Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
File: QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft (raw, json)
Hash identifier: PRy4MLJtM0D1G7PZAq6TmDOYBhdE9EZsS0S0ZYm1ZkQ=
Subject key identifier: 4F:B5:F4:DC:FB:15:1F:52:1D:A4:5C:15:09:F3:A7:18:1D:B5:77:A7
Authority key identifier: 42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
Certificate issuer: /CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Certificate serial: 0197499ED2278FBECA9AC2E612AC5FE88DC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 09:00:34 +0000
Manifest this update: Sat 07 Jun 2025 09:00:34 +0000
Manifest next update: Sun 08 Jun 2025 09:00:34 +0000
Files and hashes: 1: QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl (hash: bXtWAlw9r8TwIYJYjUmegA3IFQ6D9qJLL6DhLn8eS1k=)
2: c1mJTzKq1m2EBAr92I-nges1Di4.roa (hash: i1n9Y7VZ80hK4Lc1aErif8j8W+hz5/EhhxzfXPDeEMQ=)
3: rvgAs6WmoB_QmrlMgSgm7khV-4U.roa (hash: ByaVeRT7BxyoGgwxavoqH/EHW9rBtmtZSrveuw0KL1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:d2:27:8f:be:ca:9a:c2:e6:12:ac:5f:e8:8d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Validity
Not Before: Jun 7 09:00:34 2025 GMT
Not After : Jun 8 09:00:34 2025 GMT
Subject: CN=4fb5f4dcfb151f521da45c1509f3a7181db577a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e9:22:43:55:8f:74:00:46:2a:0f:55:78:be:
98:1b:1d:7e:33:45:a5:7b:88:22:3b:93:a7:e4:08:
3e:4d:7c:d4:8a:50:34:1f:0a:94:54:f2:db:07:da:
a6:68:45:57:72:ad:4e:39:71:48:37:ef:87:74:6c:
0f:d7:0b:26:8c:01:c9:74:bf:13:15:d5:1e:34:81:
fa:07:c3:0d:b3:56:cf:83:cd:4b:ae:6f:16:24:7a:
ea:03:71:dc:70:2e:dc:35:2a:cb:b4:c4:76:b1:22:
c6:ba:35:ad:52:cb:5b:20:35:84:7f:fb:a4:3c:77:
f8:60:fd:99:da:4e:66:32:0d:c3:13:7b:14:63:6e:
48:2e:65:62:63:7f:2d:b4:c8:d6:fe:a4:1d:dd:4e:
b9:11:1f:a5:0b:90:79:7e:b9:3e:75:24:7b:51:83:
b4:14:3c:2f:89:56:62:08:d3:f7:3e:f4:1e:68:98:
69:0b:dc:b1:2b:6f:ee:99:9d:6c:41:30:44:c9:b1:
70:46:bc:29:fd:68:b2:29:22:dc:9d:4e:a7:e3:9f:
60:cb:03:c2:74:ce:01:8a:aa:71:df:4f:cc:b7:f9:
a8:f5:a3:cd:3d:16:73:ee:bb:c9:f6:ab:83:5e:ee:
cf:60:bd:c8:3b:2a:89:e9:17:57:6b:82:92:59:75:
57:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B5:F4:DC:FB:15:1F:52:1D:A4:5C:15:09:F3:A7:18:1D:B5:77:A7
X509v3 Authority Key Identifier:
keyid:42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:03:ec:4d:80:d8:cb:55:6e:75:0c:7c:74:45:b8:e5:ac:86:
7f:87:78:98:d3:33:80:d2:c7:b3:4c:08:c1:d0:d9:25:ab:14:
30:6c:85:91:0d:1e:6a:4a:08:87:4c:96:0c:8e:39:86:36:9a:
58:24:a3:78:f9:46:28:4b:ef:88:96:34:d1:6c:80:cf:da:5c:
fa:7d:49:79:80:a4:4e:2d:06:93:4f:c4:0c:2f:83:15:8e:cf:
ff:81:96:4c:2c:ce:4d:9d:cc:df:40:d9:34:55:88:07:aa:49:
1d:d2:02:87:ba:5f:e2:e0:4f:52:3d:9a:b9:f9:9a:f9:2a:57:
eb:76:76:30:03:ec:41:77:ce:cf:93:38:45:c8:d3:56:b6:af:
09:74:4f:6a:66:87:30:79:a9:5f:5b:92:71:84:76:c9:e6:29:
0f:9c:9d:36:2e:d8:3c:b6:e6:9a:e1:0d:9d:4c:65:a3:9b:29:
de:3d:3c:e0:da:bc:a5:5d:b7:ea:5d:2b:06:85:70:83:ad:77:
e6:bd:b1:c7:7c:d3:48:5e:a9:63:55:4e:b3:d1:cb:53:f7:ad:
1c:c5:b0:08:8d:29:80:60:c2:0d:21:75:26:06:f6:4d:da:72:
6b:40:80:e1:20:69:83:5a:34:ca:eb:fc:86:e7:cc:34:5e:da:
c8:82:7d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:50:27 2025 by rpki-client