Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
File: qC-5s0GMRYzbxs_WhFFL4krQw8k.mft (raw, json)
Hash identifier: 0dNdR+hs799qeC1/BUKXTHsrqGd/0yZ9Tp05gCpo814=
Subject key identifier: 18:3D:56:4E:C8:93:6F:88:BA:CA:AB:57:90:67:A1:1B:F3:E3:40:63
Authority key identifier: A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
Certificate issuer: /CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Certificate serial: 01976A735C99A6A373C14270D6F6CEB201FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
Manifest number: 14C2
Signing time: Fri 13 Jun 2025 18:00:34 +0000
Manifest this update: Fri 13 Jun 2025 18:00:34 +0000
Manifest next update: Sat 14 Jun 2025 18:00:34 +0000
Files and hashes: 1: 4KqmJoEVUd9bhY-ntnaMTkNmA44.roa (hash: LLo6nOWCS1mxlNIUMzouZjN4HwCv7i5lI/hb4nBjcBQ=)
2: Jw4aASdhNdVI-FplW-882cj74Fw.roa (hash: ewm0/xps8d7RUrK5yQyWODWIjZ5yxmU6C2dpLRlFoTs=)
3: qC-5s0GMRYzbxs_WhFFL4krQw8k.crl (hash: eS+DxsJZPmb7TlIFFsJ3MI8qUJt7YUp8fmoaGonpMRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:73:5c:99:a6:a3:73:c1:42:70:d6:f6:ce:b2:01:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Validity
Not Before: Jun 13 18:00:34 2025 GMT
Not After : Jun 14 18:00:34 2025 GMT
Subject: CN=183d564ec8936f88bacaab579067a11bf3e34063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:cc:6a:30:e7:ea:e1:cf:08:24:40:a7:92:25:
1b:0e:36:71:a7:0b:8d:51:d1:64:d0:5e:1f:d3:05:
ee:c4:d0:4b:65:6c:3c:28:09:c8:b6:7d:a5:66:82:
e1:b2:fd:4d:03:b1:4a:c4:1d:66:e6:ea:47:a5:67:
eb:b3:fd:5c:ca:76:6d:5f:d7:69:49:80:6a:7d:c8:
53:2d:90:47:83:61:d9:06:4a:d9:7e:29:b8:e7:19:
b0:58:57:29:19:e8:ab:92:e1:06:01:a9:27:f8:ae:
9d:e1:50:94:7a:14:23:51:20:3d:3a:14:d6:11:78:
a5:44:6a:65:35:0d:4c:0a:73:1e:83:cd:02:d9:3f:
17:f8:65:81:8b:c1:70:dd:b2:3f:81:9b:25:b2:18:
ec:cb:1f:71:58:45:40:21:13:2e:d0:a9:c5:ad:12:
51:6d:60:c5:4d:98:ce:6f:99:f5:11:f4:f7:8d:4d:
e4:2b:b1:e9:be:15:b4:8f:ce:c5:5f:1b:29:68:19:
33:92:ff:e5:55:db:d8:74:17:35:95:5c:53:ed:b4:
93:2b:33:5f:04:8f:fe:0f:a4:56:64:4f:33:22:f1:
7f:24:66:99:90:83:e7:3f:88:c2:8c:c8:2b:9d:f1:
28:81:40:f7:be:64:a3:6d:ef:13:a0:66:38:e4:7c:
f5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3D:56:4E:C8:93:6F:88:BA:CA:AB:57:90:67:A1:1B:F3:E3:40:63
X509v3 Authority Key Identifier:
keyid:A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ee:6e:55:08:27:37:77:13:70:90:17:8c:aa:ea:f7:da:cc:
86:4a:35:19:9b:6c:74:18:1b:31:83:04:29:85:a8:8e:a4:f6:
91:ed:8f:e6:5d:0e:e9:1b:84:9e:54:f4:67:d2:6a:bd:d9:44:
ee:ba:94:37:b2:e8:7f:f3:d6:62:4a:b8:66:51:e1:34:cd:41:
3a:aa:c7:98:34:e4:42:30:6f:7f:fd:0a:c5:b7:07:5b:5a:4f:
61:f3:88:30:15:43:5e:a7:14:2c:69:ad:13:ec:56:53:45:33:
df:b0:a5:7d:cd:f4:8f:81:fa:75:1f:a5:cb:8b:b8:dd:fd:25:
c2:f3:ec:f7:6d:50:b3:e6:02:42:14:85:c8:b8:d6:86:90:22:
98:05:43:11:d6:f4:23:d2:18:58:d4:47:7d:d7:b5:3e:58:08:
dd:d8:aa:ed:90:5d:cd:eb:76:13:bc:01:78:b9:ee:b2:34:b9:
47:80:17:b9:12:e8:38:21:46:39:fc:49:9a:a4:b3:e4:29:b6:
ba:c3:30:98:69:13:24:e8:3b:b1:85:d8:cf:62:02:e8:3e:98:
ea:cc:3f:ac:9f:ba:ab:88:19:e0:57:0a:b0:11:47:9c:00:fc:
67:4a:b6:88:4e:57:cf:ae:08:8b:1d:b9:c1:85:75:b9:53:a4:
37:8b:ec:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:43:27 2025 by rpki-client