Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
File: q29qNuwpYNTQXz2dyxh7m5BOpZs.mft (raw, json)
Hash identifier: 7kTO4XdxqoBR63D4Eq0NbNfBT2h/0YrJhKldSvVXVjA=
Subject key identifier: B5:88:8D:05:47:3B:D8:DF:97:55:3A:CA:8E:3F:D6:F8:54:46:33:9A
Authority key identifier: AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
Certificate issuer: /CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Certificate serial: 01976C2AAB06FDDC3B78395E3CFA1E6F5674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
Manifest number: 0589
Signing time: Sat 14 Jun 2025 02:00:24 +0000
Manifest this update: Sat 14 Jun 2025 02:00:24 +0000
Manifest next update: Sun 15 Jun 2025 02:00:24 +0000
Files and hashes: 1: DcoOphnBv0Z-r0DRs1Wzn6GO5g8.roa (hash: /C9jr7QH16ykeDGqHdZ0LLAVK74Wkvu3hj1t3uV43yA=)
2: Nq6xP1ML7pMOmt1I4z-fGnkBjbQ.roa (hash: eP8YWZy4BtRcpeOrILokYjbMpuSFUnV4sCVcpAqWhwM=)
3: XmMK1HZ3DcPkTMV2el117ysMhn8.roa (hash: 4EKgTSdeFZXBlalCvjDw36pJD0WP5d5sVK8uLLXyrbI=)
4: q29qNuwpYNTQXz2dyxh7m5BOpZs.crl (hash: 4/CVdkdtLRZ4HVkgj2Bawlg4AneBQHbVFzsuklG2Qqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:ab:06:fd:dc:3b:78:39:5e:3c:fa:1e:6f:56:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Validity
Not Before: Jun 14 02:00:24 2025 GMT
Not After : Jun 15 02:00:24 2025 GMT
Subject: CN=b5888d05473bd8df97553aca8e3fd6f85446339a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f5:2c:e8:61:5f:0f:81:d4:52:e3:3c:67:52:
db:e4:58:08:e7:3a:08:7a:75:b4:e5:22:45:f8:d2:
3d:4e:83:59:65:08:3f:7c:75:4c:76:ae:b9:30:4f:
ec:6c:a2:19:d9:1c:a6:80:e4:31:9a:d1:00:74:1b:
df:81:60:c3:ec:e1:8f:e8:a1:5f:3f:aa:6d:91:d2:
03:2f:5b:4e:07:58:1b:7a:6d:a1:98:96:bc:8e:15:
ab:ce:f1:a6:78:eb:55:88:77:54:b3:75:cf:96:fe:
77:95:e4:29:3f:77:d6:02:a4:7a:a9:ef:f4:d7:b1:
ac:fc:22:60:05:69:94:c9:9a:a4:46:95:61:09:75:
15:11:99:d1:02:54:7a:60:e1:c4:8f:79:0a:e6:1d:
8e:37:ed:2a:41:f6:dd:79:88:61:07:ad:21:95:bd:
2b:5b:5c:46:df:f3:0c:92:ef:5c:ad:0b:79:df:0e:
ef:ca:81:35:d5:6d:3d:72:2f:2e:6a:b7:d9:55:0d:
a7:00:bd:0c:73:11:96:ed:1f:83:1b:ac:c7:96:62:
d3:ca:e1:36:6c:f1:ee:a7:cf:d0:d8:29:8e:56:dd:
8f:82:96:ca:4b:ce:89:01:87:8e:17:3b:e6:2a:49:
b9:2d:cb:77:18:d2:e2:a9:87:f0:e4:4e:d8:03:27:
e5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:88:8D:05:47:3B:D8:DF:97:55:3A:CA:8E:3F:D6:F8:54:46:33:9A
X509v3 Authority Key Identifier:
keyid:AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c3:5c:c5:2d:5d:8e:e5:7c:04:1e:0d:a9:aa:ea:9b:7f:74:
49:0c:f3:48:51:0e:d7:df:58:98:22:2f:61:d8:6a:9b:33:30:
9f:45:21:20:e0:f2:92:44:40:3d:de:6a:5c:07:63:d8:45:62:
85:82:e0:7c:e1:38:46:38:f7:0f:f8:28:cd:76:81:ee:a7:33:
26:52:6c:84:91:b8:31:f2:96:bb:71:24:7e:36:2b:20:95:6b:
5a:e0:71:be:98:f8:3d:01:b1:12:7a:9d:81:fc:c8:79:e3:0b:
85:41:70:75:3d:6f:ec:77:17:84:fd:8d:7b:6b:2d:17:69:ff:
81:2f:ca:2b:65:f1:4a:97:23:0b:79:46:bc:f6:cc:14:3d:61:
a5:1b:12:a8:af:a8:27:57:88:b0:12:e3:9d:75:2e:30:df:76:
0d:0f:bb:e2:0f:2d:5a:18:1c:a5:a7:81:cd:25:b3:5e:6d:f5:
fc:4a:99:86:4f:a6:2a:b9:1a:e5:b2:2f:ae:50:d3:28:c7:45:
4f:bb:88:99:34:c2:7b:8a:1f:21:f4:33:63:0e:c4:34:fa:4d:
b8:49:26:71:16:ce:52:3f:7f:b8:6c:49:17:76:9a:37:5e:b3:
50:52:18:46:ea:ae:17:57:ce:5b:af:2e:4d:db:ce:51:e9:c3:
fe:a4:45:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:06:11 2025 by rpki-client