Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
File: qjHJjjyrghyE3e_yBp4CJZvW5hw.mft (raw, json)
Hash identifier: eqPOD+9O0dX1ji2kyUYaNWNW2u8vJBHi0oN5x1vjdKY=
Subject key identifier: 39:09:95:89:71:B0:09:AE:0F:ED:15:BE:77:C0:1F:BB:F9:4F:BA:2C
Authority key identifier: AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
Certificate issuer: /CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
Certificate serial: 01977609BD8CA044F6DE90CFEA84FCA294C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
Manifest number: 0B04
Signing time: Mon 16 Jun 2025 00:00:39 +0000
Manifest this update: Mon 16 Jun 2025 00:00:39 +0000
Manifest next update: Tue 17 Jun 2025 00:00:39 +0000
Files and hashes: 1: AIeHAMlo02ixYJZr9DxoRfeqC_w.roa (hash: r/OyoKCdS9zD7ksUp6W0p8pqS4rPDdjM46a0P82mb/E=)
2: qjHJjjyrghyE3e_yBp4CJZvW5hw.crl (hash: AH6zf45s9U0fCt11XXhiCkqKo/psymj3sL0H0UKCfa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:09:bd:8c:a0:44:f6:de:90:cf:ea:84:fc:a2:94:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
Validity
Not Before: Jun 16 00:00:39 2025 GMT
Not After : Jun 17 00:00:39 2025 GMT
Subject: CN=3909958971b009ae0fed15be77c01fbbf94fba2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:74:54:20:44:ea:91:3f:04:fe:85:46:fc:47:
12:00:36:26:69:5a:7b:87:b3:bb:48:7f:77:fa:00:
3d:16:23:39:84:46:6a:8a:4a:a3:ed:78:37:03:1f:
f7:35:89:0c:2a:b2:52:12:d7:41:0a:c8:cc:6d:ec:
14:2b:92:bc:1b:2f:09:e3:37:9b:da:0d:4b:fa:ca:
76:fd:e6:11:49:0d:53:a0:78:db:97:42:5a:23:00:
aa:f3:93:96:93:ed:31:34:6d:fb:c9:1f:7c:76:ed:
c4:14:77:f5:d9:b5:7e:52:9a:b5:01:c1:0e:10:ef:
0a:44:97:06:c5:44:fa:25:72:a9:19:a4:19:7d:0e:
a1:a7:32:4d:6c:33:1d:b9:40:85:df:54:0f:56:1f:
f5:e9:4a:83:22:d3:1f:12:6b:33:4d:c4:a9:08:4c:
51:17:a5:1a:fd:31:97:88:56:26:10:3d:4e:ec:fa:
be:3c:7e:43:fc:15:e4:fb:85:e9:65:cf:9b:7a:8e:
01:c5:f8:df:d0:0b:71:9d:2e:2e:b8:22:3e:5b:4b:
35:e9:bb:03:79:7f:25:ee:95:67:b7:04:96:39:a0:
6a:31:18:79:19:20:d6:9d:44:de:65:42:5a:cc:4e:
0f:d9:d5:0d:79:4a:61:30:4c:88:b8:9a:75:6c:0a:
87:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:09:95:89:71:B0:09:AE:0F:ED:15:BE:77:C0:1F:BB:F9:4F:BA:2C
X509v3 Authority Key Identifier:
keyid:AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b4:94:0e:db:39:ab:90:c7:23:4b:15:7b:4f:f9:45:eb:a8:
0f:28:9a:ea:4c:5e:c7:ea:38:29:3a:9a:de:2b:7b:6d:34:ac:
18:0b:32:72:d7:2c:7d:17:4c:2b:af:0e:63:36:c8:70:04:59:
3a:e0:da:06:58:53:48:6c:14:c8:7a:5a:b3:dc:25:38:f3:51:
5a:1f:38:97:7c:c7:d7:cf:12:29:3f:49:e1:4f:39:c3:10:41:
e2:be:54:29:b6:ea:2f:dc:43:9d:59:d4:6e:7a:75:65:ee:86:
20:22:63:39:20:bb:13:17:31:c5:8e:e8:fd:96:3d:aa:02:00:
b0:46:5d:5c:6e:76:32:b6:30:2a:67:6b:4b:0c:b3:89:91:6c:
d1:ef:a9:84:8d:2f:d1:65:30:13:38:30:09:e0:77:f4:f0:41:
97:fb:5e:78:21:cb:69:01:a5:79:07:e3:4a:0d:af:66:83:43:
c3:b3:22:12:d1:ae:13:e5:88:d8:5b:21:cb:66:12:b4:c7:3c:
74:69:56:b7:22:ef:e8:52:3e:bf:69:82:85:ba:65:20:bc:38:
ff:4f:90:49:db:be:06:84:cc:dd:64:b0:f7:09:37:50:f5:8c:
e4:18:ad:64:d6:fe:62:ff:f6:bd:44:51:66:bd:aa:f9:84:05:
97:6a:cf:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:26:15 2025 by rpki-client