Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
File: qT4365yxmDJdZWZzKJJY0o6587g.mft (raw, json)
Hash identifier: +hn0hsj3CJUEWNWmh2HrlABox9hMLXnWuwH650dd+Ao=
Subject key identifier: 76:75:B4:E9:1F:34:CA:3A:29:7B:E2:69:59:5F:A3:3B:F0:4A:94:5E
Authority key identifier: A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
Certificate issuer: /CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Certificate serial: 01974779DBD882EF2629CCCF539B2F302003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
Manifest number: 1510
Signing time: Fri 06 Jun 2025 23:00:57 +0000
Manifest this update: Fri 06 Jun 2025 23:00:57 +0000
Manifest next update: Sat 07 Jun 2025 23:00:57 +0000
Files and hashes: 1: B6IAypRDNnn3wQIonYGMbrtebVA.roa (hash: RDNajdiQ2iOHeS1ehJ984LhPxM3hBSKi1PJW1BaavLE=)
2: qT4365yxmDJdZWZzKJJY0o6587g.crl (hash: FCxMyor83qj4mmPfq2HENCBlu0XJQ0PRmseirK4Lwzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:db:d8:82:ef:26:29:cc:cf:53:9b:2f:30:20:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Validity
Not Before: Jun 6 23:00:57 2025 GMT
Not After : Jun 7 23:00:57 2025 GMT
Subject: CN=7675b4e91f34ca3a297be269595fa33bf04a945e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2b:76:6f:2b:47:67:d7:e8:96:7e:02:f7:b8:
1c:be:96:4f:b6:e0:a1:f7:86:14:e1:ec:f9:f4:57:
76:62:79:d9:1b:d7:42:72:ae:00:41:ad:b0:68:48:
38:e6:78:d2:c2:2d:6b:8a:25:7e:b2:46:5b:cc:de:
1c:12:0e:b2:2a:cd:c2:ca:82:19:b5:92:8e:16:90:
97:f2:9f:28:69:19:5e:83:20:be:3c:96:fe:94:03:
91:7e:99:70:bf:c0:01:55:86:fa:1f:05:e7:71:c8:
24:ec:86:40:46:f4:9c:00:ac:d0:f0:65:d7:68:83:
e4:a3:ff:ae:35:7f:6d:78:a9:bb:c6:74:2b:16:b9:
db:f5:52:18:d8:d2:06:c4:29:ca:37:fb:cf:f9:5b:
5a:36:b0:d6:10:fc:a7:d8:16:db:21:55:47:6b:eb:
c4:8a:f9:06:6a:dd:a3:5e:7a:d2:d2:15:6c:34:70:
9a:2c:9a:fe:0f:b1:e7:b7:f0:4d:f8:42:1f:ff:c0:
72:c1:06:23:5d:81:cb:01:5f:77:df:36:b7:aa:3e:
9b:2c:b5:c9:98:aa:0c:23:4d:69:de:a9:10:15:88:
ae:ee:49:f0:00:16:db:13:6d:5e:e9:7c:1e:bd:87:
c8:ca:76:a3:7b:be:ac:6c:64:40:cd:d2:83:52:99:
e7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:75:B4:E9:1F:34:CA:3A:29:7B:E2:69:59:5F:A3:3B:F0:4A:94:5E
X509v3 Authority Key Identifier:
keyid:A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:32:66:2d:3d:5d:68:99:f5:7a:04:0c:c0:30:e5:61:14:96:
5b:a5:29:f2:e0:34:86:82:87:8d:9f:b0:53:0d:5f:8e:dd:72:
b6:db:e9:fc:38:ad:51:2a:fe:14:90:47:36:2a:9a:8f:bd:74:
1a:45:28:9c:a0:76:b8:e9:43:00:19:6f:59:8d:99:c5:8f:e9:
7e:6f:d2:a3:32:79:22:7c:02:87:3d:d3:0d:0a:5e:9d:cc:1d:
45:96:7d:bb:fc:86:2a:7e:cb:49:f5:a3:66:e0:15:24:f9:11:
31:5d:9e:01:fb:a2:c9:36:02:86:f2:cf:93:55:e5:6e:8a:d1:
90:bd:3e:fc:1d:8f:c4:53:bc:34:ca:f5:6d:13:6f:ea:10:76:
82:db:88:bf:38:63:03:62:e7:4b:d0:d8:0d:14:01:11:f4:64:
69:29:7b:37:75:1d:57:54:72:82:d5:30:a4:36:67:39:3b:f3:
fd:d0:fc:72:79:ea:57:78:d2:96:36:a7:0a:23:a3:00:1b:7f:
97:54:0a:f6:dd:11:0c:d5:1e:9a:92:05:02:0e:87:a2:94:e9:
36:57:45:fc:40:36:36:15:a8:ea:7c:e0:c4:c9:a7:8e:e9:c6:
81:58:7e:ce:77:f0:41:bf:e8:5d:a4:60:a3:f3:46:ca:84:e5:
45:f4:f0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:41:14 2025 by rpki-client