Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
File: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft (raw, json)
Hash identifier: zU1Mau1SadEIkuwQrJBU6fh5JleUf49R8LPMnOxxJV4=
Subject key identifier: 25:3E:08:F0:6C:68:AE:9D:C2:7E:B7:FB:04:D8:C8:A4:98:04:85:12
Authority key identifier: 43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
Certificate issuer: /CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Certificate serial: 01976F2C92EF886D94C5E2A92102401CC203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
Manifest number: 15A3
Signing time: Sat 14 Jun 2025 16:01:21 +0000
Manifest this update: Sat 14 Jun 2025 16:01:21 +0000
Manifest next update: Sun 15 Jun 2025 16:01:21 +0000
Files and hashes: 1: 8it1mnGsBB_0bpcwXcQ7puN3Hok.roa (hash: DK3oH31M5a3fOw5ohHJX58zCY8Qd9F+oTkaNS/1tWA8=)
2: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl (hash: JA7bA8ODYBL/2EJKJdyauRkMIEAWU9aWnNw67PCgtkY=)
3: bOyfi-z2wqC5OBTk4v100ve7CxI.roa (hash: WiyMw0UdlKQAlB0ieoJy4RAqYir7UCqclb4nu/UNQCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:92:ef:88:6d:94:c5:e2:a9:21:02:40:1c:c2:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Validity
Not Before: Jun 14 16:01:21 2025 GMT
Not After : Jun 15 16:01:21 2025 GMT
Subject: CN=253e08f06c68ae9dc27eb7fb04d8c8a498048512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c8:e2:79:aa:d0:60:a1:fd:4e:62:21:85:c8:
7c:98:d9:24:a9:8e:44:f4:d5:ac:10:8d:fe:5f:b3:
eb:69:bf:c0:67:30:8f:cb:f4:ce:cb:58:5c:f5:26:
25:fe:46:6e:bf:12:2e:2a:3e:5a:ba:7e:22:89:0c:
ea:8d:f5:65:20:d0:56:86:94:f3:22:1c:2c:85:45:
1c:1e:9c:94:92:7b:17:3a:ba:ec:6b:5d:48:d7:79:
2b:e2:be:73:61:6e:42:82:9a:bd:bf:0d:63:d4:6f:
3d:e4:b6:94:1d:cc:da:d6:7f:ca:76:e3:5b:9e:f0:
ab:2c:92:56:10:d0:55:a4:c0:ce:3f:5e:77:2b:0a:
c4:b0:45:e0:3d:4e:0b:c2:3a:74:f6:af:f8:5b:0d:
12:4a:78:d5:57:86:38:44:fd:d2:7f:c9:2c:7b:c3:
67:c2:8e:fb:c7:ce:b5:d9:96:bb:93:a1:84:49:39:
96:76:35:6a:54:50:5d:2c:3f:3c:86:36:23:b7:3a:
53:e9:0d:98:8f:66:7a:ef:7b:68:28:f2:1a:a5:9d:
68:61:6c:b7:d0:90:8b:10:29:f5:ab:a8:e3:bd:ce:
d8:a2:1e:2a:32:22:f2:af:ba:d5:b0:36:79:e0:a2:
43:04:eb:ef:e4:8f:8e:a4:63:0b:82:ea:35:ab:f0:
43:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3E:08:F0:6C:68:AE:9D:C2:7E:B7:FB:04:D8:C8:A4:98:04:85:12
X509v3 Authority Key Identifier:
keyid:43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:8b:83:e6:29:2e:9c:07:ce:7b:e4:40:47:3f:9f:8b:f8:84:
7b:c2:3d:fc:21:ff:d5:1d:ed:f8:3a:9b:8d:73:17:92:29:5a:
3b:aa:75:d3:a0:fa:d1:f0:1b:d7:8b:9f:de:15:9d:60:39:86:
44:79:aa:7a:98:e0:bd:84:24:b8:0e:d7:67:e8:b4:61:3f:0d:
d0:8e:bd:6f:c2:ae:6a:6f:8a:ab:23:fb:a8:21:fb:aa:52:a6:
3f:d8:43:59:60:c0:27:59:44:35:f7:bf:99:39:66:ae:b9:9f:
b4:4d:af:dd:93:d1:8b:15:34:f6:cd:83:c2:1a:24:85:72:95:
91:69:8e:bb:e2:1a:50:31:3f:14:aa:1b:ee:cd:9c:ad:86:d0:
fb:7c:63:1a:8d:66:a6:df:30:c9:e0:6e:db:0d:43:e9:4f:c5:
a8:4d:73:c6:11:2c:10:68:af:00:48:2e:b7:36:c6:52:35:1c:
70:b6:f3:3b:05:55:29:aa:bf:3a:c1:1d:01:b8:7a:d8:3e:fc:
ef:64:81:1c:9a:ef:19:68:52:b0:76:8c:58:1c:8c:a6:7e:a4:
5f:02:20:ac:b2:3e:ea:87:07:8c:c6:f2:fb:79:32:4b:70:80:
d7:1b:80:9d:91:63:3b:d1:38:ea:10:43:3b:40:d5:82:fc:65:
f6:d3:f8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:00:10 2025 by rpki-client