Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
File: qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft (raw, json)
Hash identifier: sC5h5DpwHFpzpiXFdiOFDXhVQWkCqrM6XTXuhDjNTrw=
Subject key identifier: 15:32:70:CF:01:7F:27:8B:FF:A1:E0:A1:D6:07:0B:B2:C5:81:F6:5A
Authority key identifier: A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47
Certificate issuer: /CN=a98eebed9753f580bea75b352e706325a18d1447
Certificate serial: 01976D3E39646AD664717488AF477260E27E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 07:01:23 +0000
Manifest this update: Sat 14 Jun 2025 07:01:23 +0000
Manifest next update: Sun 15 Jun 2025 07:01:23 +0000
Files and hashes: 1: 1-W8soB7j9APk25v0dLdeJYYGd64.roa (hash: XIj90J/o3h0TEBJj2DW5RTPwW3YKa0Pa3O9Mz8MU5Ho=)
2: qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl (hash: yD/95C1m0gCWRxNfMxU9pT402nykBM5xtNSO5zQzluo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:39:64:6a:d6:64:71:74:88:af:47:72:60:e2:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98eebed9753f580bea75b352e706325a18d1447
Validity
Not Before: Jun 14 07:01:23 2025 GMT
Not After : Jun 15 07:01:23 2025 GMT
Subject: CN=153270cf017f278bffa1e0a1d6070bb2c581f65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6e:a7:d0:56:e3:ce:4a:a1:3f:cd:f4:1c:7b:
af:c9:83:79:96:31:39:bd:56:4c:74:5e:fd:58:25:
5d:38:90:01:cb:9e:29:c5:b8:86:41:9d:ae:19:b8:
f4:44:3b:f0:b4:60:c9:37:87:00:10:80:32:f5:21:
ae:7a:37:4e:7c:e3:26:6a:58:0a:54:58:c6:2d:17:
53:9e:ca:04:3d:8b:30:54:7e:86:ed:f1:a4:38:83:
ac:88:3a:52:e3:f2:41:79:e1:c7:9b:72:69:99:40:
d8:a1:bc:4d:c7:0d:78:94:5d:b4:4e:aa:6c:7a:b1:
61:82:42:19:5e:a5:e2:ac:dd:59:f8:72:68:e3:e6:
42:95:59:cd:06:0f:c6:8d:1f:96:e1:fb:a4:37:e7:
f8:93:13:9b:ae:8d:29:84:b9:5e:e8:1e:92:18:2b:
1c:0c:9d:b1:64:96:31:b7:05:0f:d8:27:de:80:13:
15:7f:c0:8a:95:b9:46:8b:74:df:17:d8:9a:df:1d:
52:4c:9d:28:c4:95:40:83:14:53:de:58:c3:d5:2e:
c7:cb:cf:57:01:86:dc:d0:16:f1:24:ba:f1:a6:74:
b5:28:9f:f8:7b:05:66:ae:f1:e8:1c:90:13:19:d8:
4c:8d:4f:d7:32:cd:b3:36:c5:94:c1:d0:3a:4d:42:
69:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:32:70:CF:01:7F:27:8B:FF:A1:E0:A1:D6:07:0B:B2:C5:81:F6:5A
X509v3 Authority Key Identifier:
keyid:A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:19:bc:6b:29:25:7f:20:fc:b0:3b:4f:b7:4c:9c:86:ef:43:
78:8b:8b:51:ff:49:eb:40:de:20:a9:07:f6:54:fa:be:7c:52:
ea:a7:52:40:fd:d4:de:11:ce:59:c2:8b:9c:72:5c:e4:2f:6c:
f6:f2:0e:50:9d:a9:14:12:37:8f:ac:f9:2e:bf:09:05:ce:f8:
d6:14:39:51:fc:8c:4e:2c:1e:1e:c2:1d:be:ae:ea:6e:7f:fb:
ce:16:47:87:b3:6c:59:a6:6a:a2:08:99:4f:28:e0:c1:61:da:
41:5b:32:cf:bb:92:88:da:53:4d:87:97:ce:49:d9:17:72:fa:
c2:ae:c1:33:5a:be:8d:a4:6f:dd:14:3a:4d:61:41:6e:c2:9e:
10:86:97:e6:4f:84:5c:65:54:89:cb:e3:1a:6a:38:3f:c6:e4:
4a:5e:9e:41:34:cb:85:2e:ae:6c:9e:a1:77:5c:d7:00:d6:0e:
ff:d6:c8:4a:d8:cb:ca:48:36:c3:c8:b9:46:e8:33:37:fe:55:
2c:c5:c2:f1:53:5d:a3:46:67:9e:fd:86:19:80:e3:78:2d:6f:
4c:ae:fc:d1:a2:57:99:ef:f2:b2:ab:4c:23:bd:90:93:d6:43:
dd:b6:51:bc:f6:19:8f:66:a1:4a:7a:c0:2e:b6:41:44:7d:b6:
3a:ed:22:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:16:30 2025 by rpki-client