Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
File: qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft (raw, json)
Hash identifier: blpfp1QJjKqKck+tepyOWA7O0w8H1+eLCVDrc4M6AVU=
Subject key identifier: 76:51:76:72:C9:88:E4:94:E1:C4:19:98:C5:BB:22:AD:A3:82:17:95
Authority key identifier: AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1
Certificate issuer: /CN=ab1c29c95d248cbffa744ab34e47eacca73550d1
Certificate serial: 019750B3DEC39C0DB0F74FE3488E2F20D416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
Manifest number: 096B
Signing time: Sun 08 Jun 2025 18:00:54 +0000
Manifest this update: Sun 08 Jun 2025 18:00:54 +0000
Manifest next update: Mon 09 Jun 2025 18:00:54 +0000
Files and hashes: 1: hofEb4DxTmo8-bHoq5_u1SjHWxg.roa (hash: hCqP+IxiyDQrp0AjJaVxMj1A1H2iMztGikQq20Whf3E=)
2: qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl (hash: KIp4Hk96O07fQv6dd3DyJ7poIvms/9UXZTQJmrkAPmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b3:de:c3:9c:0d:b0:f7:4f:e3:48:8e:2f:20:d4:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1c29c95d248cbffa744ab34e47eacca73550d1
Validity
Not Before: Jun 8 18:00:54 2025 GMT
Not After : Jun 9 18:00:54 2025 GMT
Subject: CN=76517672c988e494e1c41998c5bb22ada3821795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:7e:10:a2:62:77:68:7c:05:69:45:ff:00:9f:
77:a4:62:3d:48:e3:28:89:20:d5:4b:73:2f:87:21:
e7:68:e4:de:8a:82:be:a8:4d:3a:0b:ce:78:de:9d:
6e:30:86:b3:1d:e1:ca:a0:54:2d:8c:1e:4c:b3:31:
ae:22:fd:71:6b:26:ec:a1:1f:3c:d4:ac:5c:b7:76:
d0:76:94:fa:70:ed:18:3c:f5:e7:54:ce:2e:9d:ba:
13:c0:0d:93:07:3f:94:ec:b6:72:9b:12:64:89:1f:
ca:82:b9:6a:71:cc:a1:95:c4:3c:a9:98:80:87:b6:
13:1b:db:fb:e3:27:19:da:55:83:dc:a7:a1:48:c1:
14:48:be:ae:a7:72:03:60:47:fd:08:f3:8a:ef:46:
6b:eb:2d:f6:7f:23:72:24:de:4f:7b:f0:81:07:ea:
0b:31:d7:2a:5f:cb:70:0a:9e:3a:a3:ef:b5:cf:db:
44:64:94:3c:34:f4:e5:6e:49:8b:54:7c:de:f6:64:
b0:f0:7e:7a:61:25:a8:56:51:71:76:97:7d:e3:e0:
3d:35:d9:9c:9a:38:35:27:a9:6d:87:2e:52:0c:d1:
09:8d:02:ec:ce:a5:e2:38:99:02:ba:c8:32:8c:7b:
ca:24:0d:bf:30:d1:4c:ae:42:21:42:d9:ae:e7:20:
70:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:51:76:72:C9:88:E4:94:E1:C4:19:98:C5:BB:22:AD:A3:82:17:95
X509v3 Authority Key Identifier:
keyid:AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:3c:fb:dd:5d:e2:16:f8:78:3d:07:ac:c8:c5:c9:f7:6b:d3:
ec:5b:92:11:94:61:71:59:4a:eb:67:86:af:3b:b4:c8:24:f5:
7e:92:c5:07:bb:8f:c0:ae:f4:dd:2a:fd:e5:34:59:69:79:50:
60:87:5c:30:95:ff:cd:dc:fa:c7:e4:b1:c1:0f:60:24:16:b1:
57:2a:83:f2:2b:5d:91:20:12:08:05:fe:f0:25:ea:93:82:a5:
b9:9d:56:9f:14:cd:a8:eb:68:77:e5:ca:cf:52:34:5f:58:61:
e2:ff:6a:58:0a:05:2a:8f:8d:c1:36:46:de:86:33:b0:48:e3:
03:ec:c9:64:76:a4:91:86:2b:2d:84:7b:28:82:5a:67:16:bb:
7d:56:dd:6c:da:1d:a9:cc:3c:4c:b1:fd:8b:c2:50:38:21:01:
8e:a2:e4:10:ed:7b:e9:70:9a:0b:f5:6d:a9:d5:0e:28:d9:fb:
8c:29:ea:79:59:22:ea:62:a8:7a:b2:db:c9:88:11:d1:f3:2a:
35:bb:e0:4c:5e:0b:2b:36:a3:25:f0:5c:66:60:64:8f:e8:4a:
e8:ed:75:31:b3:1e:d5:d5:7d:39:98:c3:7f:89:43:8b:e5:9f:
8e:1a:b9:93:d9:91:79:88:ae:26:d3:fd:4f:be:c9:75:1a:1a:
ef:f9:83:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:26:59 2025 by rpki-client