Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
File: Q1QWsigrRTPDUJwY6VfODINryDc.mft (raw, json)
Hash identifier: NENmecm9riLHT/P19z7NboKbo2EgL7GFludOv/aNDZc=
Subject key identifier: 21:4C:9F:49:AD:81:46:BF:24:DE:E0:F6:AC:7C:82:87:EB:D6:67:A4
Authority key identifier: 43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37
Certificate issuer: /CN=435416b2282b4533c3509c18e957ce0c836bc837
Certificate serial: 01976F62E6B39C262D763D051C3DB7983840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
Manifest number: 0D7F
Signing time: Sat 14 Jun 2025 17:00:41 +0000
Manifest this update: Sat 14 Jun 2025 17:00:41 +0000
Manifest next update: Sun 15 Jun 2025 17:00:41 +0000
Files and hashes: 1: Q1QWsigrRTPDUJwY6VfODINryDc.crl (hash: j4qIG/ojbCeLlZRfwAoMDwfJ88iELuC8HtdC3NO8HoY=)
2: Tt9cDnLqp2SOeeoElhH21A1JSmo.roa (hash: g7FEq0smlg0TkkjLfygzTEzTD8KkWT+7GvQHUxPqdJo=)
3: pSYXiKXGXABhmANIG0Y2vhGLRUA.roa (hash: kjXcWabBcy+Nz9B+eKiIbdHIvrnXu/XwD/9ZftdegXw=)
4: uJ1wgWjtfF_PUvxzUj8noSaLQx0.roa (hash: 5K3mYspcTrH8J1dlAJJG2SBHWuIALi8AQG16SYzuq8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:e6:b3:9c:26:2d:76:3d:05:1c:3d:b7:98:38:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435416b2282b4533c3509c18e957ce0c836bc837
Validity
Not Before: Jun 14 17:00:41 2025 GMT
Not After : Jun 15 17:00:41 2025 GMT
Subject: CN=214c9f49ad8146bf24dee0f6ac7c8287ebd667a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d2:3e:fc:8a:0e:00:82:ef:51:36:26:20:20:
62:cd:d1:77:60:32:87:af:fd:aa:40:e5:df:3e:0b:
1a:db:8f:7f:00:5b:6d:9b:3b:07:39:d1:b0:a7:4e:
19:2e:79:c6:09:5d:f9:80:50:a5:19:03:19:fd:ac:
e3:ad:31:8c:80:01:9d:92:f8:fc:06:cc:c0:f1:ec:
5d:01:f9:c7:9b:5c:53:73:9d:44:54:7f:70:bd:55:
0c:bf:f0:8c:a2:72:ad:41:92:80:e7:8a:d5:85:38:
64:d7:ea:5e:bd:23:9e:78:25:a4:29:ec:c0:b9:47:
f4:a2:f2:b4:ee:d3:93:ae:ef:b2:5f:de:f7:8e:02:
bd:02:b4:ba:00:c8:43:1b:04:94:bf:53:66:a9:22:
46:3c:d2:96:07:13:a9:db:99:22:06:14:4c:d1:5e:
4a:70:c6:7b:cf:5e:97:30:13:04:fa:02:51:8b:a6:
b3:c9:04:3b:09:02:35:8a:9f:66:b7:93:c9:b3:82:
d2:88:45:04:7f:fb:f7:02:72:5e:a9:f4:f8:d0:c1:
3a:16:d7:6b:5f:c8:b4:66:14:63:44:20:04:54:65:
23:fc:4a:1c:8e:04:74:29:21:1c:a4:cf:7e:95:e4:
2e:cf:a9:db:41:5a:88:d7:1f:8a:05:8e:26:c2:96:
b5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4C:9F:49:AD:81:46:BF:24:DE:E0:F6:AC:7C:82:87:EB:D6:67:A4
X509v3 Authority Key Identifier:
keyid:43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:ec:04:6d:27:e3:11:88:e4:4a:f6:63:be:3c:71:f1:35:94:
6c:b2:49:4f:e3:f4:6c:01:3a:7a:c9:41:5a:a6:d6:ed:a8:81:
58:18:cc:85:dd:c8:2b:37:29:ba:37:f3:e1:ee:56:a1:39:ce:
f1:16:70:a6:ef:6e:70:db:68:28:5f:29:54:c2:67:8b:fa:2e:
32:ca:10:16:27:5e:2e:76:f8:51:f0:a3:03:07:83:1a:cd:04:
71:55:c2:d1:69:7c:d3:01:02:19:ec:37:c0:7e:94:51:a1:b9:
78:73:13:43:33:c7:af:8b:2e:c0:dc:74:b5:a5:3b:9d:91:d9:
49:d3:89:0a:cb:b1:33:eb:55:d2:0c:5b:22:5b:8b:d1:ca:13:
12:74:c1:2b:97:f8:95:d1:f1:71:93:b6:de:f2:d8:2d:44:1d:
d6:91:aa:55:c8:25:aa:d7:5d:ee:e8:0d:5b:89:83:d8:31:88:
eb:4f:5f:47:65:6a:77:86:b2:67:2e:11:99:9c:bb:dc:6b:6b:
66:68:7d:03:f7:98:d0:d8:2b:6b:2a:e1:95:41:da:84:95:1d:
3e:61:56:45:0c:24:c5:bc:c1:a0:e2:a6:44:66:62:6f:77:39:
c4:13:33:b1:5e:df:ce:65:2f:a8:c4:d0:65:0d:72:d7:3c:96:
8f:e6:bb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:06:49 2025 by rpki-client