Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
File: Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft (raw, json)
Hash identifier: QrG9Jw2eUEP8WvxSNLMjpi2c9INzHRHA+ehlVTvYmDE=
Subject key identifier: B1:26:F1:F3:DE:42:1B:CC:7E:68:89:A9:01:AF:BA:07:54:91:CE:A6
Authority key identifier: 43:9D:D1:CE:AE:0F:65:D6:2A:2E:B7:C6:7C:48:DD:43:0E:7D:A6:96
Certificate issuer: /CN=439dd1ceae0f65d62a2eb7c67c48dd430e7da696
Certificate serial: 0197D2BCDFB25D9982FDB6E1ACC3C5E2DA2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
Manifest number: 03FC
Signing time: Fri 04 Jul 2025 00:01:22 +0000
Manifest this update: Fri 04 Jul 2025 00:01:22 +0000
Manifest next update: Sat 05 Jul 2025 00:01:22 +0000
Files and hashes: 1: Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl (hash: jToehyATn+R7knMV1/mCCkkcIoNc3Vh6VOEQwH3k7UI=)
2: oskd316tBTAUTSHf0wsKURHXyDc.roa (hash: IsLUQsw+ev9Voy8iNeiPun8V5Wlg4SPwA/B548IB55M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d2:bc:df:b2:5d:99:82:fd:b6:e1:ac:c3:c5:e2:da:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439dd1ceae0f65d62a2eb7c67c48dd430e7da696
Validity
Not Before: Jul 4 00:01:22 2025 GMT
Not After : Jul 5 00:01:22 2025 GMT
Subject: CN=b126f1f3de421bcc7e6889a901afba075491cea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3c:42:e4:fc:fd:52:15:1d:3b:5a:9a:08:80:
ce:9f:16:a0:7f:b1:66:06:90:97:71:b2:8e:24:6b:
85:ab:d2:fc:fb:a5:c9:ad:15:7f:87:56:c3:d6:22:
c6:c5:de:ef:ea:c5:7f:e0:38:c1:6c:93:e1:1d:2e:
0e:11:93:21:bc:a4:72:98:ef:11:86:0f:82:14:fe:
a0:a6:c1:29:9a:fb:08:fa:97:5c:d0:07:dc:cf:2e:
5f:f2:07:8e:91:7d:9d:f2:95:05:81:91:ab:66:2f:
65:7a:88:39:22:ca:33:f7:02:08:b6:68:91:7a:f1:
50:d1:fb:97:d4:b9:e9:f2:85:fc:a4:57:a7:67:28:
93:1c:28:fb:f6:ac:86:58:62:90:84:dc:53:8e:a1:
b2:6d:00:39:0c:8e:6a:0e:f4:ac:b2:ad:65:3c:fe:
b8:92:79:4f:d9:9a:92:fe:f9:b8:81:c2:34:df:2e:
35:41:57:ca:1d:23:c8:c7:80:57:30:60:c1:51:14:
f0:c8:82:a5:0b:22:94:97:18:fd:50:0a:8c:f6:bf:
5d:f4:2d:05:6e:de:ab:1e:9a:cc:13:6e:87:ad:34:
ed:61:58:82:63:0d:d2:c4:1f:b9:fe:51:e5:c5:db:
bb:f9:8a:cb:07:70:77:a8:d3:31:5c:4a:aa:cd:9a:
fe:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:26:F1:F3:DE:42:1B:CC:7E:68:89:A9:01:AF:BA:07:54:91:CE:A6
X509v3 Authority Key Identifier:
keyid:43:9D:D1:CE:AE:0F:65:D6:2A:2E:B7:C6:7C:48:DD:43:0E:7D:A6:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:37:a5:6b:cd:ba:40:5e:fd:95:76:3d:2c:e2:ec:bd:ac:49:
c9:b1:34:bb:99:ec:3c:05:2c:6e:6a:86:f8:d0:d9:94:72:d9:
83:bb:35:bb:d2:d0:0d:6d:1e:22:79:5b:fe:55:56:71:9a:a9:
0d:a0:33:a0:22:ce:fe:1c:a8:5d:97:34:63:b8:52:3d:0d:df:
2e:82:d2:2f:ab:65:a6:ca:83:01:4b:ff:d8:02:6f:95:23:eb:
b7:d8:c1:02:32:bd:d2:e9:b6:93:83:64:ca:67:8f:ea:b2:5f:
d3:fe:9f:5b:9d:6a:58:5a:41:7d:d1:de:40:fd:c6:cd:7e:f1:
b6:d8:35:58:ba:84:51:36:b3:90:e7:f3:16:f4:1a:23:e0:42:
5c:4e:74:38:cb:6b:76:47:51:58:b2:19:6d:c8:f4:1d:7a:64:
42:b1:cc:0e:58:38:c3:3e:38:18:4c:b7:b2:47:51:a4:4f:0d:
b7:b3:b5:a9:01:cc:98:a8:ed:a7:4e:40:d6:6b:5a:57:c4:90:
76:d2:37:8b:24:16:de:ac:c4:b5:0b:84:05:78:3b:94:33:ae:
60:d0:11:65:83:28:46:2b:8e:fe:4f:43:7c:ee:72:4b:65:78:
d1:26:45:1f:19:6c:26:c1:bc:6e:8f:f0:e1:29:c3:92:af:6c:
4d:d5:c8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:34:39 2025 by rpki-client