Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
File: QsMDcZht9dVk7mcHRxe2agL_VxI.mft (raw, json)
Hash identifier: XUWLB2NyaX7H51W15FpYRAZO9Yq07pEQ253kRjLVQjU=
Subject key identifier: 49:CF:C2:0A:9F:17:34:1D:7D:29:F9:12:46:2F:D9:75:23:C2:D2:43
Authority key identifier: 42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12
Certificate issuer: /CN=42c30371986df5d564ee67074717b66a02ff5712
Certificate serial: 01974931255BE1C9656201EFFBC32F51004B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
Manifest number: 146D
Signing time: Sat 07 Jun 2025 07:00:46 +0000
Manifest this update: Sat 07 Jun 2025 07:00:46 +0000
Manifest next update: Sun 08 Jun 2025 07:00:46 +0000
Files and hashes: 1: QsMDcZht9dVk7mcHRxe2agL_VxI.crl (hash: n9anuuqICyZG1JZpG1Jxa9ekJpmnYg1D2XL8KciyPzw=)
2: hyIZ79qkrdHzxjA2nqjpWKRJazw.roa (hash: uN3TIUn6uJGV9mne7uVtH2Vshh9cYXISPUulyaHzlUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:25:5b:e1:c9:65:62:01:ef:fb:c3:2f:51:00:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c30371986df5d564ee67074717b66a02ff5712
Validity
Not Before: Jun 7 07:00:46 2025 GMT
Not After : Jun 8 07:00:46 2025 GMT
Subject: CN=49cfc20a9f17341d7d29f912462fd97523c2d243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7e:f0:45:54:1e:0b:e5:45:ed:d8:59:35:9f:
8d:f5:76:8c:d5:b2:28:5e:ce:4d:e7:ad:11:93:fc:
a0:0f:78:7f:2a:c1:c6:0b:ce:a0:0a:c2:36:68:7b:
e8:57:9a:d9:2c:d2:2d:ab:6a:ef:74:41:10:8c:d4:
37:a1:d9:5f:53:d2:8f:b4:a0:4b:a4:67:2e:21:dc:
55:41:9a:20:b4:6a:07:a8:98:b2:8c:c2:fb:f4:51:
47:66:71:2f:30:9a:3b:b9:9d:1b:f0:da:eb:e9:e7:
e3:d7:e5:88:c7:7a:85:b2:54:6e:70:fd:fe:61:45:
e7:7e:f1:83:08:c2:b7:eb:4d:bf:9d:2c:fd:4f:8a:
04:0d:e2:ee:f0:2e:3d:77:df:d2:be:52:87:9c:5a:
e2:8c:94:71:94:bb:c0:3d:4f:dc:c9:9d:07:65:36:
2b:1a:d3:ef:34:d9:ec:ea:63:2a:cf:0a:e8:2f:b8:
45:05:58:12:57:5c:3e:30:73:e8:2f:28:e4:54:9a:
e0:0b:96:06:90:84:fe:8d:e5:bf:b7:5d:1b:11:bd:
1a:22:57:fd:82:6a:5a:7c:46:9f:e8:3c:1a:a5:cf:
fd:f6:b2:42:a0:47:f8:62:8e:bc:92:84:60:5e:b3:
e8:fa:87:a9:79:49:ef:5d:e6:58:23:54:f1:bb:5d:
63:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CF:C2:0A:9F:17:34:1D:7D:29:F9:12:46:2F:D9:75:23:C2:D2:43
X509v3 Authority Key Identifier:
keyid:42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b8:09:14:b6:10:b3:f6:a2:89:50:a1:00:85:98:88:10:35:
1b:68:69:1a:9c:f1:b7:7a:c7:ab:33:28:34:a0:48:37:da:33:
ed:ee:58:43:a0:24:c6:d6:a2:54:f0:83:53:68:9f:b8:72:52:
f1:3d:ad:64:43:85:45:de:95:3d:18:c9:4e:a1:e7:d1:45:04:
3e:94:20:5f:8c:36:67:b3:cb:c4:35:1c:8a:33:70:2f:d3:30:
4f:86:b4:e5:0d:80:e0:d7:ef:25:5e:bd:c2:6e:cf:2a:ec:86:
bb:4b:65:47:a5:8c:4b:3f:7a:96:77:f6:58:d3:94:2d:9b:b5:
cb:ea:9a:01:92:8c:a6:60:a8:a8:d7:14:19:a5:a5:37:7d:4b:
e4:36:d0:d5:d4:d9:f5:1c:5f:d0:4d:c6:73:3c:b2:c2:d8:34:
1f:6c:39:f3:ed:7e:f5:8e:0b:06:d8:d2:b2:d2:8e:d9:6a:d8:
90:5d:59:05:21:ff:ef:0f:1d:b0:57:ec:d8:b1:4c:32:13:43:
08:09:a0:00:00:b0:43:6a:1d:91:e8:22:1e:f4:00:4d:72:b1:
bd:b0:22:c5:2f:b5:2d:27:c7:e5:8c:54:0b:d4:15:cf:90:17:
0e:f0:38:27:6f:a2:0f:a5:6f:25:a8:ff:ef:ea:0d:5c:96:09:
3a:71:78:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:28:15 2025 by rpki-client