Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
File: QVf9g-CODzHnlRRnfAmIEe9pBtc.mft (raw, json)
Hash identifier: 0hlQgMbHpdLU9oWz4V/62fe1oDAxNMCAtpWcDCtjN/Y=
Subject key identifier: 52:C9:7C:18:1C:E2:1C:C8:89:E0:BF:0C:35:62:20:B7:7F:B4:F9:89
Authority key identifier: 41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7
Certificate issuer: /CN=4157fd83e08e0f31e79514677c098811ef6906d7
Certificate serial: 01974A0CB56566CAEEF3FD27DB6051286C1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 11:00:36 +0000
Manifest this update: Sat 07 Jun 2025 11:00:36 +0000
Manifest next update: Sun 08 Jun 2025 11:00:36 +0000
Files and hashes: 1: A2mYhFuHkeEKmVD2JuN0rydVGo4.roa (hash: 3JzN8yPRH0ypmoPucr3BcfstVmiq2JJy2Gpm8fm940k=)
2: QVf9g-CODzHnlRRnfAmIEe9pBtc.crl (hash: 7Rtf0ETli6bhBbLfWw453PDNfzcKSGIcnOG/FnnjoWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:b5:65:66:ca:ee:f3:fd:27:db:60:51:28:6c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4157fd83e08e0f31e79514677c098811ef6906d7
Validity
Not Before: Jun 7 11:00:36 2025 GMT
Not After : Jun 8 11:00:36 2025 GMT
Subject: CN=52c97c181ce21cc889e0bf0c356220b77fb4f989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9e:66:a5:c4:22:f9:0c:18:50:0a:c1:06:48:
ac:08:f0:a0:7a:eb:20:1a:47:e3:ce:61:a7:21:f2:
fc:77:44:e5:0e:f9:9a:8c:00:75:94:75:97:8e:5f:
67:47:b4:88:4b:fd:75:00:38:fc:4f:d5:38:24:a0:
ca:61:18:29:5f:5b:66:da:31:5c:73:38:f1:09:80:
f6:8d:10:c8:e7:2e:e5:1b:61:9d:f1:f3:39:0c:42:
61:7e:02:7e:96:c5:8c:dd:8c:8c:00:e6:b8:a4:22:
a5:78:eb:3b:56:1c:40:f2:82:37:21:53:8b:1e:ba:
14:05:f3:51:fe:d0:65:6b:9d:05:90:d6:eb:ab:6d:
69:a4:43:12:79:16:93:0b:33:11:94:83:87:1b:fe:
67:c5:62:de:56:17:45:5c:79:3c:65:3f:ab:33:e0:
1d:e6:e0:3c:54:8c:65:92:ba:cc:72:dd:86:42:94:
2b:20:55:1f:41:eb:f8:2e:ca:cf:11:3b:2e:80:b6:
83:c9:f7:3a:54:6d:de:13:24:23:d6:a7:58:7d:db:
43:d6:fa:c2:bb:fc:07:a4:95:59:bc:05:9a:46:b2:
bd:56:bd:36:98:27:4e:c3:f6:db:b6:04:13:7b:47:
19:22:c9:f6:82:0c:c0:a7:00:32:b4:42:d4:9e:db:
9d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C9:7C:18:1C:E2:1C:C8:89:E0:BF:0C:35:62:20:B7:7F:B4:F9:89
X509v3 Authority Key Identifier:
keyid:41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d3:85:fd:9e:78:62:b3:a6:49:0f:d9:71:5b:7a:50:c7:ac:
67:ca:68:51:2b:e4:4b:74:e7:c4:82:40:77:ec:e5:c7:b1:01:
7d:67:6e:7c:96:c4:4b:e1:95:7f:af:56:97:86:11:b2:d0:1d:
8d:1c:99:f2:f6:cf:f1:b6:70:13:7b:ec:a6:bc:ba:73:d6:61:
da:f0:9f:c9:30:b6:75:9a:36:b7:02:6d:31:6c:b6:89:71:59:
1c:1e:df:f3:14:51:83:76:98:55:67:16:26:cc:8b:a8:39:79:
e6:e9:33:31:26:43:23:1e:0a:13:07:b8:e4:d0:5b:13:87:59:
51:52:83:df:7f:59:51:76:5b:bd:d2:90:d3:1e:34:15:99:13:
9e:7f:eb:21:23:cb:83:08:f7:ca:88:fc:23:7e:d1:b8:27:db:
ae:87:5b:dd:4e:73:84:06:3a:07:6f:fa:f0:cb:73:e0:8a:b2:
83:e7:d7:5a:dd:80:a5:93:9c:cf:97:f4:20:2c:26:19:e9:78:
9f:57:57:71:2b:6b:8c:0e:12:03:67:9f:89:45:2c:b3:95:1d:
e2:e5:23:a1:7d:e8:52:17:41:6e:8c:ef:17:d9:a4:3a:90:ab:
84:b6:08:fd:36:34:31:6d:91:75:73:67:46:eb:2d:e2:1d:96:
77:2e:c9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:08:11 2025 by rpki-client