Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.mft
File: qBVYhT_rx52BPrLAzly3NvtzwN8.mft (raw, json)
Hash identifier: PiG0/psGX20PmPxPvZcXnDwNa/GxwfyxKR0FnbRbgr4=
Subject key identifier: 8E:A1:96:84:51:37:F7:25:CA:C9:03:C1:A9:E0:35:09:5C:A4:60:BB
Authority key identifier: A8:15:58:85:3F:EB:C7:9D:81:3E:B2:C0:CE:5C:B7:36:FB:73:C0:DF
Certificate issuer: /CN=a81558853febc79d813eb2c0ce5cb736fb73c0df
Certificate serial: 01976E87912B787C041F6816B6FBB854DE68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBVYhT_rx52BPrLAzly3NvtzwN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.mft
Manifest number: 1337
Signing time: Sat 14 Jun 2025 13:01:07 +0000
Manifest this update: Sat 14 Jun 2025 13:01:07 +0000
Manifest next update: Sun 15 Jun 2025 13:01:07 +0000
Files and hashes: 1: LgqWUP0536hPg5BCpisRq1CfwzE.roa (hash: vMIIsO4xKqj7JGP30ELt6Q8iCAR8hVZNP/9djB0t8ro=)
2: dJRAHiOGAXHi9ZK3B82VqToDqnk.roa (hash: uJbxE7UmTFUvOg3MJeibMc8I9N/6ZLAzoiFFQ1kOB8U=)
3: qBVYhT_rx52BPrLAzly3NvtzwN8.crl (hash: KgVi0Y4DVCQJN1MQ5AHRa8SM2tu7TFaykgCqKf80ZX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBVYhT_rx52BPrLAzly3NvtzwN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:91:2b:78:7c:04:1f:68:16:b6:fb:b8:54:de:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81558853febc79d813eb2c0ce5cb736fb73c0df
Validity
Not Before: Jun 14 13:01:07 2025 GMT
Not After : Jun 15 13:01:07 2025 GMT
Subject: CN=8ea196845137f725cac903c1a9e035095ca460bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:23:d8:f7:34:b4:6d:53:9a:40:d7:2a:4e:24:
04:7e:48:94:bf:4f:59:14:d8:b3:80:64:9e:79:bd:
eb:7e:a4:f2:f1:d8:05:6a:ac:05:c5:61:57:1f:d3:
19:f5:eb:53:f9:b8:1c:16:4a:49:ed:da:9b:a0:9a:
e4:c8:4d:c5:b3:48:38:8e:23:d6:d2:c4:bf:a6:a7:
64:d8:e8:a5:70:97:ac:78:1e:79:ce:47:40:f0:e8:
bf:4f:0e:15:47:e8:78:3c:38:f5:b5:65:5b:b9:1d:
84:fd:a2:b5:58:86:c8:ab:f9:20:65:69:45:4d:bb:
35:12:9e:fc:f7:7f:a5:6f:8f:98:f2:bd:6a:54:5d:
d6:e0:5b:7d:38:f4:bd:ed:9a:c3:4b:0a:27:46:09:
98:bd:e9:4a:78:1e:2a:5a:92:39:be:30:9c:3a:6e:
b1:17:42:8a:e3:65:1c:14:43:b8:69:86:e9:9c:ce:
32:92:4f:f2:00:f4:cf:40:9c:8c:e9:08:62:e4:ba:
89:ed:94:d9:5c:d8:66:f2:cd:2e:a7:d5:2e:4f:8e:
9e:95:2e:f6:56:f4:b1:fe:ac:28:65:ce:df:ba:5e:
4c:a2:61:09:da:a9:a3:8e:c6:e5:0b:6c:53:e6:60:
d6:7c:d0:19:a9:b7:af:7e:45:2d:78:99:90:e3:65:
8b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A1:96:84:51:37:F7:25:CA:C9:03:C1:A9:E0:35:09:5C:A4:60:BB
X509v3 Authority Key Identifier:
keyid:A8:15:58:85:3F:EB:C7:9D:81:3E:B2:C0:CE:5C:B7:36:FB:73:C0:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBVYhT_rx52BPrLAzly3NvtzwN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:3c:5c:ab:e4:87:8f:69:47:24:ec:e9:02:4d:c1:e9:ae:3e:
9c:f8:6c:50:ab:4b:f9:12:4e:2e:cd:a2:e8:c6:9b:3c:56:5c:
4e:97:3c:4b:b6:d8:60:1d:97:21:7e:d1:0b:e2:5e:2b:77:85:
5a:82:e7:fe:af:06:e5:e9:cd:66:fb:3c:d7:2a:cc:40:30:18:
68:b6:d3:91:f6:49:87:92:df:34:44:7d:8b:a6:bb:ee:48:e5:
33:f8:a6:85:9e:d1:3c:70:c2:7b:64:4e:2c:80:ac:28:8b:16:
05:56:ea:c0:7c:cd:6d:e1:ff:d4:fe:8d:54:0a:26:99:58:32:
9e:d1:7e:d6:1d:c9:e5:b9:10:8b:24:65:7f:0a:dd:62:f5:cc:
00:84:f5:4b:f7:be:f8:c5:90:18:6b:07:77:34:5b:20:16:e3:
f3:06:6f:5d:92:68:d8:0e:ec:91:04:c6:79:5e:5e:47:6e:f9:
1b:1b:b4:fe:fb:51:21:6a:1b:50:2e:d9:a5:8e:76:b5:1d:df:
c3:7f:eb:19:f8:b0:1f:ce:8f:f8:bb:b0:7c:6e:b7:6e:73:a9:
65:56:a4:1f:11:a1:6f:f3:ad:f0:10:db:67:05:31:d0:ea:af:
f8:c8:35:27:ff:de:ac:9b:92:b8:31:b5:ba:72:f0:79:ce:5e:
87:c7:1e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:46:56 2025 by rpki-client