Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
File: q29qNuwpYNTQXz2dyxh7m5BOpZs.mft (raw, json)
Hash identifier: HXBfvRuJZ/2k6NaUnbslje2bG5+JtEoVALC3nfb3eqo=
Subject key identifier: 03:4A:FC:4D:1E:F3:FE:BE:D1:01:7F:A2:2E:5D:FE:42:9B:67:4A:E3
Authority key identifier: AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
Certificate issuer: /CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Certificate serial: 0197665F811C20E2F0F8056E1A38A038E535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
Manifest number: 0586
Signing time: Thu 12 Jun 2025 23:00:24 +0000
Manifest this update: Thu 12 Jun 2025 23:00:24 +0000
Manifest next update: Fri 13 Jun 2025 23:00:24 +0000
Files and hashes: 1: DcoOphnBv0Z-r0DRs1Wzn6GO5g8.roa (hash: /C9jr7QH16ykeDGqHdZ0LLAVK74Wkvu3hj1t3uV43yA=)
2: Nq6xP1ML7pMOmt1I4z-fGnkBjbQ.roa (hash: eP8YWZy4BtRcpeOrILokYjbMpuSFUnV4sCVcpAqWhwM=)
3: XmMK1HZ3DcPkTMV2el117ysMhn8.roa (hash: 4EKgTSdeFZXBlalCvjDw36pJD0WP5d5sVK8uLLXyrbI=)
4: q29qNuwpYNTQXz2dyxh7m5BOpZs.crl (hash: AsfB27+0rlwxVwjPN0j51jLd/boDcThfccDmlGBVQOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:66:5f:81:1c:20:e2:f0:f8:05:6e:1a:38:a0:38:e5:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Validity
Not Before: Jun 12 23:00:24 2025 GMT
Not After : Jun 13 23:00:24 2025 GMT
Subject: CN=034afc4d1ef3febed1017fa22e5dfe429b674ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:96:66:c7:74:5e:86:9c:26:5d:67:85:29:db:
f2:a0:3f:66:5e:0d:7a:0c:57:5a:79:90:2e:11:21:
1e:76:09:5a:8f:14:b4:70:a2:ba:a3:30:84:c5:96:
1c:ad:2e:23:4b:16:f1:c4:15:cb:50:a5:6b:8f:33:
c0:74:1d:4c:09:53:4e:db:f1:8c:a2:46:64:02:3f:
d5:24:7f:0a:4b:05:0f:64:d3:c0:32:fc:89:fe:c6:
a1:c8:8d:12:7f:55:24:c4:80:d7:8c:a1:40:40:69:
b5:82:ad:fd:7d:8c:8f:81:cf:33:0d:74:80:53:f0:
80:6e:34:bb:cd:63:ef:97:27:1b:86:68:62:28:23:
80:e2:44:3e:1f:1b:d0:2f:a7:75:57:a4:6f:7b:94:
c4:9a:5c:f7:e2:ac:7d:27:0a:90:8e:6f:52:70:4c:
8f:fa:5f:11:bd:a4:25:7b:d6:43:58:14:1e:7d:d0:
8e:f4:70:6f:3b:2c:27:7f:e0:35:ee:9b:6b:45:db:
10:40:93:7b:b6:33:6d:1a:a1:7b:5d:de:33:48:4d:
02:fe:4e:cd:80:28:4f:f9:c1:ce:10:2c:d5:df:53:
19:6c:00:da:90:d3:5b:21:8d:61:89:75:a5:eb:35:
d8:c3:4c:e0:7e:25:d1:7c:23:2c:8e:23:78:38:df:
f9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4A:FC:4D:1E:F3:FE:BE:D1:01:7F:A2:2E:5D:FE:42:9B:67:4A:E3
X509v3 Authority Key Identifier:
keyid:AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e5:7f:6c:75:d4:62:53:fd:2f:f5:35:f3:82:c9:75:6d:48:
49:30:21:0f:8c:79:6c:dd:04:5d:c0:bf:b9:31:17:8d:c2:0d:
4e:a6:1c:91:a8:a0:76:57:45:c1:1a:b1:62:9a:e1:95:95:c9:
a1:4f:b9:02:13:7a:24:b2:5a:5f:15:40:d8:de:a5:f6:99:99:
a4:98:8d:cc:70:8c:da:3f:28:32:cd:9d:50:35:3b:5c:2c:88:
bc:35:e2:1b:c2:f5:67:93:62:a1:03:c6:8e:d7:96:68:bb:d4:
37:59:37:78:bc:d2:c4:e0:10:a7:78:df:f5:d5:41:e8:3e:8e:
ea:4f:ad:ea:50:17:ef:c9:9e:44:2c:1e:11:9f:59:af:4c:13:
0a:66:85:5b:c2:f2:e7:06:aa:97:a6:70:5b:d6:fe:71:ef:99:
be:64:bf:14:cc:0b:7b:5d:f0:9e:ea:11:58:f8:5a:97:e9:74:
23:b7:1a:c8:49:e8:cc:0b:db:89:d1:d9:85:92:83:df:3a:9d:
50:9c:c0:34:6d:3d:89:80:24:e4:16:5b:51:0c:61:e7:e9:dc:
6f:f9:e2:eb:5d:24:f6:c0:9b:51:5b:b8:88:b6:aa:8e:92:d7:
57:ce:d6:a9:02:ea:66:90:ac:39:05:44:48:4c:18:e7:2d:f9:
7e:bf:74:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 01:40:52 2025 by rpki-client