Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.mft
File: QYHCLrezLZAdElcA4UDrYAncxto.mft (raw, json)
Hash identifier: P/mhrXnPfz4Wg2yvUGA580Ask8rHNDSebTBkNILucBU=
Subject key identifier: DA:4F:0F:E8:88:1B:56:23:AB:90:6C:1E:9A:32:83:20:7D:84:1D:F4
Authority key identifier: 41:81:C2:2E:B7:B3:2D:90:1D:12:57:00:E1:40:EB:60:09:DC:C6:DA
Certificate issuer: /CN=4181c22eb7b32d901d125700e140eb6009dcc6da
Certificate serial: 01976C2B4A9587E751A8DFE7C83D97DD5160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QYHCLrezLZAdElcA4UDrYAncxto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.mft
Manifest number: 1593
Signing time: Sat 14 Jun 2025 02:01:05 +0000
Manifest this update: Sat 14 Jun 2025 02:01:05 +0000
Manifest next update: Sun 15 Jun 2025 02:01:05 +0000
Files and hashes: 1: HitPQyHhpEoVidVOwqr2ddK23LE.roa (hash: UNtTyCfc7GR1gxgfjG0Y/XLw7gBd/DnSW8H0cz2SvrM=)
2: QYHCLrezLZAdElcA4UDrYAncxto.crl (hash: 89x81lO9qluOtDJH1+iacQP+7TEAbQtbLhKX4zdv358=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.mft
rsync://rpki.ripe.net/repository/DEFAULT/QYHCLrezLZAdElcA4UDrYAncxto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:4a:95:87:e7:51:a8:df:e7:c8:3d:97:dd:51:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4181c22eb7b32d901d125700e140eb6009dcc6da
Validity
Not Before: Jun 14 02:01:05 2025 GMT
Not After : Jun 15 02:01:05 2025 GMT
Subject: CN=da4f0fe8881b5623ab906c1e9a3283207d841df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d1:0b:c4:3b:16:99:3a:08:f8:a3:07:b2:fd:
d2:90:2c:e6:02:96:92:67:ae:da:6e:c9:3e:45:f7:
10:ee:00:14:98:a1:f5:e4:a0:b0:c1:c7:8e:37:68:
ef:be:84:f0:bc:89:67:bc:21:5a:e8:b8:79:3b:79:
4c:ff:8d:b3:d9:36:ff:a8:5a:0e:6e:5a:9c:46:e6:
a1:af:fc:8c:96:01:7b:56:76:7c:22:d0:e4:59:b4:
a8:27:79:cb:21:2a:68:d9:af:20:ef:0b:5c:6d:9f:
cc:0a:c8:0a:a5:8f:07:39:72:86:d7:e7:b5:e2:34:
1d:0c:33:14:8a:34:99:69:f9:96:51:5a:42:f6:43:
2e:4a:c2:12:57:7c:d1:57:68:2d:48:1d:11:1c:8c:
39:1b:4b:b8:b7:fc:07:8c:f8:70:27:cb:58:d8:8d:
4b:49:82:c3:f0:aa:13:d3:c3:0c:57:e5:b9:0f:c5:
e8:95:73:85:87:73:11:dd:35:ec:17:54:eb:16:aa:
14:ab:4a:b4:36:c3:60:f5:f4:3e:dd:17:ae:8d:38:
66:84:ab:0f:2e:71:96:c7:55:b6:35:1f:25:36:18:
5f:8c:30:1c:8b:d6:03:81:8c:8b:c0:9a:50:08:d3:
f1:e2:51:3b:a9:83:82:3d:96:bf:44:b6:90:80:99:
d7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4F:0F:E8:88:1B:56:23:AB:90:6C:1E:9A:32:83:20:7D:84:1D:F4
X509v3 Authority Key Identifier:
keyid:41:81:C2:2E:B7:B3:2D:90:1D:12:57:00:E1:40:EB:60:09:DC:C6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYHCLrezLZAdElcA4UDrYAncxto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c7:4c:d1:ed:c0:e8:ab:4b:b6:ac:0d:17:10:e1:6d:2c:25:
95:17:2b:53:03:a1:39:f7:85:10:a2:38:3b:87:3d:21:15:04:
ac:a4:ec:59:13:43:bb:f8:a3:43:d1:73:e5:26:a3:cd:7f:cc:
f8:df:05:36:ce:d3:54:7f:c0:6f:16:56:76:4b:06:ba:ba:55:
ff:8f:ee:61:e2:fa:40:75:b5:0e:b2:8a:9f:41:15:c2:ff:5a:
6e:60:53:49:bc:cd:5f:b3:6a:e9:13:4e:6a:e7:86:12:f3:06:
53:40:cc:21:c2:37:c4:45:2d:a2:11:f8:c0:cf:59:3a:b1:a3:
3a:7d:6e:eb:93:5d:83:69:1e:f6:92:8b:68:7a:6f:36:a1:b7:
f8:80:ec:b7:03:f1:05:9d:49:92:a0:6c:00:3a:35:24:24:6e:
47:41:4b:c0:54:f9:e1:40:78:58:e2:12:ba:90:42:8f:55:1e:
49:82:56:3d:b7:23:32:0d:25:40:b9:e2:e1:f4:7d:09:e5:2c:
cc:4c:d5:7b:06:3c:35:28:04:9f:60:aa:e7:67:34:f1:85:55:
d6:5a:91:a9:eb:a9:84:72:33:21:6d:89:ec:2e:37:76:ec:ac:
22:c2:53:7e:74:f5:1e:b1:c9:00:b4:34:11:92:24:91:59:46:
20:0f:89:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:06:26 2025 by rpki-client