Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
File: qT4365yxmDJdZWZzKJJY0o6587g.mft (raw, json)
Hash identifier: 530YNg0zGAppw9xZMebLr26r7S7x340G/KFlCwaAKO0=
Subject key identifier: D9:42:D6:C4:7B:B7:49:58:96:90:ED:1E:4A:D1:A8:C6:A3:09:17:26
Authority key identifier: A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
Certificate issuer: /CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Certificate serial: 0197700805FEE8A33922B0148DF935F6BDA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
Manifest number: 1525
Signing time: Sat 14 Jun 2025 20:01:03 +0000
Manifest this update: Sat 14 Jun 2025 20:01:03 +0000
Manifest next update: Sun 15 Jun 2025 20:01:03 +0000
Files and hashes: 1: B6IAypRDNnn3wQIonYGMbrtebVA.roa (hash: RDNajdiQ2iOHeS1ehJ984LhPxM3hBSKi1PJW1BaavLE=)
2: qT4365yxmDJdZWZzKJJY0o6587g.crl (hash: zjlu6eWrz5qOQ+5g7ALAfN5d1qRaSeKZcoq89mQGM2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:08:05:fe:e8:a3:39:22:b0:14:8d:f9:35:f6:bd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Validity
Not Before: Jun 14 20:01:03 2025 GMT
Not After : Jun 15 20:01:03 2025 GMT
Subject: CN=d942d6c47bb749589690ed1e4ad1a8c6a3091726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:72:98:82:37:f6:06:ad:c5:2c:20:97:7f:a7:
9d:65:f7:18:33:ed:9a:88:77:d2:13:7d:fb:da:55:
4d:4d:72:57:dc:ba:cb:ce:5f:7e:25:39:1b:dd:96:
bc:3e:67:6b:dd:7e:2f:e1:03:c3:ae:48:f4:b5:5a:
ac:e7:de:b4:a9:a0:4c:c2:c0:98:74:a0:04:c9:20:
4b:61:18:94:f1:66:d8:b9:9e:5c:af:47:db:56:ba:
7b:72:30:24:52:6e:d6:f1:5f:af:16:b9:17:3c:a1:
a3:08:e6:75:f7:58:39:0c:51:ba:1d:82:dc:dd:52:
08:fe:e2:75:2f:37:d1:aa:3b:b1:3f:1c:61:45:fb:
df:c9:8e:0f:ee:28:4e:ae:56:c4:9d:d3:58:12:66:
ae:33:6e:1b:a3:3d:ac:e6:61:9c:80:29:62:95:55:
08:cf:83:69:81:b0:ec:02:30:94:eb:69:96:69:79:
db:22:68:ef:b1:f3:dc:36:2a:66:bb:09:5c:14:e8:
97:8a:94:32:b7:e4:aa:5f:bf:4a:f5:4f:8f:23:69:
de:24:97:89:cc:b1:1b:97:77:d7:6e:94:3e:ae:39:
82:9c:b2:b2:38:86:dd:04:60:71:be:de:67:0d:cc:
47:87:da:be:0c:dd:19:a4:eb:b5:55:96:0d:22:90:
dc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:42:D6:C4:7B:B7:49:58:96:90:ED:1E:4A:D1:A8:C6:A3:09:17:26
X509v3 Authority Key Identifier:
keyid:A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:5f:24:bf:2e:e6:9f:6f:06:8d:0b:97:7f:7a:fa:5c:72:8c:
42:1d:b9:2d:82:c5:77:b1:42:85:ed:04:b2:cc:e7:d3:9b:46:
3f:1a:0a:c6:59:4d:8c:4c:64:9e:7a:cd:66:a2:68:21:d2:b5:
9e:f4:35:57:51:b8:0e:30:a2:1e:ac:f8:8b:97:92:cc:27:2c:
ff:75:61:29:db:87:67:10:bb:26:89:1c:67:ba:c2:eb:a4:c3:
4a:e9:6d:46:60:9c:07:7b:3a:9d:a2:26:45:48:ac:72:73:d8:
d3:71:f8:d6:13:24:76:07:1d:55:93:21:89:44:ec:3d:02:12:
29:ee:3d:e7:17:40:8d:34:f1:e9:b3:c3:b5:a2:87:d6:df:44:
be:a3:ac:21:f3:9c:1b:3f:a3:ad:36:e0:8d:ee:82:d0:b3:37:
1b:43:fa:da:18:b8:f1:41:01:49:e8:23:60:98:c3:1f:60:c9:
d4:c7:3c:13:17:06:75:71:47:f4:22:b6:da:0b:d1:2c:6c:23:
d6:da:af:36:51:69:9f:ba:c9:9d:e5:34:4f:4e:75:9b:a8:d1:
70:e5:f8:e7:8d:20:eb:b6:81:10:10:99:2f:15:9e:79:68:6f:
8a:c7:24:bd:2b:26:c2:f9:4e:c5:b3:d2:5b:28:94:fa:b7:eb:
d5:96:3f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:10:32 2025 by rpki-client