Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
File: Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft (raw, json)
Hash identifier: WjVbwKWmGb+t5vM5IVhMQL+/hxgJrnSKbDCYSkQxMoQ=
Subject key identifier: 12:8D:D2:48:F4:5F:3F:4E:2C:85:5D:83:86:36:42:44:5F:EC:1C:CF
Authority key identifier: 42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
Certificate issuer: /CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Certificate serial: 01973A2BF0CCEF2433DD2FC6A14DF3144625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
Manifest number: 1518
Signing time: Wed 04 Jun 2025 09:00:47 +0000
Manifest this update: Wed 04 Jun 2025 09:00:47 +0000
Manifest next update: Thu 05 Jun 2025 09:00:47 +0000
Files and hashes: 1: 3q6-YPpyRU0SXTuI1scDeTuMZEI.roa (hash: zcjue8I7/Ud383gBlguymoi9BmtOE5qsj15wQFoYezc=)
2: Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl (hash: gxrZnPFcAmsqFtgKdTucycgYeDHHRlGvrQMvIQiZ0ow=)
3: iI3eBvPcK_oU8TVqkbYOtwG8vsg.roa (hash: ikZUasg08WdXub3shWtyhp22ZcEuhRbJ+MQpgo0gb1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3a:2b:f0:cc:ef:24:33:dd:2f:c6:a1:4d:f3:14:46:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Validity
Not Before: Jun 4 09:00:47 2025 GMT
Not After : Jun 5 09:00:47 2025 GMT
Subject: CN=128dd248f45f3f4e2c855d83863642445fec1ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d8:21:7b:c7:43:b4:60:90:11:dd:fe:6b:e1:
b2:b1:02:b9:13:03:7d:40:69:65:5a:75:2b:8c:ed:
a6:f7:21:5f:95:92:45:8b:82:d5:e4:6d:38:9f:07:
62:82:96:5a:31:aa:70:b3:48:1f:51:99:af:b8:50:
10:40:bc:c6:8e:0b:ef:d2:79:01:de:ab:1e:34:ed:
74:24:e6:e9:59:5e:3e:a5:ec:71:9c:a8:b3:02:65:
e0:e6:83:01:99:a1:29:ae:97:35:ae:2a:42:a8:e4:
09:dd:52:40:a0:77:8f:76:e4:d9:9a:6a:76:c5:91:
01:d6:0e:97:50:54:9e:4b:66:1f:33:8f:b7:24:21:
c5:ff:82:01:38:ee:d0:9c:2e:92:93:bf:64:70:f6:
f4:66:4d:32:f3:28:9f:c6:79:fd:7c:79:96:e9:ca:
de:07:d0:15:49:e3:0b:fe:bd:57:55:de:58:13:ae:
00:21:19:9c:4a:d0:e0:a9:e9:91:2f:13:73:e3:1a:
08:16:66:56:e2:09:3e:da:09:dc:c9:3f:d4:07:79:
64:ed:09:de:ef:81:c0:42:ad:0c:31:6e:90:ff:72:
a9:95:06:af:f8:10:b2:54:86:db:00:f7:20:11:e5:
8c:3a:fb:43:ab:8d:aa:a2:2a:51:f7:03:3a:3d:d6:
62:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8D:D2:48:F4:5F:3F:4E:2C:85:5D:83:86:36:42:44:5F:EC:1C:CF
X509v3 Authority Key Identifier:
keyid:42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:cb:01:05:50:1b:d8:b4:96:7f:7a:f7:24:e2:6f:19:84:31:
c7:41:e4:52:d5:b5:bb:0e:16:1a:94:6a:4e:2c:bd:2c:63:7c:
21:5f:a0:e7:4e:e5:d1:15:9c:98:77:0a:94:38:57:c6:4a:b0:
8b:a8:e3:bf:bf:f0:f9:dc:0e:07:2c:b5:cd:5d:fb:2a:2a:e1:
ca:a9:32:19:1e:d7:54:55:95:c5:4d:59:01:25:bc:bc:c3:a0:
80:8c:9a:30:27:d7:b5:5c:56:00:e6:27:b8:76:0f:c4:f5:5f:
ca:78:e3:98:49:64:8d:ac:6c:3b:82:60:c6:61:d8:e7:01:98:
ac:e2:b7:88:4f:19:30:c6:5a:3e:56:18:b9:48:65:63:20:c3:
76:e5:9d:7c:a8:84:a3:1a:77:03:77:b0:bc:e9:62:b9:18:45:
67:91:30:09:33:eb:0f:df:9b:e3:0a:1f:5f:26:78:92:5c:bf:
9d:ef:1d:f3:ae:70:3f:7d:f5:2b:96:03:21:ce:8a:2e:4d:41:
7b:b3:af:37:95:33:00:b9:4d:ff:8d:ed:2e:b2:0a:22:06:3b:
4c:0f:b2:67:ef:3a:7b:65:30:1e:0d:61:98:78:30:f3:25:91:
13:2c:c3:94:50:74:db:47:c2:e6:54:e8:a9:d3:06:b5:89:95:
5f:43:79:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:29:04 2025 by rpki-client