Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
File: _Q7wQPukW857BxY0lc316FB3kZ0.mft (raw, json)
Hash identifier: oDiuRjwtnbnlrD2H2A/Sw6ZEjPoi76hnAXls2Z4JiH8=
Subject key identifier: 7A:0E:D9:BE:48:6A:45:15:E6:1F:E9:33:8A:37:AE:07:82:3E:99:02
Authority key identifier: FD:0E:F0:40:FB:A4:5B:CE:7B:07:16:34:95:CD:F5:E8:50:77:91:9D
Certificate issuer: /CN=fd0ef040fba45bce7b07163495cdf5e85077919d
Certificate serial: 019753B4D5F63348451B3C07A652C56EAEBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
Manifest number: 0C18
Signing time: Mon 09 Jun 2025 08:00:49 +0000
Manifest this update: Mon 09 Jun 2025 08:00:49 +0000
Manifest next update: Tue 10 Jun 2025 08:00:49 +0000
Files and hashes: 1: BrNhX11GN3gzWV-434wlzWriATQ.roa (hash: e/gkiYTr4M+ZdV4GBEAw4FBFr5Cgb0NfH0gUAD5dMJY=)
2: _Q7wQPukW857BxY0lc316FB3kZ0.crl (hash: OZ8357hnA1zYARge5MAP+q0hIOhCYw+b37pRd5mJTnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:b4:d5:f6:33:48:45:1b:3c:07:a6:52:c5:6e:ae:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0ef040fba45bce7b07163495cdf5e85077919d
Validity
Not Before: Jun 9 08:00:49 2025 GMT
Not After : Jun 10 08:00:49 2025 GMT
Subject: CN=7a0ed9be486a4515e61fe9338a37ae07823e9902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0d:a4:a6:b1:cf:2d:35:33:7a:17:ea:d7:9e:
24:f0:69:83:21:c0:87:1a:67:9a:a1:8a:7a:ec:69:
c7:67:60:4a:55:95:38:45:9a:7f:04:1a:ed:d0:94:
e3:e4:4c:08:7a:10:f7:98:72:7a:78:91:f6:7a:e3:
7e:14:8d:17:3b:7b:12:55:51:43:36:58:76:8e:c3:
2c:16:8a:d2:25:eb:0a:07:3b:a9:db:51:c1:39:46:
35:9d:aa:01:dc:d1:43:3d:a2:6d:cc:98:cf:af:8e:
4e:83:51:0a:b3:2e:f2:59:70:ff:e2:26:6d:6b:95:
e6:55:70:f4:16:88:a8:a7:6a:11:0e:3e:74:80:1d:
ce:da:87:8d:e1:62:f7:a2:9f:ec:1c:65:fc:aa:55:
c0:fe:4e:b3:bc:9d:3e:74:27:cb:00:12:e2:71:b2:
d8:0e:9d:de:09:a9:7d:aa:b0:f0:42:8a:57:9d:1c:
d2:2f:36:15:3b:76:0c:6c:6b:c9:90:d6:3f:26:da:
85:9f:a5:62:08:bb:9d:f7:d8:33:58:df:0e:d8:7c:
be:15:af:c4:1b:59:fe:fe:01:39:93:6e:b1:d8:43:
bb:5b:ae:d7:dd:61:1b:2a:7e:d3:c5:f3:d0:32:3c:
65:b2:dd:9b:a0:ea:10:74:18:4c:28:97:fd:9a:e8:
eb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0E:D9:BE:48:6A:45:15:E6:1F:E9:33:8A:37:AE:07:82:3E:99:02
X509v3 Authority Key Identifier:
keyid:FD:0E:F0:40:FB:A4:5B:CE:7B:07:16:34:95:CD:F5:E8:50:77:91:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:83:5a:93:f3:48:17:d8:ba:d9:31:64:60:09:ff:68:3c:f2:
da:06:a6:98:ef:13:8f:93:71:7c:5c:7c:62:5c:d3:ca:30:2d:
36:12:81:39:d2:dc:41:e1:f4:d2:97:ee:8f:0b:80:3a:a4:b3:
52:4a:eb:5e:eb:00:29:80:ef:45:69:36:a0:32:24:53:23:c5:
15:8b:e0:e9:91:af:48:6b:cf:38:45:92:be:b5:7d:d7:0c:25:
23:60:1e:78:ca:8b:6e:15:63:27:d4:84:c9:4e:8e:ce:fb:52:
97:a5:26:2b:9e:d7:1a:05:28:59:e0:bf:90:39:17:5d:30:40:
eb:e1:4e:c1:ba:35:10:b4:ba:20:5e:0f:a3:d7:b0:91:6f:55:
31:1d:42:32:d3:6b:29:53:7c:3c:20:97:75:60:65:82:6f:bf:
33:87:33:d9:33:02:c8:e6:0d:52:b9:bb:fe:9d:6f:c4:01:27:
f1:6c:4c:92:bf:1b:01:b4:be:01:ee:30:dc:3c:2a:05:44:6d:
bb:11:15:8a:ba:ed:fb:13:c9:33:3e:6f:91:69:a1:e4:ed:a3:
8c:5c:17:9c:5e:57:8c:bd:58:09:45:32:16:6a:24:e9:9d:d5:
54:4b:32:dc:cd:1f:e4:3b:4d:88:07:d9:98:7a:18:a1:08:25:
4c:80:78:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:59:32 2025 by rpki-client