Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
File: 1-QN586_ZTA8mtn__o01ulGwp1iQ.mft (raw, json)
Hash identifier: blaqi2w9qXzeWMuJKEfStgR4XgMnvPAfTlINo/tQuuI=
Subject key identifier: 3C:6F:57:98:37:4E:8F:A7:7B:68:49:A2:28:41:4C:D9:86:B4:A8:B4
Authority key identifier: F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24
Certificate issuer: /CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
Certificate serial: 019746D4AA49D705B0D7998FE37FF707C6D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
Manifest number: 12AA
Signing time: Fri 06 Jun 2025 20:00:31 +0000
Manifest this update: Fri 06 Jun 2025 20:00:31 +0000
Manifest next update: Sat 07 Jun 2025 20:00:31 +0000
Files and hashes: 1: 1-QN586_ZTA8mtn__o01ulGwp1iQ.crl (hash: r4jCidsLzCUupfjL+C8DK6nlzyMQ9IXz+mo1t4K77V8=)
2: B9xdpXPKaKD7kATBDRUYPDrfJHM.roa (hash: xUpn/6yW+QKWLSXqnG2abjnoqVCxULjYMRU+slTa5PQ=)
3: YYzrkPDEMpFz0VlMFyfkPlvrIPc.roa (hash: ZTbSueGcUA5J+8KJD8a0DCRWPR/FrTGgSZg4efTERpc=)
4: z0hWnzSRmHLyAYMYl1nKCZOWbgw.roa (hash: GQY4W56WRkuweljajSL0/DPkbwKgksUsLIAtILepWM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:aa:49:d7:05:b0:d7:99:8f:e3:7f:f7:07:c6:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
Validity
Not Before: Jun 6 20:00:31 2025 GMT
Not After : Jun 7 20:00:31 2025 GMT
Subject: CN=3c6f5798374e8fa77b6849a228414cd986b4a8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9e:81:81:ed:e4:fd:90:03:50:13:67:9d:8d:
76:c5:74:9d:c7:a4:5a:c1:1b:b1:5e:a9:59:f7:8a:
45:6c:37:df:ac:8f:3d:c4:15:4f:1b:42:4c:37:30:
bb:55:94:90:af:2f:38:03:ff:81:45:3a:d6:c7:f4:
49:95:9c:2d:24:7e:54:49:a0:4d:4f:c5:c3:66:e0:
01:3d:42:0f:c1:b7:0e:54:82:31:7b:4c:f7:42:5c:
48:4a:05:5f:9d:a8:01:f3:75:34:03:6d:36:59:19:
3d:e2:3e:15:10:fd:5f:ea:bb:35:70:b5:d0:61:f9:
03:37:85:70:46:21:aa:be:ce:51:2c:73:f3:8a:98:
c0:08:a2:3b:a5:71:2a:55:d4:f7:9f:de:da:98:e2:
e0:5f:7c:c9:06:d6:94:34:28:2e:20:4c:30:81:3c:
81:52:8e:54:5e:11:73:25:c3:7a:4d:42:48:c1:f7:
5d:18:84:56:ba:a4:a2:11:82:53:b3:0f:d3:38:64:
ab:69:1f:6b:44:8a:a4:8e:3b:99:84:27:57:8a:32:
34:67:b6:64:d2:ac:73:1d:72:71:c7:12:c3:da:70:
a3:8c:e4:e1:ce:a8:57:04:87:f0:c9:9b:15:3f:d9:
27:06:22:bf:8f:ea:de:68:11:16:7c:3e:99:35:a2:
76:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6F:57:98:37:4E:8F:A7:7B:68:49:A2:28:41:4C:D9:86:B4:A8:B4
X509v3 Authority Key Identifier:
keyid:F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:5a:39:0f:49:d0:05:b2:ba:5c:fd:ba:08:dc:ed:00:ba:cb:
9d:dc:11:c7:02:00:7b:f8:13:98:36:00:ef:46:1f:e6:09:f1:
78:79:a7:f9:3c:df:58:0c:1d:2f:e7:45:cb:ad:bc:5e:d2:19:
1f:bb:8a:66:72:65:ec:46:62:03:70:74:0e:e6:6e:f4:ac:fc:
e0:d3:1f:7b:fa:e5:30:86:1b:57:04:0d:e5:4c:75:89:83:09:
67:71:30:fd:d5:6e:53:ae:41:92:49:51:78:4c:c0:42:03:03:
ec:f9:23:c3:ab:5f:a8:42:a0:6e:46:b2:8b:49:68:0d:aa:80:
6f:6e:38:4a:32:64:99:c1:dc:4a:4a:68:f4:41:2f:f2:9c:af:
4d:de:ef:36:67:58:75:68:c9:63:f6:79:34:53:b7:d2:97:6a:
50:53:41:26:c0:8d:1f:9a:0b:7b:5f:97:c7:e5:fe:68:a4:1c:
36:dd:7d:7c:79:83:8a:5d:79:6e:c9:06:02:59:87:bf:2e:bb:
e6:5b:0d:3e:5e:6d:14:70:26:e2:f2:29:c6:7b:42:c8:56:a7:
06:fd:91:f2:04:1f:94:72:22:55:cc:bc:84:06:53:ed:34:3e:
55:78:30:4e:af:17:e2:d8:6e:ba:14:b9:7e:1e:0e:8e:f4:04:
26:a5:44:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:41 2025 by rpki-client