Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
File: Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft (raw, json)
Hash identifier: 713s93XiVH6bhwRf7cxYdwmhl/AB3H/w/1lRyEVE1kI=
Subject key identifier: BE:5F:AC:9C:D7:A1:0D:32:54:5E:4A:A8:F0:16:31:E0:26:CE:52:5C
Authority key identifier: 43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD
Certificate issuer: /CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
Certificate serial: 01974B56866F8B7D0DA2B910B21C57A29D09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
Manifest number: 1057
Signing time: Sat 07 Jun 2025 17:00:50 +0000
Manifest this update: Sat 07 Jun 2025 17:00:50 +0000
Manifest next update: Sun 08 Jun 2025 17:00:50 +0000
Files and hashes: 1: Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl (hash: GWqsqFIHUdNFODKleeFDY0zcxxg8ej8yVgg+Pjmt/YQ=)
2: va7AQWl8BQjaONNSCF5yVhc4880.roa (hash: AGJNupVoKM3POzJ8IDK+xNNPIdqw4tebW6fT+PeJcHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:86:6f:8b:7d:0d:a2:b9:10:b2:1c:57:a2:9d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
Validity
Not Before: Jun 7 17:00:50 2025 GMT
Not After : Jun 8 17:00:50 2025 GMT
Subject: CN=be5fac9cd7a10d32545e4aa8f01631e026ce525c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a6:5a:a2:8d:74:a0:5c:63:f9:0d:16:7f:c8:
7a:13:f7:01:46:58:df:36:18:a8:13:7e:26:76:43:
f9:d4:c7:dd:28:0f:ba:2f:b8:79:73:d3:dd:00:cd:
31:18:4a:3d:a4:89:1b:dd:ed:ca:52:ab:ef:2d:23:
52:10:39:5a:df:c6:0d:08:90:65:df:27:56:7c:e9:
5d:18:2f:6d:39:ed:a7:a2:cd:e6:08:36:6f:ad:1e:
42:1e:d2:af:28:8d:0c:a5:28:d4:81:49:5e:8c:3a:
d0:31:45:d3:fd:6b:9a:48:6c:18:5d:e2:43:a3:55:
2e:b2:4a:c9:dd:fc:97:d3:05:0b:c5:46:3c:5f:e5:
10:27:68:06:40:1c:4f:11:50:6c:59:fc:25:4c:c9:
cd:11:f2:7a:36:86:4c:82:c9:e5:2a:55:77:fe:6c:
96:ad:1b:8d:2b:22:dd:03:03:af:6d:54:5b:33:bf:
c2:a0:9d:17:82:88:ec:e2:39:0a:db:1d:92:1f:12:
1b:d2:a8:52:98:13:9b:9e:61:15:c5:85:5b:b2:bd:
42:28:b4:9f:7b:e7:54:f7:e8:86:cf:7d:8a:19:97:
d7:91:78:c2:b0:b8:b7:8c:a8:f5:5b:fa:65:4e:ca:
a9:83:37:8c:66:c2:ef:0b:52:10:57:59:c9:80:51:
50:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5F:AC:9C:D7:A1:0D:32:54:5E:4A:A8:F0:16:31:E0:26:CE:52:5C
X509v3 Authority Key Identifier:
keyid:43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:40:8d:9c:78:06:82:5f:b4:cb:38:8d:43:50:36:70:d6:90:
0d:ab:f1:e2:36:c5:d4:f5:83:13:e7:92:63:2a:08:9b:5a:f9:
99:a6:f2:22:fd:b7:e4:5b:e8:76:a6:d9:ca:b4:36:98:95:8c:
4a:56:d2:03:b7:3c:0c:cf:a9:48:96:ca:d1:89:81:66:a8:41:
02:e6:5d:4e:12:0c:b5:95:7d:5f:7b:ec:8d:21:7a:c5:07:99:
8a:72:bd:f5:51:4e:20:9e:e7:b1:61:65:95:ff:ed:0e:a3:67:
57:53:e0:32:e7:04:58:17:ac:b5:91:c9:d5:78:4d:9b:d8:28:
6a:73:86:25:0d:14:01:f1:b5:20:7c:fe:eb:97:57:ba:bb:08:
86:06:ad:bf:f2:a3:16:ed:01:35:c3:e0:0b:97:97:6a:44:68:
42:2f:03:5c:e7:2f:9b:12:18:b6:d3:a7:36:c8:19:39:14:a1:
d1:3f:8e:31:1d:43:fe:c1:84:13:cb:3e:11:1e:fa:23:d6:a8:
67:bf:9a:07:7c:7b:a1:bb:02:c4:2f:1d:14:25:7b:ed:ab:75:
4a:c9:e6:f0:9c:6e:27:05:09:49:e7:d2:dd:55:5e:3c:f9:48:
f0:c7:d6:0e:a5:b0:c8:17:d4:17:cd:81:28:e9:df:05:0d:d9:
3f:11:04:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:09:21 2025 by rpki-client