Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
File: QET6VEALxs_DDLgxGoGdW9pCGnI.mft (raw, json)
Hash identifier: mhThqVrOTPqjrxd1p2AlEkewznV9+GFE1nIEx/MAYgQ=
Subject key identifier: AD:85:2F:21:CB:61:00:5B:A3:55:DC:C9:3E:3A:B6:6F:5B:4D:26:F9
Authority key identifier: 40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
Certificate issuer: /CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Certificate serial: 01976C98F03D624F0EBAAB62ECD0B4732CFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 04:00:51 +0000
Manifest this update: Sat 14 Jun 2025 04:00:51 +0000
Manifest next update: Sun 15 Jun 2025 04:00:51 +0000
Files and hashes: 1: QET6VEALxs_DDLgxGoGdW9pCGnI.crl (hash: D2YZNPIQAQwbFAXQUVSbxan913JJoOIfVzWKuFgenGk=)
2: aIPJ4lm4ZyremkDprutiWRNEZ90.roa (hash: Kp0nR22T2kDefAUNT5QJL0kBQwplOU/6USLq0OiGG/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:f0:3d:62:4f:0e:ba:ab:62:ec:d0:b4:73:2c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Validity
Not Before: Jun 14 04:00:51 2025 GMT
Not After : Jun 15 04:00:51 2025 GMT
Subject: CN=ad852f21cb61005ba355dcc93e3ab66f5b4d26f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a3:18:9f:65:fa:2a:1d:c2:4e:1a:84:6b:03:
cf:b3:d1:f1:06:4b:94:50:e0:bb:c8:e2:b8:60:ba:
59:f6:54:ee:53:d0:04:d6:38:22:b7:f0:35:a4:7c:
b4:2f:35:b9:fa:b0:82:85:de:f1:1f:6a:4f:12:db:
02:8c:2b:c0:60:9f:02:71:a4:09:26:b2:fc:40:bf:
04:dc:db:bf:d1:ee:95:bf:cb:5c:a8:d4:a5:dd:46:
70:a8:b9:12:69:f0:e9:9a:2a:b7:8e:6f:07:54:ca:
2d:dc:00:74:8b:2f:22:e2:de:3f:c9:fc:9a:a3:11:
b9:76:7f:80:dd:06:bf:41:8f:63:75:5f:ac:26:e9:
45:f7:64:8a:a9:af:66:1d:1a:3a:98:1c:c5:5e:12:
d2:4a:fd:f1:81:cb:a0:9a:3a:63:3f:d8:76:06:eb:
f8:7b:c8:52:b4:3e:a3:3c:53:86:ed:d6:bd:77:77:
c3:09:01:30:09:6e:c5:ec:69:3f:8a:df:a4:9b:55:
7f:2c:8e:2e:ef:6b:5a:00:cc:b2:0e:4c:24:fe:44:
f4:50:7b:1a:49:a0:8e:58:4e:32:be:f3:e5:07:c0:
94:5b:19:f1:f0:1a:dd:d7:5b:96:89:56:10:f8:ad:
31:76:2c:38:fb:ec:b0:45:fd:d2:5a:24:83:ec:b2:
12:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:85:2F:21:CB:61:00:5B:A3:55:DC:C9:3E:3A:B6:6F:5B:4D:26:F9
X509v3 Authority Key Identifier:
keyid:40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:19:73:46:c1:9c:29:15:8a:27:34:b8:d7:1a:e2:30:83:3a:
04:5e:ad:da:50:4e:76:f8:5c:4e:56:56:b4:8f:d5:50:26:4d:
ed:29:20:45:2b:8f:65:30:2f:3b:8f:7b:57:6b:d6:ab:4a:bf:
4b:b2:a6:08:ea:b2:38:1c:d4:e7:3d:1c:4b:82:3a:9f:4e:ed:
b6:0c:1b:40:a2:0f:af:25:74:07:4f:93:e7:57:1b:2b:31:1f:
6d:91:b0:83:b9:e9:db:50:81:f9:61:b6:7c:13:ec:24:7a:82:
6f:ad:ae:66:9a:6c:c6:e5:f0:aa:68:12:cd:a1:3c:d4:d2:3c:
07:3d:52:f7:dd:1b:e1:42:a2:08:d1:af:73:bd:0e:cc:41:f7:
7b:63:0d:56:48:29:5b:a6:e8:8a:29:39:cc:e9:d8:ce:4d:84:
e0:f9:3b:bb:f4:46:5a:3a:3d:5a:ee:68:c3:b9:d6:b7:e7:cd:
2c:c0:f6:1f:54:9c:ad:91:dc:aa:69:54:5e:8a:15:34:3e:6d:
ed:21:22:b3:15:d5:1c:b7:54:20:c7:07:cd:91:6d:cb:e8:85:
a2:18:d1:50:8e:8f:a4:b4:7d:30:6e:19:bf:b9:21:16:a1:b7:
0d:67:92:87:cb:cc:e3:6d:fc:de:e0:9a:ab:24:9f:2e:e5:d1:
79:62:35:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:58:31 2025 by rpki-client