Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.mft
File: QlQ5sMp_FNqpthsRvRe9zBunOGw.mft (raw, json)
Hash identifier: r7tL4Zz8f2wAjTWAmdvFBMfuWRM6f2Vhdb7FH5KJcSU=
Subject key identifier: D5:A4:D6:35:C1:BF:46:17:F5:56:34:1D:E3:27:80:67:6C:09:DE:26
Authority key identifier: 42:54:39:B0:CA:7F:14:DA:A9:B6:1B:11:BD:17:BD:CC:1B:A7:38:6C
Certificate issuer: /CN=425439b0ca7f14daa9b61b11bd17bdcc1ba7386c
Certificate serial: 01974DE9F86A205E2150DE600EDB019C8B7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlQ5sMp_FNqpthsRvRe9zBunOGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.mft
Manifest number: 0563
Signing time: Sun 08 Jun 2025 05:01:08 +0000
Manifest this update: Sun 08 Jun 2025 05:01:08 +0000
Manifest next update: Mon 09 Jun 2025 05:01:08 +0000
Files and hashes: 1: AKOMQZeZNylU7lZ2jfftfFZ_Z4U.roa (hash: Nv09RJ//WYPjGsqetOMSZHjfsxpAq/7Zyyhfe6u1lRs=)
2: QlQ5sMp_FNqpthsRvRe9zBunOGw.crl (hash: pwCTsZ/nZfdTEdpJQOB8ki5MExtYybyUQr3nU4hzDUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlQ5sMp_FNqpthsRvRe9zBunOGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:f8:6a:20:5e:21:50:de:60:0e:db:01:9c:8b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=425439b0ca7f14daa9b61b11bd17bdcc1ba7386c
Validity
Not Before: Jun 8 05:01:08 2025 GMT
Not After : Jun 9 05:01:08 2025 GMT
Subject: CN=d5a4d635c1bf4617f556341de32780676c09de26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:89:7f:98:b7:f3:5c:04:57:f2:2e:fc:f0:12:
39:9a:a0:be:59:1e:2e:d6:a3:48:28:cb:9f:4d:b7:
43:5d:06:e3:a1:9d:43:75:d5:bb:b9:db:48:bc:52:
a3:94:5d:32:2f:c6:7b:64:e0:de:43:55:b1:9c:48:
71:ba:77:c5:6b:3a:98:fc:77:78:46:c7:8a:5d:4b:
16:41:62:ba:4d:e4:7a:f1:bd:c3:60:0a:f9:08:61:
69:3a:37:8b:a5:19:1d:28:ab:d5:57:cc:f0:2b:15:
dc:4c:15:80:87:03:54:c6:98:da:45:5f:d2:a3:5e:
d2:39:46:a1:6f:27:4d:6d:63:84:6d:3e:86:32:1f:
d3:1d:8b:36:de:72:ce:1e:94:0d:57:f3:d2:c8:a6:
51:77:7b:2f:76:7b:44:6d:38:0d:0d:13:dc:27:7c:
bf:93:d1:c4:6c:43:f4:0e:3e:88:73:1e:56:dd:d9:
df:bb:26:23:1e:b6:be:5a:98:cd:3f:de:73:43:a0:
db:37:de:22:63:fe:30:59:e4:cb:ba:9e:2a:5f:d5:
e8:93:bd:35:69:4b:98:a0:0c:84:cd:a6:df:d2:23:
29:93:b4:a6:17:bd:55:aa:82:87:0b:f8:31:b4:1b:
bf:dd:7f:1b:01:49:a5:b8:c8:91:af:3b:34:af:46:
ac:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A4:D6:35:C1:BF:46:17:F5:56:34:1D:E3:27:80:67:6C:09:DE:26
X509v3 Authority Key Identifier:
keyid:42:54:39:B0:CA:7F:14:DA:A9:B6:1B:11:BD:17:BD:CC:1B:A7:38:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlQ5sMp_FNqpthsRvRe9zBunOGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9c770-9e8f-4008-b7f7-c550fa211fb7/1/QlQ5sMp_FNqpthsRvRe9zBunOGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ca:ad:aa:bb:5c:8d:76:52:21:dd:2a:9f:34:79:ed:27:61:
1e:64:a7:05:10:7e:44:0b:08:51:14:d4:8c:33:c1:0a:23:46:
83:78:d3:45:b2:f0:f8:52:16:e9:44:28:38:4b:76:68:59:91:
6c:25:98:a6:a4:3c:73:c2:b0:cb:5b:58:b4:38:31:53:be:1f:
67:2f:9b:bb:69:37:36:ed:63:ad:32:55:f0:ce:02:1c:e8:fc:
5e:1b:7a:61:28:ee:07:27:6a:dc:cc:b3:b8:79:e8:5c:8c:65:
9d:ea:99:92:b2:9b:96:7a:a9:b2:90:d7:5b:9b:ea:49:74:fe:
4b:9f:9f:0f:18:1e:f3:db:b0:34:ad:3b:96:93:77:62:02:e4:
32:95:28:80:8b:e5:c5:31:21:db:fd:b3:d5:e3:16:15:95:8d:
54:37:bc:99:c3:4f:03:cc:fd:1e:8a:05:0b:15:6e:72:68:31:
cb:38:85:b2:4e:5f:62:ab:d2:a4:26:c8:09:b5:af:5c:1c:f3:
18:ae:39:5a:26:b8:3a:8c:bb:8b:df:61:5c:ed:74:89:d2:be:
6f:1a:88:1c:68:d2:20:f6:87:3f:79:39:16:27:b4:1a:8b:6b:
4a:ef:b6:64:38:0d:22:d6:01:de:53:86:8b:e9:24:32:41:0f:
5a:20:80:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:40:38 2025 by rpki-client