Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
File: Qy_nD0zvEDdoNhUvOOTghTLMe58.mft (raw, json)
Hash identifier: phVf/uuz5qw3rbeNw/Xws5GHQapjb2+50QcaDxq8QSo=
Subject key identifier: D6:8F:56:39:99:1C:CC:49:C8:F4:2C:F1:AB:5F:B9:A4:CC:6A:BB:14
Authority key identifier: 43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
Certificate issuer: /CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Certificate serial: 0197846B1F1D78D9A4987BACB81B0A18F273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
Manifest number: 0444
Signing time: Wed 18 Jun 2025 19:01:42 +0000
Manifest this update: Wed 18 Jun 2025 19:01:42 +0000
Manifest next update: Thu 19 Jun 2025 19:01:42 +0000
Files and hashes: 1: Qy_nD0zvEDdoNhUvOOTghTLMe58.crl (hash: f9EUsCPAA20o0cD1nEMkV8uBPQLBEIVEMZB38/h1Ecs=)
2: YjwHZ-U8mcXCH0aU6JQJG4PEKkA.roa (hash: AnaRhDa+1cCeJd4R7WSfA8EHeNFUa2CX4p8vAAGKzHM=)
3: ZSjK1k03bVh7IszUUplOg1a3fhc.roa (hash: ur9lsl4V/e4ObtEPnWIBtt1dkjYzJgol0eBWTC8If5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 19:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:84:6b:1f:1d:78:d9:a4:98:7b:ac:b8:1b:0a:18:f2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Validity
Not Before: Jun 18 19:01:42 2025 GMT
Not After : Jun 19 19:01:42 2025 GMT
Subject: CN=d68f5639991ccc49c8f42cf1ab5fb9a4cc6abb14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:75:88:15:c2:4a:05:fc:4c:d6:1d:a5:52:6e:
a6:31:8a:b2:6d:c3:ca:eb:a4:00:4f:73:2e:0b:4d:
de:ea:5c:c3:d7:43:af:6b:1a:f8:c1:18:8b:8e:0d:
29:2d:3f:88:31:2e:90:be:62:33:09:19:10:d5:cd:
f7:d1:4c:11:45:86:57:3d:ce:67:4e:5d:6c:f1:ea:
56:3b:1e:08:a3:b3:7b:f0:53:60:09:e1:51:2c:ca:
fb:85:97:d5:94:d7:4f:76:5a:8c:10:86:2f:f9:4f:
2f:f2:a8:3c:f4:3c:c6:9f:f8:99:fe:d1:2e:5c:f7:
44:a8:43:b1:b2:9b:35:26:c0:dd:65:bc:f6:37:57:
1b:f1:86:99:eb:0b:47:67:85:80:aa:ab:9c:3c:21:
b5:61:79:8e:8e:e8:62:c0:18:3a:3e:50:7c:7b:18:
e9:44:8c:7e:5a:d3:86:b1:18:23:53:93:14:03:b9:
cb:e1:7b:8e:8d:aa:b1:f8:bc:db:f0:7d:dd:bd:64:
30:7b:8b:11:f2:18:3b:61:37:1b:72:e6:70:71:30:
f8:f5:47:0a:7c:c8:e1:8f:d5:82:0b:4c:08:93:7b:
eb:cd:1d:9e:f2:3d:ef:80:35:43:25:e9:9c:f3:12:
e6:24:22:44:ab:e9:12:9c:8b:42:95:c3:a8:a6:57:
e7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8F:56:39:99:1C:CC:49:C8:F4:2C:F1:AB:5F:B9:A4:CC:6A:BB:14
X509v3 Authority Key Identifier:
keyid:43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:5a:7f:aa:06:2b:17:88:8a:91:98:54:f6:9c:22:44:e8:a4:
4a:c9:38:2e:e0:91:7d:5e:6f:97:71:08:a1:b2:fd:e8:51:fd:
8d:06:4d:f8:07:e1:01:4b:6e:0c:a4:9c:69:ce:d6:53:19:8c:
76:45:fe:78:26:33:94:94:00:a3:e8:57:b5:78:65:b5:f9:f9:
0b:ed:6b:ea:e4:52:d3:5b:0d:db:a3:a8:9e:db:2e:96:c7:46:
8f:45:ac:04:2d:4f:1b:49:b1:09:23:b6:c8:7b:42:cf:66:4e:
6e:78:ee:e8:fd:a4:20:45:12:5d:4c:b7:d2:97:85:93:41:b6:
a5:ba:f1:c6:fe:04:ee:90:35:ff:f8:7a:19:86:82:8f:ad:41:
7e:8d:c8:74:77:87:cc:6f:a4:24:57:f8:46:da:e6:8b:f0:60:
98:63:2b:66:00:5d:03:f9:16:bb:2e:5d:4b:41:d1:ed:b8:59:
45:9b:f7:b3:02:c2:ff:41:63:a5:61:f1:b0:62:a2:2a:11:8b:
9a:a5:a0:10:ce:2f:cd:ab:1e:29:81:19:35:c0:3a:26:53:fb:
bc:ca:20:a5:2c:1b:d6:0d:78:87:3c:f8:9d:e8:8c:93:7c:4c:
c0:e3:a5:40:15:cb:9d:ad:7d:e4:3c:33:ad:97:d7:1e:e7:a6:
75:ff:15:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 03:34:43 2025 by rpki-client