Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
File: q3ukNXZmdmStbymmZicOM1eDbxo.mft (raw, json)
Hash identifier: J3Q77yjoZEFMfkWAhgMiulb6/CplpqY6rx/oMpYwOEE=
Subject key identifier: DD:9D:58:03:EA:46:55:9D:B1:66:C6:83:EB:A6:4F:D1:27:B5:90:8C
Authority key identifier: AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A
Certificate issuer: /CN=ab7ba43576667664ad6f29a666270e3357836f1a
Certificate serial: 01976C2AA9DDC7EACF209BF2376CD00B0A9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 02:00:24 +0000
Manifest this update: Sat 14 Jun 2025 02:00:24 +0000
Manifest next update: Sun 15 Jun 2025 02:00:24 +0000
Files and hashes: 1: q3ukNXZmdmStbymmZicOM1eDbxo.crl (hash: ZTocPHKM7tCmrPeyo9/S4uFCzHOhqYVJEgE/HU6rLDo=)
2: rFtQ52vnm-Gf2JN4L6yb0DTiUgw.roa (hash: U6PLdhl9fIkfcENijAv37MSFDTY2VRfS2bCNJb0dRIc=)
3: z4h6VOta7nlktuKCkK1-Zw-1S8Q.roa (hash: XA8aL+R7cIm6KIZ8pt2+mp6cPL138KkhjyZFmjM+7SU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:a9:dd:c7:ea:cf:20:9b:f2:37:6c:d0:0b:0a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7ba43576667664ad6f29a666270e3357836f1a
Validity
Not Before: Jun 14 02:00:24 2025 GMT
Not After : Jun 15 02:00:24 2025 GMT
Subject: CN=dd9d5803ea46559db166c683eba64fd127b5908c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:74:fa:39:86:96:df:64:6e:42:fa:80:42:90:
73:23:f6:dc:d8:87:54:c2:a9:66:06:bf:40:e3:8a:
5d:50:d4:1e:0c:49:82:06:45:b6:3d:94:e2:25:1f:
96:5f:ca:29:4c:51:ed:1a:57:f3:72:43:86:c0:ab:
6a:4a:8a:e1:e2:8b:d7:08:42:a5:a7:27:5c:18:1f:
5d:12:c3:3c:6f:96:0f:a8:51:ea:4d:1a:ef:07:af:
90:3e:2b:26:f0:57:59:17:d2:18:23:26:6a:e9:a0:
c0:e3:68:40:f1:f6:31:8a:98:0d:41:78:cc:28:bb:
e5:30:d6:ce:2c:14:39:03:75:ca:86:31:53:4c:88:
69:1e:f4:1e:a5:43:12:6e:7a:79:e3:05:98:9d:47:
9f:4f:fb:d7:d5:ba:46:f9:16:53:f1:7a:41:f6:02:
65:45:d2:40:31:6b:e5:ae:c0:41:cb:b5:1f:a9:19:
e3:36:65:e9:aa:c9:3f:d7:5b:ff:b2:d6:4c:52:96:
b7:f4:59:79:3b:af:9f:6b:90:e8:72:8e:97:2f:b4:
e5:fa:c9:d9:84:6b:f8:55:d2:b7:89:16:a3:37:43:
c7:28:f5:01:0c:b7:3d:c5:e0:57:c6:ac:61:43:d2:
0c:af:48:86:42:92:bc:a0:54:80:34:72:ca:4c:b2:
1f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9D:58:03:EA:46:55:9D:B1:66:C6:83:EB:A6:4F:D1:27:B5:90:8C
X509v3 Authority Key Identifier:
keyid:AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:25:35:e7:ff:bd:cb:4f:69:dd:58:1b:49:ac:d7:ac:9e:72:
be:2c:f4:c0:66:5a:9a:43:cf:fa:71:de:38:d5:8c:1f:60:e2:
e3:23:ed:5d:35:54:71:ec:6d:b3:75:1f:a4:98:ee:c1:96:61:
c5:38:d0:5a:42:5d:f7:ad:04:4a:b3:19:42:f9:84:52:03:3f:
8a:2e:43:7c:c7:85:23:e9:17:38:01:fa:36:96:d4:03:08:72:
40:53:19:d3:e1:d8:1f:e8:0c:85:33:b6:4e:7b:46:73:44:38:
25:40:03:45:64:8b:ec:33:66:89:31:6a:92:a0:81:54:de:66:
af:d0:09:b9:18:ff:0b:5a:17:6b:38:2b:e8:7c:02:4a:bc:8c:
14:8a:a1:e5:dd:55:9e:e2:ec:f7:25:6d:ab:25:c6:0d:27:58:
9a:db:2e:76:c9:d5:c3:47:99:96:f6:09:e2:73:67:0b:97:aa:
1c:eb:85:3d:f4:97:8d:2a:55:05:b5:62:83:8e:d3:38:d6:99:
d8:73:c1:b5:51:8c:e2:12:17:37:5b:91:bf:e3:44:16:a2:f5:
0f:77:1b:d3:bb:75:14:bf:96:5d:96:76:b9:94:d9:6c:f6:e3:
3c:04:c2:69:25:24:de:51:d9:10:8f:6e:23:02:71:7f:de:77:
df:a8:81:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:55:48 2025 by rpki-client