Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
File: Qd0c5O65L_U7YziS_UV7AR4RcfE.mft (raw, json)
Hash identifier: Nw+KfMLE0XKkHUDHpG4dhKG/xfEn3RC8m4xiDDMuiSA=
Subject key identifier: 3D:61:26:8F:BB:E0:3F:DB:6F:B1:9B:09:CB:38:C6:0D:F1:F1:C6:5E
Authority key identifier: 41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
Certificate issuer: /CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Certificate serial: 01976F998AA40E84FE8B817233CF70F5F217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
Manifest number: 0495
Signing time: Sat 14 Jun 2025 18:00:22 +0000
Manifest this update: Sat 14 Jun 2025 18:00:22 +0000
Manifest next update: Sun 15 Jun 2025 18:00:22 +0000
Files and hashes: 1: 1x79pZoohAevF-wAltNrdmaEw7A.roa (hash: X95oyzYUBEcZ4ziZ4mVGblrLPHO/qZ2hl0H2DCGm0kU=)
2: Qd0c5O65L_U7YziS_UV7AR4RcfE.crl (hash: 666vukhgn774LHd50CBqnI703Duo50MOSrFq/Fsm5dw=)
3: a-EnC88GUWKn77zVAW3AGZhegs8.roa (hash: JLIYrbM+wHbAi9mK0qlem6X9cf53KA+YJn1W82FNUXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:8a:a4:0e:84:fe:8b:81:72:33:cf:70:f5:f2:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Validity
Not Before: Jun 14 18:00:22 2025 GMT
Not After : Jun 15 18:00:22 2025 GMT
Subject: CN=3d61268fbbe03fdb6fb19b09cb38c60df1f1c65e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:89:b1:95:a7:3b:cb:c8:37:05:e1:4d:b4:93:
67:50:74:23:4a:c8:df:12:b5:27:b6:eb:27:c4:e0:
7d:ad:1d:1b:3c:3e:8f:70:8f:6a:de:62:d1:a6:0a:
a0:fe:83:eb:da:92:11:62:0a:13:6d:f8:45:c5:ca:
27:11:3b:96:ed:4b:ef:2a:b4:ff:cf:9a:e6:d8:df:
75:8e:3d:0c:69:62:4d:51:ac:e6:41:2d:71:9f:9f:
d3:3b:b0:ec:a1:44:d5:25:14:43:2b:d8:8e:4c:ff:
ef:96:d6:41:9d:4c:aa:76:04:e9:98:e8:2a:ba:80:
e0:92:87:42:23:a2:de:e8:6a:02:b7:8e:98:54:a0:
2f:d9:b5:40:a3:66:10:53:17:cd:08:7b:11:e1:18:
33:5b:e1:6b:19:70:c2:b2:3f:ef:bd:28:47:59:81:
89:c3:ed:47:38:11:05:8c:96:4b:6f:65:2b:96:c5:
10:22:15:56:b1:d1:08:28:61:e1:35:a5:75:a6:16:
21:ba:42:5e:b5:2d:6e:cf:2b:96:48:1c:b2:77:ad:
f8:3a:37:8a:82:e7:12:22:48:cd:d6:40:c3:2b:20:
95:cd:f5:bf:f8:5d:4d:b5:5c:55:30:5d:0a:c1:be:
4f:60:18:4a:99:3f:ed:5d:ef:07:36:82:fe:59:9b:
2a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:61:26:8F:BB:E0:3F:DB:6F:B1:9B:09:CB:38:C6:0D:F1:F1:C6:5E
X509v3 Authority Key Identifier:
keyid:41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:43:3d:d9:db:1d:49:c8:6a:1c:5d:2b:04:6e:fe:80:4c:77:
9b:31:8f:c6:aa:b5:4f:62:ca:a4:48:ef:16:e9:13:2d:42:0f:
5f:e6:d1:5a:b2:9b:b0:2c:68:2a:3f:e4:bd:ac:bb:75:01:8c:
7e:b2:fb:9d:52:60:20:84:24:1e:c8:12:f4:a2:48:f6:52:7c:
a8:80:b6:49:30:71:22:12:00:30:08:d7:96:26:a4:bc:99:a5:
31:22:27:69:00:aa:40:fd:ed:4d:40:cf:16:a3:ac:21:12:9c:
64:8d:03:ac:96:01:9b:de:1d:47:41:ea:9f:77:8e:cc:38:80:
0d:9a:61:6c:06:36:44:35:b8:74:26:dd:e3:03:82:ee:52:fc:
38:c2:a2:cb:3c:7b:21:2b:7b:39:47:cf:3d:80:11:4c:f5:7c:
2c:d2:09:4f:23:9d:ea:54:0c:6f:10:f3:bc:a8:fb:5e:f3:a8:
42:10:f2:67:33:2e:27:c1:b0:ae:67:e9:f6:4c:c2:b6:cc:ee:
bf:e7:a1:fc:7b:62:47:ad:7e:e8:69:78:fd:51:3f:63:cb:a8:
6c:a3:f9:d0:32:7c:89:ce:e3:1b:de:d1:00:1e:a3:a0:6a:2e:
0c:f9:7c:ac:57:66:2f:bf:5c:a7:d4:f1:bd:bd:75:ee:b5:24:
0d:cd:df:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:09:52 2025 by rpki-client