Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft
File: QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft (raw, json)
Hash identifier: lMnhvlKaD2qAR1tig6lZ+eK8d8G8bXGtmOoaiVlKZC0=
Subject key identifier: 21:02:CA:D5:AD:AE:EE:40:18:5B:A3:99:D1:6D:D5:D1:45:80:B5:D8
Authority key identifier: 42:1B:4C:D4:0B:AE:47:D4:8F:51:C9:CC:CC:60:7C:CE:57:CE:00:F7
Certificate issuer: /CN=421b4cd40bae47d48f51c9cccc607cce57ce00f7
Certificate serial: 01974BFB86BF0E086A157630673269FC099B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhtM1AuuR9SPUcnMzGB8zlfOAPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 20:01:04 +0000
Manifest this update: Sat 07 Jun 2025 20:01:04 +0000
Manifest next update: Sun 08 Jun 2025 20:01:04 +0000
Files and hashes: 1: QhtM1AuuR9SPUcnMzGB8zlfOAPc.crl (hash: 4MsinhZqeTAze+1ZgsH85vWUgoece8Xkc8PqSvmo9Bs=)
2: rjvci4lVGCr57ADE7C3M4Mib4mk.roa (hash: yRKI8JSBUthmJegOInkpPYFyfDjZ1t7SRsTNJhUbFjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhtM1AuuR9SPUcnMzGB8zlfOAPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:86:bf:0e:08:6a:15:76:30:67:32:69:fc:09:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421b4cd40bae47d48f51c9cccc607cce57ce00f7
Validity
Not Before: Jun 7 20:01:04 2025 GMT
Not After : Jun 8 20:01:04 2025 GMT
Subject: CN=2102cad5adaeee40185ba399d16dd5d14580b5d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d0:37:fa:4f:a8:ea:67:50:4d:d3:83:c5:b6:
44:6a:16:8d:06:db:28:3a:d8:48:57:7d:48:b5:a5:
7e:ce:16:f3:e1:13:b0:ec:77:cb:ea:8e:99:0b:cd:
76:f8:53:2e:c6:4f:db:ef:f9:21:6b:01:14:c5:38:
c8:65:d7:f0:7a:ff:11:ba:2e:3a:34:eb:a4:6e:68:
71:eb:9a:af:35:8d:03:f3:6e:d7:0c:a7:d7:5d:59:
4c:8c:bd:d7:85:19:57:c0:4d:f7:63:d2:93:8d:67:
af:89:74:93:4a:8b:e6:e0:8b:d7:a1:64:14:19:f6:
06:a0:6a:2d:09:c1:08:86:d5:ff:3e:65:0f:86:05:
b2:c3:0f:01:65:25:3d:a3:fe:0d:e6:1c:f1:e1:e3:
56:c7:08:dc:e6:3f:d4:3e:dc:17:cd:f0:9e:15:05:
14:e2:43:76:d6:19:55:a7:e0:b6:60:4c:f0:8a:3d:
ac:6d:2f:fb:7e:72:5c:b2:e1:ee:d5:34:60:fa:4c:
bc:db:9c:b1:c2:91:52:1c:ac:6f:ed:a9:3f:46:39:
1d:81:22:c4:b9:24:6d:ba:82:33:34:09:4c:0b:f4:
eb:6e:91:20:f5:28:5c:ef:a3:39:f5:1b:71:76:03:
9e:f9:f1:11:00:c8:29:1d:c1:1f:8e:5b:4e:37:b8:
b5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:02:CA:D5:AD:AE:EE:40:18:5B:A3:99:D1:6D:D5:D1:45:80:B5:D8
X509v3 Authority Key Identifier:
keyid:42:1B:4C:D4:0B:AE:47:D4:8F:51:C9:CC:CC:60:7C:CE:57:CE:00:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhtM1AuuR9SPUcnMzGB8zlfOAPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:2e:5f:ba:e6:d3:c8:a3:0b:c9:26:da:7d:cb:74:af:c3:73:
7d:be:6b:58:9a:6f:03:2d:fc:0e:f3:f1:5c:c8:e5:b4:5a:d6:
91:9b:f0:66:61:be:24:70:07:d0:20:6c:0f:2f:1f:f4:d7:84:
ab:82:6e:9f:9a:f6:4c:71:ea:57:6e:4b:0e:c8:4d:05:c6:ce:
6d:d7:c9:ca:d0:59:71:20:22:6d:b3:bc:ce:16:04:e8:9c:3d:
b3:c8:4f:8b:63:49:b2:cb:18:fa:53:4b:1f:89:87:31:a6:9e:
ef:fd:b5:6d:37:b4:2b:85:b5:2a:d8:a5:53:28:3b:86:60:6d:
7d:c2:d1:72:05:61:90:1c:f4:b2:f8:a9:e1:9a:52:b3:e2:8e:
7f:6d:9d:0f:21:77:e2:84:91:ed:ac:e4:75:1e:f1:b4:bf:c4:
61:a6:43:71:4e:be:3f:60:4c:88:8c:8a:16:1d:1b:49:a0:74:
9e:3d:a8:8d:e8:7e:0f:e4:b7:cb:1f:87:29:e9:39:c0:c7:75:
e6:71:01:34:00:4d:c6:60:41:3d:8f:c0:9b:54:a5:69:df:21:
fb:60:da:4d:69:61:bf:76:5f:32:e6:e2:10:ea:c3:23:d6:43:
06:bf:62:eb:56:7e:cf:0c:2e:b9:bf:e0:25:ee:a5:2e:5f:d9:
86:76:3b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:14:26 2025 by rpki-client