Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
File: q29qNuwpYNTQXz2dyxh7m5BOpZs.mft (raw, json)
Hash identifier: sqN9NWDTKfyzK4JJKg6Kc38GrOwUX2NMm/PLmpUeUT0=
Subject key identifier: B2:8F:07:6F:E6:6D:A5:3C:AF:B2:83:0E:4C:C5:75:DE:78:74:3B:1C
Authority key identifier: AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
Certificate issuer: /CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Certificate serial: 019754FDF22ECB196C82C023255DB751B642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
Manifest number: 057D
Signing time: Mon 09 Jun 2025 14:00:18 +0000
Manifest this update: Mon 09 Jun 2025 14:00:18 +0000
Manifest next update: Tue 10 Jun 2025 14:00:18 +0000
Files and hashes: 1: DcoOphnBv0Z-r0DRs1Wzn6GO5g8.roa (hash: /C9jr7QH16ykeDGqHdZ0LLAVK74Wkvu3hj1t3uV43yA=)
2: Nq6xP1ML7pMOmt1I4z-fGnkBjbQ.roa (hash: eP8YWZy4BtRcpeOrILokYjbMpuSFUnV4sCVcpAqWhwM=)
3: XmMK1HZ3DcPkTMV2el117ysMhn8.roa (hash: 4EKgTSdeFZXBlalCvjDw36pJD0WP5d5sVK8uLLXyrbI=)
4: q29qNuwpYNTQXz2dyxh7m5BOpZs.crl (hash: 2v6GAjxzEbsDhLibX0RyjfdebrLn8NplD6oAKJ32Kcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 14:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:fd:f2:2e:cb:19:6c:82:c0:23:25:5d:b7:51:b6:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Validity
Not Before: Jun 9 14:00:18 2025 GMT
Not After : Jun 10 14:00:18 2025 GMT
Subject: CN=b28f076fe66da53cafb2830e4cc575de78743b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:57:04:90:d7:ec:94:ea:e0:9e:c7:99:33:74:
07:e6:28:cb:f8:a1:ea:ac:89:41:89:a6:09:7b:6f:
24:b6:39:89:79:8f:4a:8b:0e:0d:aa:6f:a4:f4:17:
79:46:80:8b:e5:2f:db:da:46:d9:89:33:1f:18:c2:
a7:08:30:52:ce:b4:5f:e7:9c:ed:9d:c9:a2:63:e7:
67:ff:99:08:8a:f7:89:a5:27:17:bd:7d:ec:cf:fa:
5a:05:c0:f2:56:e2:87:90:30:60:95:88:2c:34:7c:
f5:17:2b:95:f3:f3:da:62:e4:85:20:67:a9:7a:08:
01:ff:b4:e7:90:63:e4:8c:cb:06:b2:d0:e3:10:8c:
14:b5:3c:7f:00:91:9d:e0:b5:9c:7b:61:3e:27:eb:
e8:38:36:e8:45:dd:49:98:61:c5:50:b5:12:81:08:
f7:9f:38:8c:12:e9:3f:02:b3:0d:2e:e3:8a:99:e5:
ab:10:32:b6:bc:4f:e2:c6:f4:fe:59:ec:67:17:82:
cc:a4:25:18:15:c1:0e:81:02:5b:20:a9:50:25:68:
6e:83:dd:df:06:c2:13:66:ee:26:fc:90:cb:04:ca:
49:38:40:82:40:48:37:ab:ac:8e:29:75:a8:42:83:
f3:f1:17:92:01:c9:d5:05:65:91:8d:a7:e1:65:c1:
8e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:8F:07:6F:E6:6D:A5:3C:AF:B2:83:0E:4C:C5:75:DE:78:74:3B:1C
X509v3 Authority Key Identifier:
keyid:AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:1d:a5:49:9e:ad:e7:b3:f7:64:79:59:01:78:fd:47:6a:24:
32:12:2c:b9:71:a7:91:29:5c:a2:aa:1c:14:77:47:5f:3c:c9:
06:62:a5:9f:dd:13:cf:c0:79:f5:86:31:88:f9:64:5b:23:c8:
da:82:ce:6e:06:bf:93:cb:6f:d7:b3:c3:2f:62:f2:8a:25:ec:
6b:c0:99:7c:ff:a2:9d:71:e1:3c:86:65:62:f0:b6:dc:43:93:
40:6d:3c:a1:db:10:36:79:5a:f4:0a:e4:32:df:49:a6:7d:dd:
88:ba:ec:58:f8:ac:3b:69:66:b4:2c:4a:31:3d:41:fa:5e:45:
04:34:e8:c2:3b:77:31:cc:72:a1:93:54:53:f9:b3:33:58:50:
02:50:bc:b4:65:0f:15:5e:4f:da:27:46:ca:6c:d6:eb:bd:58:
91:fa:6d:7c:e9:08:f2:3f:66:c0:ce:40:c2:b2:a5:0c:3e:05:
49:c2:fe:5e:73:2f:da:b6:44:14:80:b9:2f:00:3e:0a:1e:0a:
5b:95:89:1b:cd:6f:d0:69:f2:f9:2c:03:4a:55:f9:7c:80:af:
4d:77:fc:ed:d9:23:13:75:74:68:5d:b3:27:09:74:a3:74:9d:
28:31:93:f6:8e:68:75:50:50:2d:6f:e9:04:e9:bb:78:d4:9c:
bf:c0:91:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 23:40:02 2025 by rpki-client