Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
File: QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft (raw, json)
Hash identifier: 6fXhV/MuT3KpFNf6hvpxz+XY3HNA3VdsaatjWMEtT50=
Subject key identifier: 05:42:78:1B:D1:4F:D4:9A:56:6F:53:DA:97:4E:03:40:18:34:B1:39
Authority key identifier: 42:B4:C7:9A:22:A3:FE:98:7E:F3:19:08:CD:44:FF:81:E9:B1:AC:F4
Certificate issuer: /CN=42b4c79a22a3fe987ef31908cd44ff81e9b1acf4
Certificate serial: 01976C2AE50EC848E0E837037AF9269BC4A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 02:00:39 +0000
Manifest this update: Sat 14 Jun 2025 02:00:39 +0000
Manifest next update: Sun 15 Jun 2025 02:00:39 +0000
Files and hashes: 1: QrTHmiKj_ph-8xkIzUT_gemxrPQ.crl (hash: NyzD6f6v8o3FOMig7oY9RE3jzPsjwG+J1EOfCqdntys=)
2: YAyk3zFlveiyrktJmuMDObuicGM.roa (hash: X7im5gEfQxzJ+2uFiNxaGzJ0zO2RD2TZsOAKFKiJMJs=)
3: umFBgs224fvHmv7UVIkmk-cu2a0.roa (hash: LWAYsABtQECbCV3sDGlu7B0OwEh6Yr4LZp65O/U8FCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:e5:0e:c8:48:e0:e8:37:03:7a:f9:26:9b:c4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42b4c79a22a3fe987ef31908cd44ff81e9b1acf4
Validity
Not Before: Jun 14 02:00:39 2025 GMT
Not After : Jun 15 02:00:39 2025 GMT
Subject: CN=0542781bd14fd49a566f53da974e03401834b139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8c:60:0c:59:cb:aa:b6:8e:85:95:b5:ab:66:
36:96:b7:6a:42:37:e2:60:41:30:1c:ab:e4:d9:88:
02:aa:30:2a:12:50:4f:c9:ca:fc:c8:bb:a4:a4:fd:
1e:08:b1:f5:a8:5c:b0:32:94:c0:f3:ec:a6:fa:d8:
d5:13:12:ca:62:28:46:9d:dd:d0:68:29:1d:3d:2b:
ca:0e:76:95:13:dc:82:06:9d:f1:e4:cd:e2:c3:4c:
48:bf:0b:7d:59:da:64:ef:7c:69:a3:31:b3:62:03:
dd:55:47:03:e8:81:22:fa:6d:eb:17:ad:33:7f:9c:
ef:15:33:a3:51:85:9f:aa:a4:7c:af:e4:b4:b7:3c:
f9:94:e1:e5:17:0c:88:41:cf:da:84:da:bb:5f:90:
a7:dd:51:e2:b8:65:6e:a7:6c:de:d0:75:77:74:98:
bd:24:e2:08:1c:e3:c9:9a:db:f4:c0:5d:a0:78:cc:
9e:d4:b3:2d:7b:77:74:29:b8:3f:3a:78:b6:1e:d1:
5d:06:75:df:df:34:1e:3f:cf:82:80:6a:ff:e8:3f:
3d:8d:29:87:81:2c:8b:b7:5d:9a:c9:80:52:c5:59:
2b:fc:9f:00:69:e5:12:b9:1c:0b:55:90:a6:29:6f:
28:84:1f:ea:fb:1f:50:c2:92:c3:75:fa:45:c7:92:
f7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:42:78:1B:D1:4F:D4:9A:56:6F:53:DA:97:4E:03:40:18:34:B1:39
X509v3 Authority Key Identifier:
keyid:42:B4:C7:9A:22:A3:FE:98:7E:F3:19:08:CD:44:FF:81:E9:B1:AC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:8e:3c:e4:2c:b0:ae:43:9c:0e:68:1a:38:0e:f5:da:5b:af:
4a:9b:da:d9:aa:8f:ea:13:7a:fc:60:4b:ff:ba:c4:c4:90:89:
c8:7d:83:a2:c6:f8:69:77:67:7d:a5:58:f4:44:a3:6b:6e:f7:
37:10:d9:c0:f7:8b:db:42:a3:e0:1c:5d:ac:50:1e:af:16:9a:
05:31:89:35:33:fc:20:8a:8a:94:f9:fd:a9:3e:c3:4d:44:3f:
f8:4f:cd:ca:b9:02:ca:66:60:b0:9d:11:39:8e:e2:2b:7e:fe:
68:8f:ff:35:c0:db:ad:c4:66:52:23:db:a6:71:d5:83:f6:c3:
dd:4e:1f:08:96:1d:e4:7c:7f:56:b3:3a:c8:3b:95:31:cd:86:
f5:fe:4f:33:01:1b:0f:90:ec:46:21:8c:2b:b8:57:32:13:49:
e8:8b:c5:44:38:dd:b4:e0:3e:86:27:56:ef:c5:c5:58:af:40:
7d:db:ec:1a:42:38:30:84:88:4a:47:0b:02:b7:cb:12:cd:8d:
ca:6f:5c:d9:2e:b9:13:29:c7:77:bf:6e:d8:37:76:40:59:59:
0b:a9:8b:d3:56:1e:e7:09:3d:a8:a5:f3:55:13:89:85:12:75:
be:d3:60:a5:c1:8d:5d:ce:0c:4d:33:ef:b0:69:b1:0b:59:44:
1c:b8:fe:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:31:10 2025 by rpki-client