Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft
File: Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft (raw, json)
Hash identifier: sZ50YlR5FFTgl+AqJB3z+kvsceyDatoh6CrFVsw99Uk=
Subject key identifier: 78:CB:6C:24:4C:9E:0B:C2:CD:E4:F9:FF:D4:55:11:B9:EF:DA:79:AA
Authority key identifier: 43:D5:18:D7:30:77:88:FC:A3:89:18:78:49:0E:4F:32:D9:AA:F6:AF
Certificate issuer: /CN=43d518d7307788fca3891878490e4f32d9aaf6af
Certificate serial: 01976D748FE16951183AE8D5DB49D150990F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft
Manifest number: 0FD9
Signing time: Sat 14 Jun 2025 08:00:44 +0000
Manifest this update: Sat 14 Jun 2025 08:00:44 +0000
Manifest next update: Sun 15 Jun 2025 08:00:44 +0000
Files and hashes: 1: Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.crl (hash: 2qmG4A9sNZBf4+reUOk7AaBL0ChWGnU27QYELsrNsmI=)
2: hOsUXVARCl8NqYdv3cI6OIcfqwU.roa (hash: w1gjvrKQRUt3hmiD9OYkOr05DsegCS6tRj5zStTTlPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:8f:e1:69:51:18:3a:e8:d5:db:49:d1:50:99:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d518d7307788fca3891878490e4f32d9aaf6af
Validity
Not Before: Jun 14 08:00:44 2025 GMT
Not After : Jun 15 08:00:44 2025 GMT
Subject: CN=78cb6c244c9e0bc2cde4f9ffd45511b9efda79aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2c:f6:b0:42:72:ba:c1:25:6e:db:86:0c:1d:
c4:d4:19:83:b1:39:a7:a5:fe:16:a5:93:c8:c9:a7:
ae:05:47:24:54:58:f8:b2:b5:5e:de:a4:4c:de:14:
0c:92:dd:59:a7:74:7a:9b:03:b2:df:2c:49:ee:3b:
94:dd:af:d4:1c:c8:f8:62:c9:50:da:80:df:c6:1f:
b6:98:7b:08:57:56:3a:94:31:04:52:d0:3f:65:a0:
17:79:90:89:4d:79:56:10:ad:14:2a:ff:e7:e9:31:
89:e9:4f:e4:aa:3f:88:71:14:00:f9:0c:ac:6f:5c:
54:9f:8f:21:06:6b:cc:bf:b8:11:96:16:57:ba:2f:
17:59:51:58:04:c7:03:dc:21:4b:8a:db:67:eb:5f:
37:82:49:7d:e1:20:c5:0a:df:d4:28:d7:9a:b4:26:
41:b8:8c:33:7a:5e:24:e5:d2:2a:46:9a:82:87:f7:
fc:fa:3c:02:70:0c:83:56:d2:1a:7a:71:e5:58:a0:
3b:54:57:ca:67:ad:bc:78:44:16:1e:ac:cd:3b:b4:
b5:9d:db:0b:c9:25:d7:29:b0:ca:7a:b2:97:06:5e:
8d:b7:fc:2a:c7:e6:72:e4:79:45:7d:07:0e:d8:09:
92:8e:72:01:53:6d:89:b4:45:66:40:9b:50:8d:51:
50:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:CB:6C:24:4C:9E:0B:C2:CD:E4:F9:FF:D4:55:11:B9:EF:DA:79:AA
X509v3 Authority Key Identifier:
keyid:43:D5:18:D7:30:77:88:FC:A3:89:18:78:49:0E:4F:32:D9:AA:F6:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:5d:ed:86:91:d4:b7:55:2f:ac:d5:52:79:63:aa:ef:5c:37:
0d:f7:44:ae:4b:46:f8:d2:10:e7:d1:99:8a:91:ea:3b:fd:d1:
f1:6f:37:60:39:dd:37:ed:04:e3:73:2c:a9:1a:7a:68:43:1f:
c1:48:59:de:2e:77:b9:51:74:a6:02:2a:6e:5a:7c:cb:30:c8:
8d:f0:5b:34:bd:1d:56:f3:72:d2:9f:de:c9:34:fc:1a:6b:86:
0d:55:b4:82:b1:cc:34:e5:6e:63:b0:60:e8:d7:74:d0:3a:77:
78:a2:23:12:9f:c5:c7:04:17:b6:5a:24:05:d3:fe:03:af:ce:
fa:8e:3a:e2:b9:f4:de:a3:a2:c4:ac:ba:c8:e2:7b:d4:29:3a:
7e:91:fd:c8:69:8d:b1:ac:43:09:4c:8f:2d:73:ff:30:6c:25:
92:82:eb:16:c5:b0:a0:8d:99:eb:11:73:26:54:d9:84:55:a0:
90:04:6b:58:29:f5:6f:65:e4:69:db:6a:0f:ba:62:59:03:c9:
4a:c9:47:d7:ca:80:40:de:ac:63:2e:d5:bd:b2:4d:1c:46:5c:
3c:2b:50:da:eb:fa:8f:bf:bf:e4:2e:fe:08:81:2e:63:a3:a0:
ed:78:1c:d7:26:74:fb:48:a5:7e:5a:91:0f:c9:e3:9d:ee:2a:
e0:6b:27:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:52:40 2025 by rpki-client