Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
File: Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft (raw, json)
Hash identifier: KBo8KSP1mbR4TtqMxOsF9ibrvysZIK4G7T1Y179rvj0=
Subject key identifier: E0:72:7E:38:E5:6D:D6:05:98:F6:84:63:13:81:09:65:F2:8C:F3:09
Authority key identifier: 42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
Certificate issuer: /CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Certificate serial: 019748FA56601EA6B9EA98E16DD85790B488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
Manifest number: 1584
Signing time: Sat 07 Jun 2025 06:00:55 +0000
Manifest this update: Sat 07 Jun 2025 06:00:55 +0000
Manifest next update: Sun 08 Jun 2025 06:00:55 +0000
Files and hashes: 1: Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl (hash: VdhqfwGooshJxwOSxvBHzBSc2MhL5ozVv/ZoZvK6VF8=)
2: mC6qnnktw8ocqw8es0LfRst29xw.roa (hash: ppmb2PFwvp6zlS01nCp0DE/SrZFmg3TuLccALf3DpFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:56:60:1e:a6:b9:ea:98:e1:6d:d8:57:90:b4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Validity
Not Before: Jun 7 06:00:55 2025 GMT
Not After : Jun 8 06:00:55 2025 GMT
Subject: CN=e0727e38e56dd60598f6846313810965f28cf309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c8:8f:0f:2d:a3:1c:5b:c9:46:cc:15:71:bb:
7c:a7:1d:61:96:f4:39:ed:31:fa:4d:72:c6:1f:fe:
fa:e7:1a:bb:51:1e:d3:c4:54:a6:ee:cc:25:eb:a7:
cc:46:3a:33:74:8d:19:fc:a9:71:37:84:2d:63:c7:
71:9e:3f:8a:c3:31:3e:63:bc:21:3c:6a:ef:83:e2:
5a:50:2a:5f:0b:36:31:28:85:05:e7:6b:a6:61:a1:
51:03:d8:ee:2f:36:33:9d:18:55:dc:8f:10:3a:95:
f9:5c:73:56:c1:0d:b8:89:a8:14:37:61:34:f9:fb:
0d:98:f9:c7:b4:c6:35:52:95:ca:a6:e1:07:62:8e:
bf:58:68:f9:99:a0:c6:f4:94:10:88:a9:21:0c:0e:
18:18:55:38:06:b3:42:9a:64:d6:8d:af:3d:b1:64:
c2:f2:c9:de:60:f5:11:d0:60:e4:26:0a:05:ce:7e:
d0:05:28:88:16:8b:df:6d:c6:0c:4f:fa:34:ba:27:
6e:c9:50:83:3c:fd:91:17:08:f5:b5:31:df:2c:be:
68:16:bd:19:e6:a7:df:24:33:01:b5:4b:e2:a3:a0:
1c:07:f2:15:7b:df:94:3d:5d:fa:90:48:3f:cc:3b:
3c:f7:8f:79:6a:27:5a:99:fe:a4:73:42:27:7d:c7:
7f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:72:7E:38:E5:6D:D6:05:98:F6:84:63:13:81:09:65:F2:8C:F3:09
X509v3 Authority Key Identifier:
keyid:42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:34:83:0d:80:af:e1:a2:58:de:93:40:be:bc:04:0e:1b:4a:
81:f3:bf:82:5c:3c:1b:00:6b:09:b5:31:be:bb:d5:32:db:33:
8a:92:1c:5d:8c:f2:2c:d3:d5:4e:5e:26:7f:97:71:59:c5:d3:
a7:ef:f1:28:4e:51:4f:7f:c1:3c:f6:64:5d:15:b6:a6:f2:bf:
e7:d0:12:a9:13:a4:55:28:5b:e4:79:df:fa:40:a8:c2:ae:7f:
74:d7:53:42:b1:92:f0:95:42:8e:45:66:23:67:ff:e4:03:16:
5f:33:9c:74:f9:59:4f:ac:98:1f:65:f8:63:60:72:86:54:ea:
80:08:58:7a:73:a5:4a:db:9d:3d:98:ac:3d:cb:b8:37:ee:d6:
01:19:22:ac:06:b2:a2:02:53:b0:12:95:ff:df:6c:ee:e5:29:
13:b2:67:53:37:6c:c0:cd:7b:ba:ba:95:16:93:f7:63:b4:2c:
2d:83:97:46:7a:b2:fe:41:ed:af:69:d3:ad:21:7d:c4:40:7a:
c3:0c:67:d9:23:56:da:0e:6a:de:ec:6d:11:12:c3:fa:6a:88:
74:15:12:8f:c5:06:49:b6:85:38:38:19:09:e3:4b:74:6a:8c:
6b:9d:1e:c1:17:69:2b:d5:86:23:10:42:58:80:6e:e8:0f:87:
89:98:3e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:05:52 2025 by rpki-client