Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
File: qyftHOpDIcScPKEPOv-v29rVMsI.mft (raw, json)
Hash identifier: c4Ci7Uk1arhvMYswU/2yaW37Jz6/FcHwXJJ/GlwzcmE=
Subject key identifier: 8F:8C:B8:68:3A:E1:EF:D1:F4:2B:82:C9:77:19:3E:F2:FE:ED:00:14
Authority key identifier: AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
Certificate issuer: /CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Certificate serial: 01974BFB55C8573EF080B040B1C59A7141C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
Manifest number: 1581
Signing time: Sat 07 Jun 2025 20:00:52 +0000
Manifest this update: Sat 07 Jun 2025 20:00:52 +0000
Manifest next update: Sun 08 Jun 2025 20:00:52 +0000
Files and hashes: 1: 2U9OMR0vNGIWLLTXLBnFAJc6zag.roa (hash: F6oBZloimXQ0suZfVl9SgIpXfkXnctvWcc1snNVrOMI=)
2: qyftHOpDIcScPKEPOv-v29rVMsI.crl (hash: IUxruJVHJR66DoqCYiwIX1XjvFwpEWLC/npguIwJ66s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:55:c8:57:3e:f0:80:b0:40:b1:c5:9a:71:41:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Validity
Not Before: Jun 7 20:00:52 2025 GMT
Not After : Jun 8 20:00:52 2025 GMT
Subject: CN=8f8cb8683ae1efd1f42b82c977193ef2feed0014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4d:e9:d0:ce:70:95:cd:28:ec:e5:94:5a:f9:
a5:59:aa:0d:a7:0c:c7:c4:2f:89:f5:a2:72:e1:9d:
4a:d1:7b:b1:69:5e:fd:b6:f8:4e:44:46:31:7f:b8:
ec:c2:0d:5d:8f:9d:63:c4:26:28:86:ab:96:77:37:
01:dd:de:67:34:5c:51:71:3d:18:e7:c8:f7:60:a2:
4c:eb:30:bb:ec:36:90:92:dd:ac:3f:89:20:74:bc:
bd:e4:f7:c2:97:3b:71:8c:1b:54:5e:45:23:98:15:
08:48:24:df:a2:e4:41:3f:f8:7a:58:6b:b0:18:46:
cb:cf:b7:8f:f0:f3:b8:f1:11:cc:de:9c:bc:54:01:
da:ad:8a:16:4b:31:41:80:d0:9e:f2:ef:31:d7:18:
d4:69:bf:b3:08:a0:e0:31:58:25:ae:76:63:53:3a:
dd:05:1f:8a:75:ab:25:f6:e3:84:f9:24:49:fd:22:
16:51:7c:59:27:81:6c:25:7d:9d:79:dd:85:bf:52:
2d:63:7d:b8:57:a6:12:e0:a0:5c:a7:9e:1d:30:f2:
ce:6a:1f:e4:b3:06:64:f8:80:e0:1b:33:f8:0e:62:
30:2b:74:64:4f:7a:65:50:bd:2f:d3:5c:2b:d0:5d:
81:97:20:56:b8:f2:ab:4e:73:2c:1a:26:d2:67:f3:
85:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8C:B8:68:3A:E1:EF:D1:F4:2B:82:C9:77:19:3E:F2:FE:ED:00:14
X509v3 Authority Key Identifier:
keyid:AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:10:80:2b:74:47:8a:be:bd:7c:66:c2:f8:60:cc:69:16:c5:
20:30:90:71:02:73:b1:e2:b7:18:11:4a:9c:b5:cf:96:2a:63:
dd:21:bc:f6:20:f4:85:61:3f:06:1e:e4:f0:3d:a6:f0:71:79:
a8:df:a6:0e:66:38:e0:39:9a:b5:e9:85:99:f7:ad:59:b9:db:
44:02:85:12:86:e3:dc:66:98:71:59:a9:6d:ea:5c:fa:e9:cb:
19:bd:3d:ef:5f:d3:57:30:cf:31:84:b8:2d:3e:8b:3f:3c:08:
ed:c4:9a:c2:ad:36:04:fc:e4:0d:b8:0a:1d:d4:2c:4e:ca:e6:
fa:19:82:1d:0c:e6:15:7d:6d:82:12:49:e4:45:55:34:40:49:
78:ed:1b:89:da:d2:d1:4e:c0:b8:34:70:5f:96:9a:53:d8:d9:
b6:f3:cf:22:7e:17:f1:7b:4c:cc:9c:bb:48:09:aa:35:f0:7d:
b0:3b:15:9f:d6:5b:87:bf:e3:0f:26:f0:5c:31:ed:4c:d6:79:
f9:fd:4c:04:66:b8:d4:97:98:45:b0:13:48:09:3d:64:a6:60:
e5:69:91:fb:49:c0:8f:d3:40:07:a3:e7:6a:cb:c1:40:1c:02:
15:8a:63:0b:a4:d5:46:b2:a4:35:1b:76:e2:4e:da:5a:2c:63:
61:d2:37:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:04:10 2025 by rpki-client