Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
File: QJgXTbRR2f797sFfm5x5KdqumYA.mft (raw, json)
Hash identifier: q76+y6n3rZhzf2pAPhv7uFYNRAncpD7Gdch7ZSzQIIY=
Subject key identifier: 2E:FB:7A:12:9E:B2:1A:BB:B7:53:C8:DF:D3:66:1F:D3:FD:A7:DD:90
Authority key identifier: 40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
Certificate issuer: /CN=4098174db451d9fefdeec15f9b9c7929daae9980
Certificate serial: 0197488D0305CE6DC422F55340680B224376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 04:01:30 +0000
Manifest this update: Sat 07 Jun 2025 04:01:30 +0000
Manifest next update: Sun 08 Jun 2025 04:01:30 +0000
Files and hashes: 1: QJgXTbRR2f797sFfm5x5KdqumYA.crl (hash: aAZzH/kxfycW7dWJXgCQBqW1gXO0vZyEujgyfQt+WCM=)
2: VEtZZf9DCZWbNoKnf7FdIgrreS8.roa (hash: TCBg4X7Dp/mq95gKrBY1sBflsLJVUkpMXJtFn3JhtO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:03:05:ce:6d:c4:22:f5:53:40:68:0b:22:43:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4098174db451d9fefdeec15f9b9c7929daae9980
Validity
Not Before: Jun 7 04:01:30 2025 GMT
Not After : Jun 8 04:01:30 2025 GMT
Subject: CN=2efb7a129eb21abbb753c8dfd3661fd3fda7dd90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9a:3f:ba:b1:8e:9f:d7:30:10:fb:c5:43:bb:
0f:4d:ba:3d:99:ec:d4:d7:af:b4:ed:13:75:77:a5:
c4:ef:4b:91:4f:a8:7c:7f:34:fb:44:ab:19:3c:2a:
cb:cd:01:3c:cf:7f:8b:24:c6:d6:21:05:91:e1:5a:
33:54:99:a3:fa:f6:b1:2c:fc:c0:45:ea:6c:d8:89:
d8:c8:f4:bc:e4:88:b8:0f:47:b4:e4:6a:51:13:77:
84:a5:70:d2:16:71:7b:e6:d0:4c:b0:d3:60:4b:ee:
cb:64:54:4b:6c:47:0f:b1:c6:b9:1d:04:1f:66:ed:
06:ad:76:00:c8:9d:40:76:cf:12:84:e2:f2:7b:8a:
3f:ef:02:3a:2d:23:1a:05:62:73:51:c1:a7:f7:4c:
e6:5b:ba:db:7e:86:6f:57:63:1f:de:1f:17:47:54:
70:eb:6b:5d:13:35:27:d7:bd:08:6a:c3:ef:66:be:
f1:d1:23:06:7a:2f:d5:0d:96:4c:28:67:0d:a2:8d:
b0:71:b4:b3:c3:99:0e:2d:67:4c:77:01:58:8c:e7:
a9:9a:8f:85:30:47:de:90:59:12:3c:0e:38:e2:54:
17:ee:ff:76:df:c3:80:59:e0:25:5c:b4:35:7d:8b:
19:5d:83:aa:b3:eb:d9:2a:b7:30:ec:13:7a:06:3f:
c1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FB:7A:12:9E:B2:1A:BB:B7:53:C8:DF:D3:66:1F:D3:FD:A7:DD:90
X509v3 Authority Key Identifier:
keyid:40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:bb:2d:4d:19:04:46:06:36:58:88:21:66:2f:fb:7c:3d:ad:
7a:37:90:05:24:55:26:f6:cb:e4:49:cd:53:b5:6b:c6:66:a7:
26:be:b3:ff:55:ec:9d:dd:8f:40:01:6c:de:00:60:42:ee:f5:
a9:31:bf:2f:fe:12:41:1b:6a:1b:cb:e9:ae:1e:44:75:83:79:
7c:01:42:34:f4:01:3c:ee:94:4c:9a:81:17:79:ca:d3:50:e6:
d8:50:25:2b:e5:bd:9b:a6:82:8e:5f:b1:0f:73:36:f8:9a:a9:
ae:1d:ca:1b:29:91:af:16:1a:10:26:b8:19:22:37:ca:2e:a4:
7a:c5:f4:e8:6f:35:af:5f:7f:96:3e:79:10:bb:a9:2c:fa:44:
3f:94:f1:9a:50:27:d8:a7:77:62:5b:cb:45:92:9a:00:ee:6a:
21:37:7f:b7:34:13:a1:2d:a7:c6:bc:a1:06:e9:d1:6c:04:00:
35:e9:55:4e:70:ed:70:ed:1a:54:20:d8:38:2b:2f:be:7e:09:
22:e1:61:18:44:4c:39:9e:a1:16:cd:ca:f1:64:37:1c:21:82:
8f:3b:f9:61:32:22:6a:09:2a:12:64:af:d5:d1:87:82:3b:bf:
a4:e4:78:14:96:69:5d:08:8e:1f:ae:85:c2:1f:9a:f7:36:85:
09:17:7f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:48:33 2025 by rpki-client