Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.mft
File: q5ddtDeN_KfClTuG07GNyLIY7Gs.mft (raw, json)
Hash identifier: S7/vToQVtmkeGIbfZ/aPU+XQTB/34dmEKcPAeFheqcs=
Subject key identifier: E7:F6:74:5E:9A:66:EA:42:62:4F:98:56:73:81:8D:76:69:6E:07:7D
Authority key identifier: AB:97:5D:B4:37:8D:FC:A7:C2:95:3B:86:D3:B1:8D:C8:B2:18:EC:6B
Certificate issuer: /CN=ab975db4378dfca7c2953b86d3b18dc8b218ec6b
Certificate serial: 01976E19AAA0380B0E462EE17C4D323F18D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.mft
Manifest number: 0D14
Signing time: Sat 14 Jun 2025 11:01:05 +0000
Manifest this update: Sat 14 Jun 2025 11:01:05 +0000
Manifest next update: Sun 15 Jun 2025 11:01:05 +0000
Files and hashes: 1: RbouPlrvjxMByw-unVzRP4nNXJw.roa (hash: XJEjUdWYmJvOBDOP+ovs4X9aLXbBgk9gR+EZ+bBT2d8=)
2: f1kmm1viP1JpShChN2T-8khwmCE.roa (hash: oA16peDdFaNYYVYRr7l06EBaQutaxn0Ux8cCt1MZLyc=)
3: q5ddtDeN_KfClTuG07GNyLIY7Gs.crl (hash: Sow1chuSr1CeEUkr7YmHTMAug5llBxeO1SF0yqB3stI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:19:aa:a0:38:0b:0e:46:2e:e1:7c:4d:32:3f:18:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab975db4378dfca7c2953b86d3b18dc8b218ec6b
Validity
Not Before: Jun 14 11:01:05 2025 GMT
Not After : Jun 15 11:01:05 2025 GMT
Subject: CN=e7f6745e9a66ea42624f985673818d76696e077d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ee:18:86:da:ad:6e:1b:4b:5d:51:2f:e3:45:
51:63:9f:1b:6a:02:54:74:a9:98:88:a2:12:0d:5e:
52:89:0a:8c:4f:95:67:a8:1e:82:75:f8:45:86:fa:
a2:e7:e1:30:cd:78:18:56:47:4a:aa:da:20:3b:44:
6c:55:42:04:7b:3e:f4:05:8c:c0:78:f5:10:4e:53:
70:68:75:04:cf:40:49:fa:be:7c:3a:00:56:74:f8:
f0:b5:f6:7b:15:ac:83:6f:17:36:82:56:d6:a2:44:
aa:74:62:53:ee:2e:4e:f2:82:9b:7a:ba:64:7f:61:
4c:90:7b:91:fc:66:10:93:39:3a:25:04:64:30:56:
3a:07:ee:45:bb:10:74:dd:2b:4c:f0:e9:c8:21:e9:
35:43:82:83:fe:e5:f3:15:94:bc:4e:c1:0f:9f:90:
a8:db:fc:d9:16:d4:e9:58:49:4f:01:09:3a:b9:7b:
7e:96:f2:eb:92:5a:25:b3:0b:0e:e6:35:27:45:f3:
7a:4a:53:4a:c1:2c:4d:af:4f:a2:7e:01:71:e4:75:
68:db:67:46:66:96:73:23:04:19:64:4e:94:c5:52:
e6:07:ac:e1:1e:a9:0e:5d:66:9c:a9:1e:f8:11:59:
93:fb:f8:72:d4:b9:50:22:fe:1c:52:65:46:ba:37:
15:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F6:74:5E:9A:66:EA:42:62:4F:98:56:73:81:8D:76:69:6E:07:7D
X509v3 Authority Key Identifier:
keyid:AB:97:5D:B4:37:8D:FC:A7:C2:95:3B:86:D3:B1:8D:C8:B2:18:EC:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:9f:ba:74:37:e9:4d:87:8d:df:a7:85:c8:c9:d0:db:a8:a9:
4e:9a:a2:f7:d3:f6:bf:a0:ae:7d:f7:0d:4b:97:cc:6a:93:09:
be:36:91:7b:11:93:53:f9:de:f7:29:e0:c8:91:42:71:08:6f:
33:db:f0:60:02:9d:fc:7b:02:8d:63:01:69:36:66:92:5e:13:
a6:75:b1:ca:4b:60:28:5c:51:73:ec:2c:c7:65:d1:79:92:c5:
1b:39:d0:a8:df:95:94:1c:3e:d8:19:b8:a8:90:ee:cd:5f:ac:
4e:e8:79:71:7e:ed:65:9b:15:d2:8e:e7:2c:08:c6:06:c5:4b:
94:55:fc:a7:35:86:34:7a:0d:f1:8e:7f:05:90:54:8b:9a:6a:
cf:f6:a6:7f:5c:ab:e5:57:35:e8:c8:1e:44:d3:fd:03:c7:18:
e0:99:aa:52:2e:b6:b9:b9:ff:50:97:7d:ee:e5:ae:70:b1:2c:
b6:bc:cd:bd:f6:26:73:4d:f9:ae:5e:14:b1:9e:6d:f6:f9:57:
86:91:1d:8f:b7:12:55:3b:37:6d:24:6d:6b:38:a8:f0:0e:36:
e7:0d:1a:bd:4a:c2:9a:a8:6b:cf:2e:02:56:ce:6d:02:a1:60:
4d:ac:32:26:00:89:aa:5e:c9:41:20:84:60:71:05:a8:4c:64:
7e:91:b8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:08:58 2025 by rpki-client