Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft
File: rQt55LWcX82kk6IK0Y6UVYWdAxs.mft (raw, json)
Hash identifier: piOGsgZ0Bp85JbG2WbA2OOJFP2A9Hew0Pa5kjycIrbo=
Subject key identifier: F9:5F:31:AB:95:8C:EB:F1:CB:CE:60:95:67:B6:F4:1D:57:1C:7E:7A
Authority key identifier: AD:0B:79:E4:B5:9C:5F:CD:A4:93:A2:0A:D1:8E:94:55:85:9D:03:1B
Certificate issuer: /CN=ad0b79e4b59c5fcda493a20ad18e9455859d031b
Certificate serial: 01977B30A62DE184F600D7ACF2EE942E6595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQt55LWcX82kk6IK0Y6UVYWdAxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft
Manifest number: 1599
Signing time: Tue 17 Jun 2025 00:01:15 +0000
Manifest this update: Tue 17 Jun 2025 00:01:15 +0000
Manifest next update: Wed 18 Jun 2025 00:01:15 +0000
Files and hashes: 1: rQt55LWcX82kk6IK0Y6UVYWdAxs.crl (hash: KgWgg7I2EeV3YU/xzFcddyM+uyEF60EaTyVhMZsbQqk=)
2: u-TIzzCbIsSdGOd1CtfNEcgemko.roa (hash: DN7JFzlpz7Go6ldmAhoYI+Qwq1vNoGjP9zoXjX6dqwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQt55LWcX82kk6IK0Y6UVYWdAxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:30:a6:2d:e1:84:f6:00:d7:ac:f2:ee:94:2e:65:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0b79e4b59c5fcda493a20ad18e9455859d031b
Validity
Not Before: Jun 17 00:01:15 2025 GMT
Not After : Jun 18 00:01:15 2025 GMT
Subject: CN=f95f31ab958cebf1cbce609567b6f41d571c7e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:07:d2:71:be:9c:ed:cb:29:05:ca:05:94:94:
6d:e5:2d:18:db:fe:91:c5:6a:e1:76:12:10:1c:37:
92:4d:9d:08:9e:08:a1:3e:77:8c:0b:72:62:84:5c:
75:d9:1b:cf:1f:65:9a:e1:39:ca:db:7d:be:95:14:
e3:00:7f:e9:86:2c:d0:da:1d:cd:de:7d:b8:d0:5b:
f1:c1:2e:7c:a0:35:75:38:bd:90:df:94:e9:fb:23:
ce:87:3c:cc:95:a8:ad:a2:c1:c7:5d:ad:b3:5c:c5:
ec:02:8e:d0:99:ef:ef:43:81:c7:2f:86:83:12:c3:
bc:d4:22:95:52:fe:d7:e6:60:d1:af:b6:72:37:bb:
8e:1e:4b:a0:04:87:5e:37:11:c7:e1:a3:70:2a:08:
47:01:18:c2:98:f9:d1:e7:2d:10:8a:42:6a:e7:f2:
08:7c:ca:e6:5c:ab:0d:c4:3d:08:11:25:49:f6:49:
ba:6b:dc:16:ee:cf:21:63:7b:cc:26:7e:a5:f7:3e:
dd:57:fc:10:08:65:f7:ed:29:12:d1:11:69:f1:ca:
39:b7:de:b1:42:a5:b2:a6:ab:13:80:80:f2:5d:29:
54:15:7d:34:1f:6c:c8:bc:09:ac:a8:35:db:11:7e:
28:0d:fb:36:aa:8f:f9:3d:93:57:8e:20:93:bb:82:
24:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5F:31:AB:95:8C:EB:F1:CB:CE:60:95:67:B6:F4:1D:57:1C:7E:7A
X509v3 Authority Key Identifier:
keyid:AD:0B:79:E4:B5:9C:5F:CD:A4:93:A2:0A:D1:8E:94:55:85:9D:03:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQt55LWcX82kk6IK0Y6UVYWdAxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:33:dd:2e:eb:7b:f5:4c:ac:88:29:fc:bb:67:c8:52:e9:22:
ad:86:b3:a3:59:89:6d:b7:a9:55:7e:78:24:6d:86:74:37:f7:
e7:2c:2e:55:ec:ad:61:40:33:0e:b9:29:70:2b:4d:9e:e1:9f:
1a:4f:49:bf:8e:c2:2a:db:7c:b8:8b:3c:0a:6c:c1:92:0f:78:
57:05:6a:4d:b5:83:b2:4e:7c:7e:73:82:a6:f0:1f:ad:92:bb:
42:dc:c3:a8:1b:f6:75:06:b7:38:6a:c1:96:15:eb:3b:e9:57:
ee:a2:81:8f:36:83:6b:4d:36:e3:8c:74:17:00:cf:27:aa:6d:
c8:51:ea:f0:f3:6f:75:ea:00:5b:70:20:51:09:5c:44:34:67:
8f:ff:3e:dc:2c:b7:50:4c:d2:80:01:9b:56:d4:b4:9e:ce:26:
da:a2:40:4d:a5:49:08:c6:62:b6:5e:3c:0e:6c:c6:c0:23:03:
b4:98:72:fe:11:62:eb:d6:91:27:cd:53:29:8e:59:06:c8:13:
29:85:97:93:67:e8:55:a8:30:82:d9:f0:43:71:06:26:d5:64:
ad:d3:87:b3:88:d1:20:9e:11:db:97:71:24:43:f7:8d:f6:d7:
e3:b2:98:6d:c3:d2:40:eb:f6:06:7d:1f:d1:42:44:ce:47:31:
50:50:bf:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 08:19:03 2025 by rpki-client