Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.mft
File: QVHWtEHT9XdiwDL4-tIXYIoi96E.mft (raw, json)
Hash identifier: jxD1vR2lqeKy5KVOaP4s8KSS6B/yyiykYYC3FyXLw1o=
Subject key identifier: D2:C7:55:BB:13:C9:FE:2D:A7:E6:7F:31:B1:EE:E9:CF:19:0A:1E:7C
Authority key identifier: 41:51:D6:B4:41:D3:F5:77:62:C0:32:F8:FA:D2:17:60:8A:22:F7:A1
Certificate issuer: /CN=4151d6b441d3f57762c032f8fad217608a22f7a1
Certificate serial: 01976C98B8651A45FFCB45757A753723DEE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVHWtEHT9XdiwDL4-tIXYIoi96E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 04:00:37 +0000
Manifest this update: Sat 14 Jun 2025 04:00:37 +0000
Manifest next update: Sun 15 Jun 2025 04:00:37 +0000
Files and hashes: 1: Im-QceSwk2rydy4UnBzai_RFayI.roa (hash: 7cmPd6tOwgpnXHTZZ7ExgoosfdS4LnMMgIaEbvg4EPQ=)
2: QVHWtEHT9XdiwDL4-tIXYIoi96E.crl (hash: PH8ZJpdGxVZGimsE2z36zAkCenxcQhiJZgnlHiV0m7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVHWtEHT9XdiwDL4-tIXYIoi96E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:b8:65:1a:45:ff:cb:45:75:7a:75:37:23:de:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4151d6b441d3f57762c032f8fad217608a22f7a1
Validity
Not Before: Jun 14 04:00:37 2025 GMT
Not After : Jun 15 04:00:37 2025 GMT
Subject: CN=d2c755bb13c9fe2da7e67f31b1eee9cf190a1e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:00:f1:01:ed:81:4c:9e:23:e1:a4:2b:5a:96:
9d:36:f0:e6:8f:04:7f:ff:01:b2:a3:c8:77:c3:22:
54:f6:6c:13:a3:93:6b:bb:0e:c6:67:0e:36:26:8d:
e8:f9:02:60:34:70:8f:9a:f3:0a:06:6a:68:87:77:
f7:d2:3b:d2:01:1e:21:1d:87:30:88:ef:95:09:ac:
35:11:f0:7c:01:41:ee:e3:2a:d4:22:65:1c:7e:4e:
41:5b:46:fc:a6:71:ef:9d:2e:a8:a5:7a:80:a8:31:
33:c7:0a:82:fa:55:a6:30:c0:6f:9b:83:d5:12:6b:
01:1f:30:f2:6f:85:83:05:9f:ec:6a:2c:18:17:c6:
b4:59:51:e0:e1:d3:39:ad:a7:fd:39:a6:40:e5:c7:
ce:e5:81:fb:0b:3c:32:ee:e1:b3:34:21:fd:62:a8:
1c:3e:1d:18:db:ce:aa:17:f5:5a:36:40:8e:53:c5:
b3:07:ab:72:91:b2:5c:0b:58:5a:25:6b:fe:a6:e1:
61:f0:f7:74:34:63:e1:25:fe:ab:5a:ac:81:4b:79:
b6:85:79:ca:81:c7:b4:46:58:2d:1b:4f:07:7a:bd:
d4:82:06:8e:ea:a4:ac:b1:86:57:79:60:86:13:34:
8d:41:77:20:de:1e:43:f9:0d:08:3f:16:5c:52:78:
13:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C7:55:BB:13:C9:FE:2D:A7:E6:7F:31:B1:EE:E9:CF:19:0A:1E:7C
X509v3 Authority Key Identifier:
keyid:41:51:D6:B4:41:D3:F5:77:62:C0:32:F8:FA:D2:17:60:8A:22:F7:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVHWtEHT9XdiwDL4-tIXYIoi96E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b5:68:99:0d:8f:f5:c2:f4:94:9c:55:2b:fb:98:fd:4a:fc:
11:68:1d:60:91:a4:8b:2e:d1:a7:a2:93:e8:c3:59:d9:ec:48:
61:d4:e2:e1:65:49:4d:6f:80:7e:4c:41:96:b8:56:80:a6:dc:
58:9d:fd:17:b2:4d:af:4c:ac:62:4d:c7:4c:61:b0:00:69:28:
40:4c:28:9c:eb:ad:1e:98:72:69:23:52:cc:6a:1e:8a:e7:1a:
76:f3:4e:c6:e8:ee:75:bd:bf:48:e7:85:15:d2:b7:db:29:d1:
52:fe:07:23:c8:9f:ec:7e:51:6a:fb:83:2b:02:7c:20:6b:3a:
d5:8a:60:39:d6:21:cb:fc:2e:2b:40:a1:f1:85:ab:12:10:33:
d8:13:86:c2:95:74:00:19:62:89:0f:50:c2:9e:7c:fc:2a:a4:
1e:6f:c0:08:23:a0:f8:1e:61:cd:ee:cf:20:30:e2:de:9a:c2:
32:b5:81:ef:73:89:54:76:c6:04:bf:1c:ab:c8:e1:88:a2:50:
64:e6:25:47:74:78:99:40:04:a3:c9:e2:5b:16:d5:ed:d7:b4:
2e:70:5c:92:4b:33:6e:b1:df:8d:40:0f:8b:50:c2:1d:2e:6c:
22:da:9e:0a:cd:e9:3f:95:03:3e:c5:53:f6:e0:a6:d7:18:5f:
7d:f3:ae:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:34:43 2025 by rpki-client