Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
File: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft (raw, json)
Hash identifier: VNbf1UZkVXaEz3p62cm9774V1MGhOzXqPBO2j8o04yo=
Subject key identifier: A8:04:19:52:D4:E7:2F:D7:53:90:2E:AA:4E:19:26:44:BA:54:41:87
Authority key identifier: A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
Certificate issuer: /CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Certificate serial: 01976997A088297336BB462571C168AB5F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
Manifest number: 158F
Signing time: Fri 13 Jun 2025 14:00:33 +0000
Manifest this update: Fri 13 Jun 2025 14:00:33 +0000
Manifest next update: Sat 14 Jun 2025 14:00:33 +0000
Files and hashes: 1: lxBXnG-4rYAQUCGbktacJsJcscU.roa (hash: d11nQxBRc+xMvxpKWxAVqfhsk9tCL6Ja3DwWQ6WsmPo=)
2: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl (hash: XmLlsoCb8J6+2YoT1pbTBg766KWg6pmBVPNxh2oGIRM=)
3: u2p9YZ_LXa4YZ8T6-whJAsnzXuE.roa (hash: HvG5oZRfAf2DkODgozvYS7e+xqSp2NYm+qp3YwzyYdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:a0:88:29:73:36:bb:46:25:71:c1:68:ab:5f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Validity
Not Before: Jun 13 14:00:33 2025 GMT
Not After : Jun 14 14:00:33 2025 GMT
Subject: CN=a8041952d4e72fd753902eaa4e192644ba544187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:41:02:9d:ef:af:c3:8c:6a:fe:57:24:9c:36:
25:01:9f:e6:f2:d5:17:7f:6f:47:99:a6:98:23:52:
23:15:7e:96:78:74:02:20:53:da:b4:c4:67:43:30:
67:4f:23:3d:5a:80:a8:f1:45:04:37:5c:31:3d:10:
dd:6a:bd:c7:46:15:76:a6:92:63:dc:4b:b5:6a:77:
e0:46:92:23:51:76:8f:43:69:1e:05:c2:dd:09:e3:
14:d3:d8:5a:1f:21:9b:c3:1e:14:46:1e:95:6d:d7:
bc:f6:6c:eb:0d:f8:a5:10:84:c6:9e:75:10:a3:d6:
95:6c:86:97:73:ad:7a:77:69:9e:ef:6d:ae:6d:94:
17:a5:32:55:3e:bb:e3:a2:79:65:83:23:0c:1a:07:
e3:00:5e:0b:16:7c:66:6e:7a:96:41:f4:47:a8:83:
41:d6:4f:ca:ad:62:ea:8f:60:cf:93:96:bb:b9:7c:
80:a1:76:3c:b9:a1:d9:3f:9f:60:85:68:da:80:86:
f2:58:e4:52:65:95:25:c6:24:b9:34:c8:4f:7d:be:
b4:ce:94:9c:65:85:d1:17:23:fe:97:11:dd:4b:7b:
61:ce:b2:42:dc:ef:0b:ff:ba:12:da:52:57:3d:32:
0b:2e:a3:9f:cc:52:42:5f:bb:47:94:d8:df:c9:27:
1d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:04:19:52:D4:E7:2F:D7:53:90:2E:AA:4E:19:26:44:BA:54:41:87
X509v3 Authority Key Identifier:
keyid:A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:65:55:18:1b:b7:a1:89:bf:1a:72:c6:26:2b:ee:cf:c4:3a:
65:93:e9:9f:bc:87:4d:9f:42:b1:d7:df:16:86:80:73:a3:c6:
2e:20:09:b6:87:13:17:37:46:97:13:5a:b7:97:ab:18:48:09:
6a:9e:9a:ca:2c:60:de:4e:9b:d2:92:02:58:a3:b0:c1:01:0b:
f0:8d:05:8c:30:59:72:72:83:7c:d7:e1:c6:63:ff:32:c6:0f:
b0:83:db:76:39:59:6a:52:77:2b:cf:02:ce:19:73:db:51:a1:
72:27:0b:a5:10:25:4f:68:0b:ee:11:7a:68:8f:1d:20:1c:f3:
1e:a0:c0:76:ef:70:15:2a:cd:50:b0:ab:31:0e:7d:52:ae:af:
a6:e0:1c:e2:9f:bc:7e:0a:4d:f4:23:54:1a:ec:f2:38:db:3e:
f1:6a:76:f2:95:f6:29:06:da:bb:1c:ae:37:8e:41:0b:d9:a9:
7a:4a:19:6a:a5:72:7e:6d:74:61:1d:c4:a1:81:c9:20:c4:8e:
b0:15:62:15:52:2d:4f:a5:3f:3c:a4:7c:33:7b:83:b8:61:39:
35:8a:f9:a0:5d:55:00:83:b9:46:06:da:65:aa:8c:ed:e6:ba:
18:22:ba:3a:95:16:9e:79:cb:76:81:01:2b:a6:7c:be:39:49:
75:57:42:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:07:05 2025 by rpki-client