Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
File: Qy_nD0zvEDdoNhUvOOTghTLMe58.mft (raw, json)
Hash identifier: Jy37pAWegI2/M9a7J3ikeSAw82jTJmd0qZARtA3cwFU=
Subject key identifier: E3:71:27:45:7A:1E:12:80:B3:D3:20:AA:50:5E:CD:38:79:FF:45:E8
Authority key identifier: 43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
Certificate issuer: /CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Certificate serial: 019750458666771E4614BC71EA529F6A5F0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
Manifest number: 0429
Signing time: Sun 08 Jun 2025 16:00:22 +0000
Manifest this update: Sun 08 Jun 2025 16:00:22 +0000
Manifest next update: Mon 09 Jun 2025 16:00:22 +0000
Files and hashes: 1: Qy_nD0zvEDdoNhUvOOTghTLMe58.crl (hash: aLvwPbudm+fo6ttFfnv/F8ZKZW/S05Or5iBvSmzTG4o=)
2: YjwHZ-U8mcXCH0aU6JQJG4PEKkA.roa (hash: AnaRhDa+1cCeJd4R7WSfA8EHeNFUa2CX4p8vAAGKzHM=)
3: ZSjK1k03bVh7IszUUplOg1a3fhc.roa (hash: ur9lsl4V/e4ObtEPnWIBtt1dkjYzJgol0eBWTC8If5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:45:86:66:77:1e:46:14:bc:71:ea:52:9f:6a:5f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Validity
Not Before: Jun 8 16:00:22 2025 GMT
Not After : Jun 9 16:00:22 2025 GMT
Subject: CN=e37127457a1e1280b3d320aa505ecd3879ff45e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:43:69:e3:7a:9b:5b:32:6d:b0:cf:f1:00:67:
0f:06:bb:4a:ed:ee:49:07:66:53:8f:75:7f:46:96:
c7:ce:e0:6a:d1:6e:ce:48:40:b7:bb:c3:80:bd:57:
83:a7:d8:f8:81:ce:c5:68:a2:f1:eb:e7:05:5e:45:
7c:fd:45:40:c3:29:12:f9:1f:75:78:fd:d6:d2:b8:
7b:c4:99:f1:e6:67:4a:ed:01:7b:65:60:42:e8:36:
3a:ce:a7:a7:c6:6d:26:6a:89:27:52:94:fc:d9:45:
24:ee:09:9e:2f:80:0c:b7:b7:c5:53:f2:68:1c:a6:
e0:c7:6f:ac:e4:bd:80:75:be:f1:14:f1:8f:b3:2e:
33:a0:06:98:89:ef:e6:72:9b:5a:c0:cf:51:1d:90:
33:80:e0:a3:0c:48:aa:de:0e:57:a8:1a:d4:d8:34:
df:e7:86:f9:d1:cd:a5:89:0f:36:12:2a:a4:72:78:
d3:db:84:fb:0e:4a:44:04:ad:76:27:e9:f2:06:5e:
33:1f:5e:1e:35:c8:54:86:53:c0:0d:a0:82:fb:09:
6a:f2:20:1d:89:24:48:4f:82:dc:02:c7:d3:7e:94:
60:ca:f2:5c:fb:74:7e:67:77:d6:c5:d0:b9:80:9f:
cb:b7:20:48:46:00:91:aa:a6:5b:f8:69:26:b5:0a:
ef:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:71:27:45:7A:1E:12:80:B3:D3:20:AA:50:5E:CD:38:79:FF:45:E8
X509v3 Authority Key Identifier:
keyid:43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:1d:9d:a8:e7:9b:4a:5f:f2:5d:de:74:e6:5a:80:e9:0c:dd:
6e:db:60:f0:cf:f1:3e:33:1b:3a:b2:8c:bc:11:c4:ae:0c:78:
1e:47:31:82:13:6b:bc:59:99:75:27:07:34:b9:83:1a:3b:3e:
81:c9:12:c4:ca:bc:52:71:0c:37:8a:b2:12:16:a4:f6:2d:8b:
6c:3a:c2:de:ba:a4:b9:92:e4:97:63:10:b1:97:80:8f:5f:61:
6e:ed:0c:b9:e9:e1:85:44:f6:e5:1e:53:17:7f:aa:4b:65:70:
30:5c:b4:bd:d6:65:42:ce:8f:eb:5a:5b:ec:6e:bd:e9:bc:11:
11:3c:86:50:03:7a:99:cd:53:77:dc:34:20:8c:7e:4e:33:50:
c7:34:aa:0c:4d:38:c3:3d:9c:3f:4b:55:36:fe:40:66:c7:fc:
46:23:c5:76:5d:a1:06:0e:7b:00:fa:ef:77:2c:09:cb:dd:df:
28:6c:34:8d:b1:a6:a6:5a:16:b1:b1:63:7b:fa:85:84:80:30:
0c:69:c8:ce:84:f9:c7:a6:a4:57:c1:5d:09:16:e4:de:15:33:
96:03:9d:7e:a5:cb:f4:64:7b:9e:a1:06:46:30:6a:3e:86:20:
a7:9d:66:4f:09:b1:90:88:4d:6e:17:56:e5:83:6c:27:9b:66:
35:81:ed:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:45:20 2025 by rpki-client