Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
File: QbjC83vY1-BOdphaTO1FWddlHEM.mft (raw, json)
Hash identifier: phh2OovTCNzKZZCCOxzIOaED/CH7svxBmIADXHRUroM=
Subject key identifier: 09:D7:5D:99:64:08:68:E8:40:E2:E1:CA:AE:6B:A9:74:F6:65:A0:2C
Authority key identifier: 41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
Certificate issuer: /CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Certificate serial: 01976E198254C42FD15547A7DFD9FDB21449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
Manifest number: 1598
Signing time: Sat 14 Jun 2025 11:00:54 +0000
Manifest this update: Sat 14 Jun 2025 11:00:54 +0000
Manifest next update: Sun 15 Jun 2025 11:00:54 +0000
Files and hashes: 1: OYOpNeEVsu0T0BbvhmHIdNFIT_o.roa (hash: 5OjFPxxmaTIrwXXRizdKgOIFQoKouBwpJLlgwAhC1mU=)
2: QbjC83vY1-BOdphaTO1FWddlHEM.crl (hash: 59BrOE2y7lMfBgX7Qj9wI7eIdKM91ottvM0RfevPkGg=)
3: YdfGaXHdTb-LYhTs_wz6s9gnwBM.roa (hash: gNJt9eBEIblRu0IFOMH1K6y+ICB3kC1BNK9Q6bATMgc=)
4: q9jElUrbhazQFMEmmCOsDeqbLJA.roa (hash: RedQ+QOQuI2x8mkKA1C82rnZg776YlWDZwTviJY79bo=)
5: sJO10EU5Nx8_dkPBaPnnB2dtYNM.roa (hash: XB5B7Wmp004sDj3pl5z8PdpWXfh6a+r4ST0GRlHwVWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:19:82:54:c4:2f:d1:55:47:a7:df:d9:fd:b2:14:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Validity
Not Before: Jun 14 11:00:54 2025 GMT
Not After : Jun 15 11:00:54 2025 GMT
Subject: CN=09d75d99640868e840e2e1caae6ba974f665a02c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cf:05:79:87:38:e5:55:3c:42:2d:a6:29:83:
44:a4:43:89:a3:58:96:d5:b8:29:b0:c4:7a:b6:d3:
0b:54:40:3a:05:2d:bb:b7:bd:12:2c:94:35:91:d3:
8a:b9:dd:28:29:73:ff:b8:5b:4f:2e:e1:db:e9:ee:
94:12:5f:ba:55:4b:66:4c:b8:fe:a2:6e:9b:95:39:
a8:7c:f9:b9:0f:e1:84:2d:9a:e3:f7:a1:44:a0:c1:
82:ab:d8:fd:ef:26:ab:8d:bc:4d:17:5b:5e:19:81:
8a:52:70:8c:aa:fd:38:5d:0a:34:a5:4b:16:b6:f8:
f0:db:7b:d0:2d:76:a8:30:ce:c7:3a:3b:09:ae:46:
ce:ad:32:d2:1b:55:81:55:22:89:c6:b8:e9:76:8c:
75:4f:5f:b7:9d:81:9c:49:47:5b:2f:b8:fd:b4:96:
04:45:32:24:46:b4:1e:b6:a4:ab:0b:69:27:04:bf:
0b:05:d4:8c:b7:34:59:93:21:1d:61:a0:f9:6e:79:
1a:e1:f9:cc:b9:31:cd:ca:8b:f6:58:e6:53:11:1b:
94:5b:65:bd:bb:39:b6:58:6e:06:f7:4e:7a:93:da:
ad:8e:2b:06:81:9d:c3:b9:cb:b5:77:30:f6:16:e3:
04:17:ae:aa:fe:1b:f7:c2:44:36:0b:d6:75:68:99:
08:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D7:5D:99:64:08:68:E8:40:E2:E1:CA:AE:6B:A9:74:F6:65:A0:2C
X509v3 Authority Key Identifier:
keyid:41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ba:83:5a:5c:be:37:de:00:81:3e:76:96:9c:c9:8a:86:ec:
66:6f:75:77:d1:f9:14:16:02:dc:3b:4b:2b:24:34:d7:eb:de:
ce:66:54:95:df:d0:00:a6:45:94:42:9b:f7:57:ac:7f:ec:e7:
28:1b:84:23:05:94:2c:0f:97:c7:80:65:d4:b8:4b:45:dc:27:
92:cd:12:0e:54:d6:0a:ea:6c:bf:0e:6a:d3:a8:d8:9e:73:9b:
65:0f:c9:f9:d6:91:3d:6f:34:d1:e3:3d:b1:00:e7:61:1f:72:
92:93:9b:ce:a5:a7:b2:1e:fa:cb:a1:df:da:da:7d:29:1a:f2:
c9:3d:a4:49:ba:6e:73:d4:20:31:3a:0b:7f:5e:0c:95:2a:f5:
f9:10:6f:23:8d:ed:48:a9:96:1f:d5:3b:57:ba:54:e5:e6:af:
f8:b7:b7:43:9b:1d:ff:bf:85:52:c3:2a:64:4a:5d:69:a5:65:
19:4c:3d:ba:1e:7b:e5:e3:33:4a:b9:8b:f4:6e:55:e3:3e:80:
aa:90:a2:fe:96:f8:ed:05:30:e3:7f:56:0c:4d:9b:cb:7e:24:
45:96:46:3e:c1:04:0e:cd:cd:72:84:1a:f5:17:00:73:53:d3:
f4:3d:6c:73:a7:ce:bc:fe:7f:32:1b:f3:7b:5c:9d:17:2b:51:
41:5a:8d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:55:43 2025 by rpki-client