Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
File: 1QzaSMNeVOuAJXWqpAjM5XmSchY.mft (raw, json)
Hash identifier: kuhExG19EEPoFCzeqqHcMIWAYhLHH3yTrGGzwySEpbA=
Subject key identifier: 1E:81:ED:8C:76:23:FC:C7:49:B7:EC:09:95:AE:D0:19:E9:8E:FA:A0
Authority key identifier: D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16
Certificate issuer: /CN=d50cda48c35e54eb802575aaa408cce579927216
Certificate serial: 01976A05D3EE009A200E571269AB1EBCE45B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
Manifest number: 05CC
Signing time: Fri 13 Jun 2025 16:00:56 +0000
Manifest this update: Fri 13 Jun 2025 16:00:56 +0000
Manifest next update: Sat 14 Jun 2025 16:00:56 +0000
Files and hashes: 1: 1QzaSMNeVOuAJXWqpAjM5XmSchY.crl (hash: oVIW80CvB7CCxUJjs2c0Qqf69nLci4B0OBL4L7FGli4=)
2: hth3rJjFWs6NUkK-o0tTbHyr4L0.roa (hash: Vn4AMxs64boyWbgENvm4Of96GFQtj+G6HAjnQ0teAh4=)
3: lPDpfx3Te7zjZCAdY5UFziIAeNM.roa (hash: 5bkDE5sFGFyGe5UEk23hluwD8i8ffdDbAYDQQoPB27A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:d3:ee:00:9a:20:0e:57:12:69:ab:1e:bc:e4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50cda48c35e54eb802575aaa408cce579927216
Validity
Not Before: Jun 13 16:00:56 2025 GMT
Not After : Jun 14 16:00:56 2025 GMT
Subject: CN=1e81ed8c7623fcc749b7ec0995aed019e98efaa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f8:79:e0:ea:31:e5:00:98:f9:d9:2c:1d:8e:
bd:4a:6d:03:0d:9e:a2:57:44:15:50:c7:c8:24:68:
27:73:0e:b5:0c:4d:3a:05:da:8e:b4:40:d2:0c:62:
d6:03:09:ad:eb:58:ac:8b:38:63:36:6c:5c:11:0a:
ff:82:3a:be:8c:4d:ab:aa:0b:7e:cd:09:b6:05:1f:
9a:4a:fb:75:4a:56:7d:d9:56:92:ff:93:e4:88:a9:
6a:88:01:f7:5f:90:87:58:16:4a:7c:5b:17:ba:16:
af:93:d9:b0:3f:ca:55:62:0f:59:51:8e:cf:30:c3:
7d:34:25:3e:51:29:45:0a:88:98:a4:fe:fd:6c:d5:
fc:cf:40:d5:3f:6f:fd:ad:f1:3d:e6:c4:75:f1:c6:
54:3c:56:67:b1:7e:f9:65:b5:fb:cd:39:f0:e7:1c:
82:b1:1b:14:b6:14:b5:c7:83:bc:54:36:2f:ce:c6:
ee:d2:2b:33:12:75:06:61:7d:69:f8:2e:a9:7e:88:
02:0e:7a:da:8a:d8:34:b5:3b:4e:6f:65:40:01:fc:
62:dd:9f:19:7e:8a:1d:88:d6:25:60:8c:f2:2d:47:
74:38:eb:8d:3f:8e:18:0b:66:ba:33:fb:47:a9:b9:
e2:04:6e:b1:ba:9d:5c:c0:47:5b:45:c2:dc:65:c0:
55:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:81:ED:8C:76:23:FC:C7:49:B7:EC:09:95:AE:D0:19:E9:8E:FA:A0
X509v3 Authority Key Identifier:
keyid:D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:6e:d9:34:6c:90:6b:c3:73:5e:b1:76:cf:73:eb:7d:c1:1c:
3c:e2:9e:8a:e5:d9:57:9d:a2:47:bb:b7:8d:bb:52:1a:4f:ff:
5c:26:ef:17:cb:f3:93:e3:b2:8c:42:51:f0:3b:e4:56:c4:50:
22:9f:de:63:19:8a:8b:ab:c0:e3:99:a9:f7:d2:5c:90:f8:cc:
0f:1e:9e:12:4f:d2:98:33:75:07:4c:12:ef:f0:e8:e6:56:b8:
9b:41:d9:d8:7e:3a:a8:bc:d0:cd:a6:3a:f1:94:56:bb:58:56:
d5:04:61:66:4a:29:97:39:d6:2a:2c:e2:36:e1:b2:26:12:6d:
4a:ce:c7:17:c9:fb:1e:94:b1:1b:1e:96:81:18:63:11:10:78:
00:33:d6:68:79:1e:4a:26:fe:a8:47:39:19:d8:64:16:c5:3a:
d3:f4:9f:5c:c7:d6:db:52:f3:39:9d:48:0e:eb:25:1d:f8:37:
dd:84:5f:43:d0:e0:02:e0:e7:d7:49:4d:9e:63:bc:03:e2:5a:
b6:73:16:25:a4:f0:26:27:59:62:04:d1:7a:7e:81:85:17:eb:
bc:0a:bf:f4:d5:fc:37:a6:b0:4f:45:e4:1e:e1:46:7c:5c:e5:
29:10:46:e1:e1:27:76:23:ff:9a:d0:c0:1c:f3:a4:e0:e5:b2:
c1:88:c0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:05:02 2025 by rpki-client