Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
File: qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft (raw, json)
Hash identifier: N37c80AOktBnwg53NVMTFKH8eeuqu5mb48dk3f59cq0=
Subject key identifier: 47:1B:AC:6A:12:08:AA:72:AB:DA:68:A2:A1:7A:8D:A0:BE:B2:FD:D4
Authority key identifier: A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3
Certificate issuer: /CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3
Certificate serial: 01974E57C9ABD2D0AFEBE2278A9F2DE55E4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
Manifest number: 0689
Signing time: Sun 08 Jun 2025 07:01:05 +0000
Manifest this update: Sun 08 Jun 2025 07:01:05 +0000
Manifest next update: Mon 09 Jun 2025 07:01:05 +0000
Files and hashes: 1: ZuTxi79Ck2OCXbkDauPT87FQh1E.roa (hash: xuj1se8JvfBc00cfkDYRLRVr3K+o4nQ3N/ymEwvuis8=)
2: qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl (hash: 1eL9KqtVkDZHgeC+o+OI5cWCvRxq/n+oU4vlLQOBY1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:c9:ab:d2:d0:af:eb:e2:27:8a:9f:2d:e5:5e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3
Validity
Not Before: Jun 8 07:01:05 2025 GMT
Not After : Jun 9 07:01:05 2025 GMT
Subject: CN=471bac6a1208aa72abda68a2a17a8da0beb2fdd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d0:55:a9:a6:90:4c:95:79:48:e2:c1:d2:ad:
30:46:c8:e2:53:ea:97:c8:34:7a:04:cf:bc:91:3a:
4a:43:81:35:7f:1a:e0:eb:56:ee:c7:75:16:d6:0e:
ff:01:55:34:4d:eb:a2:31:08:21:03:1c:9c:fa:10:
69:eb:e1:df:d0:74:22:68:ef:ce:5f:7b:58:1f:38:
a8:d6:61:21:7a:5a:67:ae:33:98:37:40:b8:91:cf:
5f:37:e1:a3:f9:0c:9b:09:bd:2c:c2:a7:07:7e:09:
26:b4:ae:f4:4d:91:d8:7b:a4:28:f8:37:5a:a1:b9:
78:98:b5:4c:32:42:16:a7:20:43:67:46:3a:95:63:
c6:0e:5b:fe:0d:55:be:3f:04:dc:0f:64:4e:5d:fa:
07:b2:24:1a:d3:ce:f7:1b:47:75:b2:0b:16:4f:63:
ce:13:8d:06:eb:b5:ee:47:62:fc:03:26:85:8c:b9:
d3:0f:b3:a2:c8:84:cf:88:2a:5a:89:f3:51:56:bf:
72:07:2c:6b:82:e4:20:a1:57:ed:56:43:52:f4:95:
b0:dd:6b:6c:e7:44:ef:c1:c5:d6:c5:34:89:3f:c4:
f2:27:5a:48:79:32:92:bf:39:1e:8f:00:5f:b5:48:
48:9e:7b:70:1e:43:eb:55:55:57:59:d9:b7:35:da:
37:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1B:AC:6A:12:08:AA:72:AB:DA:68:A2:A1:7A:8D:A0:BE:B2:FD:D4
X509v3 Authority Key Identifier:
keyid:A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:75:8c:80:df:94:1f:e0:77:21:30:a5:31:9e:ef:6a:48:e8:
1c:2d:4d:43:25:73:68:a7:f2:fe:22:ec:6b:b2:2b:45:40:1d:
df:54:9d:1b:6d:ca:eb:e4:70:37:66:82:cb:43:0b:34:bd:f3:
a7:5c:2c:f4:2e:f7:03:b8:c5:13:1b:86:22:68:1c:db:88:bb:
05:e0:ab:ac:a7:bd:9e:6f:ce:6f:db:09:a9:50:ad:4d:1a:44:
dd:bd:ab:c8:e4:bb:c9:a6:b7:25:67:85:46:41:10:cd:28:ed:
c5:96:93:fb:42:0a:a2:af:6a:9a:84:6b:f3:17:0c:48:93:89:
2e:a1:ce:a7:c3:5a:76:64:9a:3f:50:ca:82:db:52:4c:ea:2a:
cc:d6:f5:b6:65:ca:97:9d:7c:c5:8a:87:4a:9c:1e:d5:f7:0e:
30:98:3b:72:c5:29:7d:69:e5:7c:ca:18:6b:ef:ef:2d:d1:5b:
90:e6:7b:c8:4f:aa:a2:8d:5f:2f:ff:6a:84:1d:c2:78:93:c6:
f8:d2:e0:b3:4c:34:8b:49:c5:34:9c:bd:14:01:aa:9c:44:81:
ff:0c:b4:3b:13:ae:af:c1:7e:0d:f5:25:fc:55:80:45:11:1a:
cf:25:84:91:85:89:71:db:20:d1:57:9d:eb:c9:6e:e0:43:45:
d0:c8:9e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:23:14 2025 by rpki-client