Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
File: qcd4RK62qrWMRgPKCCvdSngEd58.mft (raw, json)
Hash identifier: qIUu8Ty+HZNzfBEuMJ+2d35ddIpG5IEpx8cxwUlmaJk=
Subject key identifier: 4F:C1:B7:D9:1C:3B:BE:1D:0C:4F:D2:5D:A1:CC:09:06:F5:26:7D:A0
Authority key identifier: A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F
Certificate issuer: /CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
Certificate serial: 01977C79AA37B33FF8CDD3CB71F9F71509E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
Manifest number: 1598
Signing time: Tue 17 Jun 2025 06:00:37 +0000
Manifest this update: Tue 17 Jun 2025 06:00:37 +0000
Manifest next update: Wed 18 Jun 2025 06:00:37 +0000
Files and hashes: 1: 0rwOYdPXm3SF3mlaMFSkxpfBDj8.roa (hash: ghdXu6w3ahY/kqZH3juDYd4TR5LQuKoojRWncabKdos=)
2: qcd4RK62qrWMRgPKCCvdSngEd58.crl (hash: N2VepkgntM1NKhz4GMmXkMoV4T1hPZw0+7khWMnHDfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:79:aa:37:b3:3f:f8:cd:d3:cb:71:f9:f7:15:09:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
Validity
Not Before: Jun 17 06:00:37 2025 GMT
Not After : Jun 18 06:00:37 2025 GMT
Subject: CN=4fc1b7d91c3bbe1d0c4fd25da1cc0906f5267da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:58:c3:74:ad:bc:a3:2e:5c:56:cb:50:18:c0:
8f:46:3d:94:a3:25:93:f5:d7:ef:18:60:96:5f:d4:
44:43:b6:b3:cc:c9:67:62:bc:94:03:03:f4:23:9d:
13:ff:d2:ba:26:47:71:95:fc:7d:70:30:ec:75:a5:
e3:42:38:aa:91:3b:40:2a:bc:bb:f0:e4:64:30:6c:
19:05:5c:2d:c3:d6:1d:7d:a1:a0:e4:1b:7b:84:1b:
bd:07:ce:ed:04:64:ec:2c:a7:4c:40:34:8b:de:30:
3d:c6:9e:d3:9c:b5:58:1e:b2:8e:43:aa:ef:c3:48:
4b:20:22:b5:62:25:b5:27:4b:49:88:d8:e1:7b:55:
5d:59:26:8c:8c:a8:64:ea:ed:97:6f:44:57:c0:bb:
a2:12:99:0f:56:06:37:2d:80:af:fe:e6:ea:0d:d3:
bf:54:d5:04:94:96:eb:e5:c8:21:e8:70:42:c8:fc:
65:bb:46:dc:cf:52:36:53:95:70:f5:88:78:1d:51:
8e:11:6a:cd:c3:f1:02:e6:e9:59:f9:3e:13:28:e5:
74:9f:c0:8b:50:b5:ec:e9:c9:24:46:2d:36:41:ec:
58:e7:61:68:c5:c3:22:59:26:c7:6f:d9:ec:84:90:
82:88:f7:72:33:7f:0d:40:53:4d:2a:eb:29:7c:af:
77:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C1:B7:D9:1C:3B:BE:1D:0C:4F:D2:5D:A1:CC:09:06:F5:26:7D:A0
X509v3 Authority Key Identifier:
keyid:A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:6b:b8:ad:59:ea:15:10:4b:a4:17:da:41:24:1a:d1:39:91:
ff:a9:4f:f6:ff:cb:b8:92:c6:cc:37:88:8b:fb:2c:b9:3b:75:
69:d1:90:d2:be:a0:00:5d:55:d2:17:69:76:e0:ba:cd:d3:67:
92:50:44:b1:83:bf:79:39:91:3e:7d:0a:af:a7:0d:aa:d8:d2:
16:5e:31:69:96:b5:b8:1c:a9:04:40:48:25:d8:a7:32:73:42:
25:2b:cc:9b:18:f9:68:b5:1a:fd:de:ec:8e:81:b8:3e:a0:39:
e9:62:e7:56:dc:ef:2d:60:b9:a2:e2:59:5e:fb:8b:f4:43:31:
78:51:42:cd:a6:46:5f:73:81:e6:2f:44:24:51:6e:dc:69:e4:
36:81:8a:29:df:92:18:38:93:da:ff:c7:e4:8d:1a:c9:53:f9:
19:eb:48:86:e3:20:70:a7:6c:75:34:cb:76:e2:6c:ae:29:12:
97:03:7d:33:93:ec:8d:b6:c5:e6:7a:f1:f1:24:34:c4:00:8c:
d1:68:82:24:9d:bb:7f:bf:bd:72:a2:86:b6:58:e3:c0:19:6b:
8d:23:cd:2e:60:09:99:40:2e:aa:7c:4a:50:66:86:45:71:7d:
82:c5:91:0b:b6:a9:9f:39:f3:83:93:47:35:64:47:b4:78:0f:
2a:74:42:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 12:19:30 2025 by rpki-client