Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
File: QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft (raw, json)
Hash identifier: /EFI5F634ddSB7UQ66cuGGjppkO5838sl1re2aEYae4=
Subject key identifier: 19:B8:1A:19:98:0D:D1:8E:18:69:71:F2:5D:70:6D:A1:6A:48:9F:C0
Authority key identifier: 41:8D:F8:68:F7:D9:E9:8D:4F:D4:1E:6D:A5:97:A2:83:C9:14:1B:44
Certificate issuer: /CN=418df868f7d9e98d4fd41e6da597a283c9141b44
Certificate serial: 01976DABE3D5F19880B4984AF9F747C91C7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
Manifest number: 1593
Signing time: Sat 14 Jun 2025 09:01:10 +0000
Manifest this update: Sat 14 Jun 2025 09:01:10 +0000
Manifest next update: Sun 15 Jun 2025 09:01:10 +0000
Files and hashes: 1: NrBghBDxVUP3b8K-s4QfPajtoEw.roa (hash: PXmrD91Lu77kd9R7RmMEPIR9q62nZX3KSQVZITYjO7o=)
2: QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl (hash: Eqg/XS95LL4T4ZrBzlQ2lcg60VxvtyQy/ufPKcqZ0lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:e3:d5:f1:98:80:b4:98:4a:f9:f7:47:c9:1c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=418df868f7d9e98d4fd41e6da597a283c9141b44
Validity
Not Before: Jun 14 09:01:10 2025 GMT
Not After : Jun 15 09:01:10 2025 GMT
Subject: CN=19b81a19980dd18e186971f25d706da16a489fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2f:16:d7:57:98:04:db:36:e2:d7:79:12:a7:
7b:d5:fd:c4:3a:45:1d:27:9b:2f:2c:36:06:83:3f:
56:65:99:91:e2:0d:10:1c:b5:ed:ac:67:e0:38:34:
ae:09:c2:cb:b6:26:fd:b1:16:05:e7:f1:07:46:54:
1b:40:ec:3c:a8:07:6a:c8:c0:66:81:84:5d:22:0c:
ce:14:5b:e4:83:de:31:9c:33:23:bd:c8:09:b3:40:
ff:1a:d0:c2:4f:16:1c:cd:5b:4b:a6:3c:71:b6:e5:
bf:99:5e:10:5f:c3:29:0e:e4:f3:bd:3a:a8:6d:58:
46:64:40:42:19:2b:67:8d:b7:f4:5f:d2:99:3d:9c:
3c:4a:88:af:b2:50:7c:89:37:13:5f:ec:ab:a1:33:
a0:45:d1:82:9d:c2:84:02:34:33:0d:40:34:86:8c:
1f:27:55:13:89:fe:73:29:f9:8f:d6:61:5d:46:cc:
56:c0:ab:71:d9:32:86:8a:77:fa:0f:25:ac:25:86:
3d:e6:e2:8c:4c:de:52:bb:33:56:ca:10:a0:c9:58:
81:6f:4e:4f:6b:7d:9c:6f:45:39:bc:26:05:64:a1:
2e:c8:5b:f9:19:00:84:8b:8f:1e:3e:b0:9b:b3:ea:
48:a6:1a:27:98:a1:87:3d:f4:7e:87:e3:bc:84:34:
0b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B8:1A:19:98:0D:D1:8E:18:69:71:F2:5D:70:6D:A1:6A:48:9F:C0
X509v3 Authority Key Identifier:
keyid:41:8D:F8:68:F7:D9:E9:8D:4F:D4:1E:6D:A5:97:A2:83:C9:14:1B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:22:e9:fa:00:88:33:69:58:d9:17:fd:02:a6:4e:24:e7:17:
c9:1e:c5:5f:7b:e8:38:ec:42:c7:2b:5f:bc:1f:6a:b2:26:c9:
4b:b8:67:88:00:d4:0d:be:68:b1:4f:e0:33:34:17:ef:26:0f:
e5:8a:3f:6d:10:b8:03:8b:54:5f:a2:b3:57:3d:4f:c0:e5:27:
31:77:7e:c7:01:37:c4:18:fe:84:36:ae:53:a7:62:1e:c1:3f:
ed:61:e8:f5:18:70:f7:8b:8a:a5:2c:d4:1d:00:0b:08:8a:58:
fb:1e:8e:1e:0d:5b:59:a4:ee:ad:ce:00:3e:9a:a1:38:5d:52:
18:6b:a1:0b:af:dc:87:a2:e5:bc:32:57:1f:5b:49:dd:4c:7e:
81:09:da:c6:1c:1f:d0:82:4e:6e:c9:33:d1:cd:26:d0:4a:d1:
15:60:b8:a9:c3:29:f7:e5:58:b6:b7:7f:d6:7f:90:76:7c:04:
97:22:c9:9e:88:ea:79:47:7d:ba:e3:95:18:2c:57:d6:b2:95:
49:d8:64:d1:2f:ce:cb:5d:3a:ed:09:57:8b:6a:3f:89:f4:2b:
32:fd:ed:9d:22:ce:5c:b3:49:7d:4d:96:0b:20:25:9b:b7:9f:
14:e0:e9:6d:5c:8e:e9:79:db:06:86:00:77:cc:2e:2e:b6:d0:
aa:58:45:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:02:17 2025 by rpki-client