Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
File: qS5dl54DJTmZRrI5CCLTDx0vNeE.mft (raw, json)
Hash identifier: UhW/A3uFPE/U7yZwTisbnx5kUWf/QnoMgG0T3BQI1pY=
Subject key identifier: 3A:13:10:83:44:FA:1D:12:B0:A8:AB:4C:BC:77:74:0D:14:74:8E:B2
Authority key identifier: A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1
Certificate issuer: /CN=a92e5d979e0325399946b2390822d30f1d2f35e1
Certificate serial: 01976BF47D63573CFEB7AC293F846B5AD5C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
Manifest number: 43
Signing time: Sat 14 Jun 2025 01:01:14 +0000
Manifest this update: Sat 14 Jun 2025 01:01:14 +0000
Manifest next update: Sun 15 Jun 2025 01:01:14 +0000
Files and hashes: 1: JQJmD49tR8jandeFHJ1IkrOGoDQ.roa (hash: qBRt18tQW7myUfjqyk6Za7F1LghK7qoZn+vndFJYSpM=)
2: qS5dl54DJTmZRrI5CCLTDx0vNeE.crl (hash: GCUAo409NYvZp7bxTxo84Jav6VyAN/4gwidKPmYHvKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:7d:63:57:3c:fe:b7:ac:29:3f:84:6b:5a:d5:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92e5d979e0325399946b2390822d30f1d2f35e1
Validity
Not Before: Jun 14 01:01:14 2025 GMT
Not After : Jun 15 01:01:14 2025 GMT
Subject: CN=3a13108344fa1d12b0a8ab4cbc77740d14748eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9c:9e:a2:c0:74:b9:3a:d8:6b:9d:06:9e:c7:
b1:bb:39:e8:53:c6:b6:2f:e4:6c:06:b6:cd:09:7e:
f5:15:b2:3c:08:ac:02:2c:fd:3f:60:05:6f:c2:3f:
a1:37:09:72:a0:21:1f:1a:92:3a:98:08:e2:63:cb:
fe:e9:09:2d:78:41:61:6b:d0:3b:bb:36:ee:5d:33:
90:1a:4a:50:49:f6:1e:73:e7:65:6b:58:99:71:0b:
f8:15:af:32:7c:2f:39:a3:66:a5:b3:33:c7:41:e9:
98:67:61:ad:26:06:f9:ce:02:b9:03:17:33:ee:01:
2b:36:16:25:c3:07:04:85:9a:18:02:93:35:5d:6f:
31:80:46:32:50:64:5c:47:a3:2c:4b:d0:e2:8d:aa:
6f:56:65:96:cd:51:0f:e8:15:ec:d0:33:88:54:84:
8b:0c:cb:c5:fc:2d:5c:d3:3a:0d:ae:4c:06:04:22:
ca:7a:e4:35:8f:36:2b:00:f9:ff:dd:61:02:d6:a9:
55:c7:98:ba:c9:0b:4c:2d:56:7f:86:4d:6d:e1:c4:
01:6d:cf:1e:6f:0f:ac:e6:b1:7c:67:97:94:f4:38:
2f:df:dd:48:71:31:d5:aa:da:3b:81:a8:fa:d1:d5:
0b:cb:51:34:f8:89:db:0e:b2:d6:38:66:d3:c3:f7:
ce:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:13:10:83:44:FA:1D:12:B0:A8:AB:4C:BC:77:74:0D:14:74:8E:B2
X509v3 Authority Key Identifier:
keyid:A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:53:40:0a:2d:1c:79:74:23:13:cc:83:7f:3b:93:10:3f:76:
73:28:78:bd:1e:49:80:7f:5f:f8:04:b0:d4:b2:71:d9:1f:6d:
b9:03:0c:b4:b4:39:d5:6b:18:e1:af:87:bf:87:ea:62:33:fa:
66:a2:06:f4:eb:8c:52:11:c3:a0:d5:bb:ec:a0:ca:ca:de:98:
4a:d9:d0:95:7d:33:2e:18:09:8e:2a:10:b1:17:c2:58:bf:26:
db:7e:59:46:48:2a:72:e3:5a:c0:8e:71:e8:2d:72:f6:d9:6d:
c7:cc:fc:9b:48:a9:96:32:40:6d:e4:9a:37:02:38:a0:d2:96:
f4:88:68:9d:ce:9b:b1:36:6d:07:49:b1:b2:74:44:dd:33:8b:
c7:ec:c2:08:97:16:46:79:62:28:21:b9:4b:55:f5:84:d3:17:
cf:bd:c3:e5:b2:f3:56:fc:50:fa:94:60:23:12:39:61:13:3d:
0d:50:56:dc:63:56:cb:28:73:b5:e3:73:0d:c0:05:f5:81:b7:
4a:ea:c6:bd:4d:44:d1:10:c6:80:29:31:bb:81:a9:d4:55:0d:
52:69:f5:a2:40:45:51:c0:bf:38:6c:07:76:ed:51:cf:54:cb:
1e:fd:4f:b0:17:52:e9:67:e6:fe:40:5d:d9:69:c7:a5:61:3d:
a4:aa:f4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:35:42 2025 by rpki-client