Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
File: h_Qa4HeeN978abKlsPerj9QM0-c.mft (raw, json)
Hash identifier: lVt5zVc+1BxSUWrHoxPuHq6DAc7YbEJ3ZpR8ngVn50Y=
Subject key identifier: B0:31:B7:91:36:18:EB:91:0E:22:C1:CB:50:A4:34:94:56:F2:B5:31
Authority key identifier: 87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
Certificate issuer: /CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Certificate serial: 0197440AAE54697264D95C08F8B5E0C96AED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
Manifest number: 157D
Signing time: Fri 06 Jun 2025 07:00:39 +0000
Manifest this update: Fri 06 Jun 2025 07:00:39 +0000
Manifest next update: Sat 07 Jun 2025 07:00:39 +0000
Files and hashes: 1: 9a42cuWC_BNDA4DIJ7JykE7wjb4.roa (hash: qRT9zf7xfXIljPHzFl0mxSNGtfeCmpUyqkEyE4RnCGQ=)
2: KqEu5jotrlVlkvOlW0cERo3_YvU.roa (hash: Ef6oWYOyhbekzNl2fidznurlFufl1VnCP1Vvg7sBYuQ=)
3: Ms_pDtAjK9tb1e5h7bLoQWbyHs8.roa (hash: cL+zxxB8p9BDEROGB77OysHEV8P4dX2U5M5xqP9Q6C0=)
4: h_Qa4HeeN978abKlsPerj9QM0-c.crl (hash: QTs2jt0+wMtn1DeUZB/IKbRFQ4gxvZNXK+sFpUArnEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:44:0a:ae:54:69:72:64:d9:5c:08:f8:b5:e0:c9:6a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Validity
Not Before: Jun 6 07:00:39 2025 GMT
Not After : Jun 7 07:00:39 2025 GMT
Subject: CN=b031b7913618eb910e22c1cb50a4349456f2b531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:49:52:b7:3f:fa:68:97:86:70:e9:7c:3c:5a:
d8:2b:36:34:50:f4:d5:c5:05:56:35:38:88:98:31:
de:f5:fc:1d:b7:6e:31:c4:7b:0b:6b:3b:59:02:a7:
6b:40:b5:4b:b8:91:a6:5d:b4:23:01:05:6a:8f:01:
c1:9e:cb:67:d0:3e:42:76:75:00:a4:d7:d1:f7:88:
38:fe:70:38:d8:24:b1:1b:62:b0:00:dc:01:9c:64:
dc:5f:66:c6:d6:a5:65:ef:37:4c:80:0f:7d:7f:56:
f7:e3:1a:c7:ac:c6:6d:cd:14:52:60:4c:55:59:2f:
16:39:f2:d7:66:39:dd:4b:ac:95:bf:6b:b9:a6:f9:
c2:a9:e4:e2:eb:98:ff:9f:1b:6c:6a:ce:ef:63:4b:
af:a0:dc:6e:0a:4a:d2:13:3e:63:a5:f1:53:e3:d6:
d3:d9:0e:8a:1d:80:e6:52:b3:37:0f:07:3a:bd:bd:
3d:28:2f:a4:b5:b9:0d:0f:35:8e:67:b9:c9:9d:3d:
8c:a5:36:9c:b6:6e:86:ad:e2:66:53:5d:07:ec:72:
9f:36:4e:b2:be:c8:05:a2:2c:16:04:66:ed:91:87:
f8:99:57:31:d1:75:da:65:e8:1c:09:90:cf:26:58:
da:91:64:36:d4:ab:dc:e6:8f:96:86:e0:db:bb:08:
a8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:31:B7:91:36:18:EB:91:0E:22:C1:CB:50:A4:34:94:56:F2:B5:31
X509v3 Authority Key Identifier:
keyid:87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:53:9f:c9:f5:6d:5c:cb:60:0c:20:5f:a8:cb:75:bd:ae:df:
ad:02:56:0e:83:d3:d8:5a:8c:f5:ae:80:df:79:6c:58:bf:47:
f5:b5:02:3b:de:e6:59:e4:1f:fd:ac:ff:90:c9:f7:9f:aa:75:
bd:07:e5:6c:a7:21:79:b3:cf:ac:a9:5a:68:3e:4f:86:77:66:
33:e1:7b:bb:83:98:27:fb:ad:4a:bd:1d:86:cb:3e:58:6d:c8:
d0:82:36:ca:71:42:b2:ed:83:10:60:9f:01:d4:8e:f4:74:18:
3e:9e:39:ce:1d:32:7b:6e:54:19:f6:36:33:28:e4:14:7f:db:
03:ac:67:a4:c3:03:72:11:b2:4a:5d:49:cf:a6:43:80:74:df:
6b:12:91:ba:c2:71:1d:a9:f8:33:65:e7:b6:10:f5:9b:3e:5c:
c6:59:09:76:8b:b4:53:3c:7e:d9:9f:08:eb:68:2b:55:ad:5a:
60:0b:41:ca:40:6d:5c:56:2c:a5:64:41:18:bf:c8:ff:40:db:
c2:93:bc:56:fc:2f:25:88:00:45:d1:a3:73:26:37:38:4b:70:
73:89:13:2d:e2:34:ad:19:39:ac:b0:3f:9d:e7:03:c1:cf:64:
4c:0b:0f:1c:6b:3f:63:f3:8e:d1:51:e0:5a:62:1d:7c:44:08:
db:d0:25:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:04:38 2025 by rpki-client