Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
File: QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft (raw, json)
Hash identifier: v3BnWAvCoj+Rqhf92VWFyvsatPeZw8AVkjQLcexFUqI=
Subject key identifier: 2F:03:0C:E6:B6:C8:D9:1A:07:61:C0:9C:DA:EC:9F:BB:69:E4:C9:2C
Authority key identifier: 40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
Certificate issuer: /CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Certificate serial: 01974D7C10BE7E81C8268D09717668C30E3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
Manifest number: 0D0F
Signing time: Sun 08 Jun 2025 03:01:05 +0000
Manifest this update: Sun 08 Jun 2025 03:01:05 +0000
Manifest next update: Mon 09 Jun 2025 03:01:05 +0000
Files and hashes: 1: GQOl6LTvNyPMyG3KjW9Ajp0Bvpw.roa (hash: eZX/fpaYpvDnXloavaVJKtIU2XKfpzNfzwR74TFia7o=)
2: QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl (hash: +U9qJvP3AZMEUbzOqlKNE70nBhTQrBplB97TDIexq4A=)
3: b5Ug6NPJo2XtezY8UVzxnmPE-i0.roa (hash: VB+B1HYKvDBDwa8bPpxYYXoTuHADEZJRpgBpaSqbPu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7c:10:be:7e:81:c8:26:8d:09:71:76:68:c3:0e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Validity
Not Before: Jun 8 03:01:05 2025 GMT
Not After : Jun 9 03:01:05 2025 GMT
Subject: CN=2f030ce6b6c8d91a0761c09cdaec9fbb69e4c92c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2e:20:70:bf:f2:eb:75:cb:cf:f8:bb:1f:89:
32:a8:30:5d:09:71:ca:f4:0d:4e:91:c1:8f:ff:0f:
46:cf:e0:ec:6d:33:20:44:57:62:f4:8d:84:24:d4:
9b:f2:76:b8:bb:9d:02:9d:9e:98:fc:c6:c7:aa:f4:
80:85:3d:e6:6d:b7:e9:a1:19:57:e5:26:b0:ae:f0:
eb:57:56:a0:39:f7:cb:21:95:40:9a:5d:ba:56:7b:
fe:27:47:13:2b:a9:b9:28:78:8c:b2:a3:4c:65:4f:
fe:a9:d9:e8:af:e9:91:84:88:58:77:33:21:55:b8:
f1:57:e0:6a:9f:f0:e1:f4:45:c1:47:86:2d:92:89:
26:40:a0:22:4e:0b:6f:4d:35:ea:0b:c6:8c:c7:e4:
47:1b:2f:3f:af:90:d5:e1:05:9f:50:70:af:b3:d0:
8e:7f:08:b3:14:6f:74:38:56:33:5b:fe:95:14:47:
e2:09:a6:e1:2a:46:37:e0:02:61:c2:23:34:f8:db:
cd:a1:f1:88:9d:a6:8f:24:35:75:8f:9c:16:68:b6:
30:c9:6a:14:a2:83:67:80:3b:45:3c:0c:54:41:46:
ff:6e:86:55:a8:17:65:b9:1f:eb:47:4f:ba:ea:63:
b9:7a:de:e0:6b:b7:8a:fb:da:90:df:19:52:c7:c6:
bd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:03:0C:E6:B6:C8:D9:1A:07:61:C0:9C:DA:EC:9F:BB:69:E4:C9:2C
X509v3 Authority Key Identifier:
keyid:40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:6e:99:a5:63:ab:36:1f:4f:4b:e5:dc:e8:b3:0f:62:fb:5f:
b9:4b:e2:8c:62:d3:d5:35:c2:b9:55:c9:07:0f:fa:33:54:51:
f3:d3:4e:e2:ad:59:9b:ec:dc:a4:4c:1a:1f:7d:a7:59:19:c1:
80:ca:c5:7d:58:ec:db:a7:ea:c4:ea:e8:e0:75:8f:b5:4d:40:
59:13:9f:8e:5e:86:c2:fa:34:b9:a6:01:78:c6:6d:b0:08:8a:
00:78:cc:4a:50:43:87:66:ca:4e:2e:81:e9:e8:3c:27:c7:3c:
d8:4e:c1:55:9d:df:75:30:65:45:35:58:d3:95:e2:41:be:e6:
f1:7b:c5:d5:d9:3c:23:90:f4:93:9f:e7:6c:2e:ee:b1:b0:2b:
0d:64:6e:f0:9c:9f:5d:29:b0:63:da:95:ae:fb:18:fb:5f:52:
b3:e9:16:fe:95:1d:bf:90:af:e5:1d:2e:63:c3:6c:39:a9:f1:
27:28:eb:d7:60:c5:d6:0c:d6:1f:e4:98:59:8b:89:6e:7e:18:
c6:2a:f1:70:9e:ff:ec:09:33:8d:6b:e5:48:4b:4a:3c:66:86:
4c:ed:c2:84:21:3c:02:f9:70:fd:17:eb:d6:d8:71:32:6e:c4:
78:43:29:92:40:d0:42:c6:1f:f6:84:4e:fd:d2:17:8f:72:f2:
68:65:f2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:56:02 2025 by rpki-client