Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
File: qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft (raw, json)
Hash identifier: ncQd6DVG2S0tW53UHJz8KZD5AaLRLSzekf8yRknyKzI=
Subject key identifier: F8:7E:91:54:05:55:E3:7F:2C:C3:70:77:A2:49:1B:7D:32:D3:CD:B2
Authority key identifier: AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1
Certificate issuer: /CN=ab1c29c95d248cbffa744ab34e47eacca73550d1
Certificate serial: 01977F0CEF48EAA4955EDC6E86D61A0F6BC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
Manifest number: 0983
Signing time: Tue 17 Jun 2025 18:00:43 +0000
Manifest this update: Tue 17 Jun 2025 18:00:43 +0000
Manifest next update: Wed 18 Jun 2025 18:00:43 +0000
Files and hashes: 1: hofEb4DxTmo8-bHoq5_u1SjHWxg.roa (hash: hCqP+IxiyDQrp0AjJaVxMj1A1H2iMztGikQq20Whf3E=)
2: qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl (hash: fBaaQFXsN5nZwADVgLzJN7MAg0K5u4O94PSuKrPhYBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:0c:ef:48:ea:a4:95:5e:dc:6e:86:d6:1a:0f:6b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1c29c95d248cbffa744ab34e47eacca73550d1
Validity
Not Before: Jun 17 18:00:43 2025 GMT
Not After : Jun 18 18:00:43 2025 GMT
Subject: CN=f87e91540555e37f2cc37077a2491b7d32d3cdb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e7:4b:9f:46:ca:b9:f3:8c:e2:e3:ff:44:2e:
b7:ad:71:ff:e7:43:d6:45:10:d8:31:45:8b:28:6f:
5a:f4:12:fe:35:aa:a5:44:d4:11:b1:d2:cf:08:ba:
31:c4:08:e3:8b:24:d5:c7:11:b0:c6:83:ff:b1:4e:
c7:c8:79:96:3b:27:aa:0a:e6:30:55:87:81:7b:fd:
23:7e:3a:27:7d:9e:85:3d:e0:08:ed:20:52:a5:86:
cb:04:b4:c4:ae:c4:56:50:1c:c0:35:e2:04:a3:98:
5b:b7:b3:54:25:86:c1:4e:60:99:ee:4a:88:3a:5d:
19:4a:59:af:2b:ca:cc:7b:d6:97:5b:d8:50:05:17:
08:8b:31:1c:a0:3e:72:76:89:98:2f:58:ff:6e:d1:
dd:5c:ad:59:69:9f:ac:3c:75:b1:3a:d4:47:2a:b5:
94:46:50:32:d6:71:5c:1c:81:05:ca:6c:86:01:40:
0a:68:df:d0:79:cf:15:f5:13:b3:a8:9b:9b:9c:b6:
5c:ba:44:a9:a1:fc:fc:b3:67:e6:bd:92:6d:60:26:
ac:90:24:7b:d9:49:85:f2:06:af:d9:1a:e9:75:8e:
47:ec:9a:2b:ca:89:4a:fe:ae:e3:3a:24:40:ba:4d:
11:a9:61:38:ca:4f:1f:40:cd:1e:02:44:46:fe:05:
6e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7E:91:54:05:55:E3:7F:2C:C3:70:77:A2:49:1B:7D:32:D3:CD:B2
X509v3 Authority Key Identifier:
keyid:AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f7:7f:3d:74:01:b9:6f:74:3a:ae:20:fc:5d:e7:ce:09:b2:
c1:53:46:49:8c:60:7f:e5:45:80:8a:85:23:fb:e1:63:e9:39:
d2:39:10:09:0e:5a:48:0d:41:ad:32:f8:dc:aa:a0:a7:73:98:
70:c9:0f:b2:64:e2:0c:7f:43:81:68:67:b4:9f:da:d8:be:ba:
15:2b:b1:50:c1:d3:95:a4:57:30:b2:a5:ea:ff:a3:cb:e9:dc:
b6:d5:59:00:34:14:bd:9e:72:40:95:48:6a:b7:8b:9a:3d:1b:
25:7a:8c:87:32:5a:82:f4:bf:2a:4f:3b:13:80:bc:94:9f:fa:
61:f5:42:b5:b3:ec:59:1d:fc:0f:bc:d1:00:fc:47:1a:73:d5:
3a:e0:a7:41:a4:a4:41:a2:a7:83:ec:3a:02:7f:5b:51:65:ca:
9d:3a:83:7c:86:4a:c3:80:00:f3:df:34:e7:52:b9:7f:f3:29:
6b:ea:88:14:33:25:e9:cc:fd:17:9c:b5:f7:0b:d8:65:5a:0d:
00:84:50:b3:c1:b6:c8:09:33:ea:0f:67:6b:86:1b:c3:bd:fa:
35:19:8e:13:95:9a:60:b4:18:81:7c:08:e4:3e:d8:c4:a6:49:
e3:d7:95:02:2d:2e:9e:c2:ea:bf:cb:20:25:e3:c9:51:a1:80:
57:7f:bd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 23:17:50 2025 by rpki-client