Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
File: Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft (raw, json)
Hash identifier: 9tuc1HHnduPdBUfcgNz0rhKcbxn6NjswwXN1CeGdthU=
Subject key identifier: BD:0A:9F:2C:BD:E3:7E:55:34:66:0E:60:CA:8A:E8:12:0F:BB:29:AA
Authority key identifier: 42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22
Certificate issuer: /CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822
Certificate serial: 01975FB8B50E59156F07CB02625F09E3A94F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
Manifest number: 0477
Signing time: Wed 11 Jun 2025 16:00:29 +0000
Manifest this update: Wed 11 Jun 2025 16:00:29 +0000
Manifest next update: Thu 12 Jun 2025 16:00:29 +0000
Files and hashes: 1: Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl (hash: GVaaOk8MuHgEQPHJgDQ6HSoopHFlwtfISEBoMVhhM+8=)
2: hlgUeTS6IBRaopiSVrOUgC-_wJs.roa (hash: LdBAJrgqIH+Vij0f6svoaKnmeA18Z44APvKHCC4L9FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:b8:b5:0e:59:15:6f:07:cb:02:62:5f:09:e3:a9:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822
Validity
Not Before: Jun 11 16:00:29 2025 GMT
Not After : Jun 12 16:00:29 2025 GMT
Subject: CN=bd0a9f2cbde37e5534660e60ca8ae8120fbb29aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:70:7b:43:bd:e9:0b:f2:bc:76:27:48:00:e5:
3e:e0:d6:30:5b:7d:11:a8:d3:c0:90:0a:08:f8:03:
bc:62:02:c1:f1:38:be:5a:e5:41:c2:3e:00:69:ed:
3d:f4:a7:06:59:aa:80:ad:ec:39:70:54:75:0a:e3:
07:64:27:85:70:cd:72:7e:50:e4:51:23:af:d0:44:
2c:9e:8b:e5:48:d7:7f:92:ad:e4:4c:ef:cc:8f:26:
f5:ae:72:0c:ab:cb:58:8b:ff:0a:37:50:21:59:5f:
2e:81:fb:25:23:52:3a:a8:64:db:cc:41:ab:c5:d4:
cc:a9:e6:1a:23:58:53:b9:49:fe:28:32:58:de:b5:
c9:6c:85:63:ed:56:cc:ae:9b:74:3a:c2:8b:85:5e:
c8:53:21:f5:0d:fd:a1:33:1c:61:8b:f0:4f:e6:86:
ae:19:df:c3:50:1f:50:ff:2e:25:17:a6:3b:84:ec:
16:bf:d6:a9:fe:2e:a4:00:f1:20:90:13:7e:d4:72:
f2:67:3a:fd:ce:fc:d6:86:70:68:22:b0:ca:9d:e3:
78:38:6c:ec:a5:a5:91:3a:2c:bf:22:30:0e:87:de:
61:7e:d0:1e:84:22:30:75:86:71:7c:43:d6:fc:75:
46:a5:24:c1:d8:fe:52:15:27:14:7a:27:a9:44:52:
fd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0A:9F:2C:BD:E3:7E:55:34:66:0E:60:CA:8A:E8:12:0F:BB:29:AA
X509v3 Authority Key Identifier:
keyid:42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:37:43:aa:e4:63:06:43:d1:53:59:c1:b5:3b:b3:97:d0:14:
db:7e:66:71:72:00:a3:6a:1f:c4:8c:97:ac:c8:bb:ed:24:1a:
ac:57:ea:82:45:0b:f8:d3:4a:1b:2f:d3:74:16:05:7d:76:b7:
10:8b:de:35:4b:f5:59:e2:45:2a:d4:7d:13:7f:1a:f7:99:02:
17:65:11:56:9b:66:24:59:54:13:d2:bf:b3:1a:c1:11:9c:2a:
9f:61:f6:da:49:4a:ba:23:fa:1b:2d:f6:a9:72:90:88:7e:18:
9d:b4:5c:1c:52:14:72:cc:34:46:7e:bc:b2:3c:d1:76:73:84:
61:f3:0e:48:89:99:fe:07:9f:4e:f1:f9:b1:f3:2a:18:45:98:
d2:b0:00:14:81:8a:95:ca:24:1e:94:90:1a:18:f1:ed:e5:f1:
a2:1f:bc:5a:5d:d8:32:6a:9c:80:11:49:9a:96:d2:f7:c2:8d:
47:1e:24:36:9e:19:b5:6c:e0:42:b2:26:d0:76:4a:93:7f:aa:
96:15:96:c3:58:21:4a:ae:ad:ac:f9:42:b0:db:89:be:5a:1b:
b6:c1:4b:3e:76:0b:c4:c2:81:02:ce:da:d9:80:da:94:4e:32:
a9:95:57:49:25:61:64:23:5c:df:1c:26:f6:47:1b:11:36:7d:
5d:c1:c3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 02:56:28 2025 by rpki-client