:f9:1a:04:9f:f2:94:95:
06:c1:5a:f1:c2:43:62:3b:ba:33:ed:0a:8b:04:7b:
34:5b:1f:5d:70:5d:d9:6c:a3:45:8e:0b:98:31:0e:
70:a3:0a:99:7c:1a:bd:21:20:56:f7:14:c9:87:d5:
e7:83:4f:f6:91:b3:5d:11:45:ec:09:8d:02:89:ac:
92:bf:66:79:5d:5a:d0:f4:2f:86:ca:e2:97:02:2c:
cc:ac:9e:13:d3:49:0e:a6:04:0b:ab:98:da:6d:5b:
b7:9d:9c:ba:53:fe:4f:c0:d2:71:a7:5a:dd:cf:be:
0a:30:9f:62:7d:07:59:9a:9b:74:89:4c:9d:83:2d:
91:db:95:06:15:09:1b:a7:9b:62:c9:cc:9f:40:0f:
52:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E4:7B:AE:00:94:06:24:E9:D0:CD:4B:4F:9C:C6:2D:16:86:E5:AC
X509v3 Authority Key Identifier:
keyid:AA:B1:DB:0E:00:82:08:76:DF:A2:0B:EC:9B:71:9A:A7:95:AC:C1:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qrHbDgCCCHbfogvsm3Gap5Wswd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ff:dc:95:07:66:a2:a3:98:3b:79:cd:c0:15:54:32:50:51:
0a:37:72:47:6d:cb:ab:c5:9f:04:33:93:8c:54:93:d9:41:6d:
cd:39:96:05:08:1f:d3:c7:4f:a3:6f:38:91:25:a2:f4:de:ae:
69:f7:0a:00:d6:90:53:87:43:6d:a7:af:a8:eb:64:20:a6:05:
5d:48:a8:31:bc:f0:b5:f3:1b:e9:ba:ec:2e:f2:01:4e:40:f9:
f3:ef:19:1a:ad:14:d0:d2:fa:94:eb:f4:9d:e6:f4:de:7e:ed:
ed:2a:18:8a:48:91:cf:a0:a2:a3:8c:e9:42:5a:e5:ce:d0:13:
3a:18:20:dc:36:19:bf:05:a4:89:be:4e:2a:c5:1b:ec:c4:61:
b1:47:02:b5:1c:0f:47:c3:6d:3f:f3:aa:23:9c:9c:82:12:f8:
a8:8a:ad:0e:c0:3c:6c:99:41:d9:f3:06:37:b1:72:d8:02:d7:
e1:9f:72:34:83:0a:31:ad:c4:9c:1a:96:b5:e4:d4:fe:c3:7e:
e5:1c:ca:d9:a1:60:ce:cc:99:81:b5:0e:45:29:8b:8e:21:9a:
ad:d8:d6:5c:b6:86:ac:f1:f1:f5:87:7f:ac:e9:49:b5:b9:fd:
72:35:53:e1:e0:f0:31:57:9e:48:d6:53:98:1a:10:60:45:45:
b4:e8:29:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:46:31 2025 by rpki-client