
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
File: qycpZC0uNTfZq3xFxR_ibepGi4I.mft (raw, json)
Hash identifier: ql2KPZ9dNI0gyww3J9kJ9AUkIklbzQdaAM4qbAlPmbw=
Subject key identifier: E2:D6:F9:2A:A3:3E:58:31:0F:18:1E:01:F7:41:D1:9D:4D:7E:A5:95
Authority key identifier: AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82
Certificate issuer: /CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82
Certificate serial: 01976CCFC239556978736885AD530E838B34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 05:00:44 +0000
Manifest this update: Sat 14 Jun 2025 05:00:44 +0000
Manifest next update: Sun 15 Jun 2025 05:00:44 +0000
Files and hashes: 1: DjJbJVK4ViblB5hs7VL09DEef2k.roa (hash: cqb7/wQBvYXWlhU0RsJ/gn+FwdkM5gkB/GQuwkcLWgs=)
2: qycpZC0uNTfZq3xFxR_ibepGi4I.crl (hash: x+bJpfkA6jb7nNN5VZmb3PTumtDMD8mX29LATrDHaQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:c2:39:55:69:78:73:68:85:ad:53:0e:83:8b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82
Validity
Not Before: Jun 14 05:00:44 2025 GMT
Not After : Jun 15 05:00:44 2025 GMT
Subject: CN=e2d6f92aa33e58310f181e01f741d19d4d7ea595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:85:f2:a0:c5:93:29:13:41:c7:d7:7d:2b:43:
66:28:82:53:6e:bc:ea:86:da:fe:39:2a:61:e0:f7:
81:48:f2:32:b6:8c:e6:2d:9a:d4:a9:51:7b:19:cf:
9f:31:3b:18:6c:f4:87:4b:c4:67:17:af:3c:7c:2a:
30:54:b2:fc:13:f1:92:70:ec:2d:c7:3e:57:93:91:
ba:59:ee:20:fd:c8:a3:51:bd:4a:da:f9:9f:ab:6b:
80:cf:2c:9e:27:b3:5e:2f:35:52:a0:c9:ef:de:06:
56:75:43:46:36:0b:4e:8d:cb:80:e4:bd:4c:74:94:
c4:fd:cb:14:90:c1:ba:07:b8:fb:59:fa:73:f2:45:
72:44:27:21:e3:f3:10:d7:a6:2a:24:35:e4:aa:23:
8f:7a:21:8c:e9:fa:df:16:83:b8:b1:9d:1b:00:44:
2e:48:53:1c:12:65:91:d4:d9:cb:2c:8e:3b:02:64:
19:ee:e4:fc:71:b9:a3:44:00:32:a0:4b:b8:90:93:
65:5d:70:1a:e3:7d:d1:a7:ba:50:c9:97:14:ed:fc:
82:16:39:4f:7d:ad:e0:9c:7c:5f:f2:fa:15:ca:b2:
2c:c0:fb:b0:e5:c3:2e:c4:a3:12:16:a5:19:f3:21:
72:63:77:a0:c4:62:d0:d8:96:7d:df:02:8d:87:13:
65:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D6:F9:2A:A3:3E:58:31:0F:18:1E:01:F7:41:D1:9D:4D:7E:A5:95
X509v3 Authority Key Identifier:
keyid:AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:21:88:54:a1:13:3c:b5:11:28:f7:21:a7:50:84:eb:2d:88:
ba:15:3c:32:37:44:bb:cc:c5:31:7f:97:70:fe:3a:b7:ab:8f:
e0:0d:d0:34:1b:99:ed:9b:31:63:14:59:d6:cb:af:69:64:da:
4b:b2:09:b5:4b:dd:cd:3a:84:c9:69:6b:e8:be:b3:72:fe:bd:
4f:97:36:e5:c7:f8:91:ef:65:d0:5f:a5:73:d2:51:fb:55:0c:
dd:92:86:a3:15:21:fe:42:eb:c2:99:50:a4:17:69:3c:00:00:
8a:7d:d7:9a:8e:46:b6:bc:8e:48:a9:79:7d:9d:06:5c:95:6a:
11:b1:6d:7a:fe:13:16:6f:3d:1b:f1:7a:80:76:f9:5f:e7:3e:
24:3e:37:3b:99:f4:6d:8a:76:e1:a4:53:b9:5c:ff:d8:1d:01:
62:33:08:71:f3:99:01:ba:7d:5a:0b:a0:91:b3:2c:81:9c:53:
ac:51:18:72:92:bc:e0:77:b3:47:61:21:68:9d:03:80:22:59:
81:57:07:b8:0a:68:4d:35:b3:53:61:af:79:49:7e:29:6a:79:
41:26:24:ba:db:e5:c7:08:12:bb:12:d0:f0:56:b0:26:91:c1:
10:9a:46:f6:0d:ef:03:d9:77:00:38:85:75:38:57:14:f5:9e:
0b:f7:7b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:48:56 2025 by rpki-client