Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
File: 1QzaSMNeVOuAJXWqpAjM5XmSchY.mft (raw, json)
Hash identifier: zEROnURgX7kmpEuJ430jO+WOd/9zZofym6s/g/dmSnc=
Subject key identifier: ED:56:6F:00:77:7F:BB:DA:49:44:3B:C6:D6:4F:CD:CA:F3:49:29:E4
Authority key identifier: D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16
Certificate issuer: /CN=d50cda48c35e54eb802575aaa408cce579927216
Certificate serial: 019749310CB77568A6AB20F7A3835E67F1F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
Manifest number: 05BB
Signing time: Sat 07 Jun 2025 07:00:40 +0000
Manifest this update: Sat 07 Jun 2025 07:00:40 +0000
Manifest next update: Sun 08 Jun 2025 07:00:40 +0000
Files and hashes: 1: 1QzaSMNeVOuAJXWqpAjM5XmSchY.crl (hash: Uw8+8+Yy4BG8eZyLTiOXuRyYxaFfke0nYK8xfO0mx+k=)
2: hth3rJjFWs6NUkK-o0tTbHyr4L0.roa (hash: Vn4AMxs64boyWbgENvm4Of96GFQtj+G6HAjnQ0teAh4=)
3: lPDpfx3Te7zjZCAdY5UFziIAeNM.roa (hash: 5bkDE5sFGFyGe5UEk23hluwD8i8ffdDbAYDQQoPB27A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:0c:b7:75:68:a6:ab:20:f7:a3:83:5e:67:f1:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50cda48c35e54eb802575aaa408cce579927216
Validity
Not Before: Jun 7 07:00:40 2025 GMT
Not After : Jun 8 07:00:40 2025 GMT
Subject: CN=ed566f00777fbbda49443bc6d64fcdcaf34929e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:69:d1:ce:71:5c:1b:82:eb:1f:fc:03:48:8f:
f0:5e:33:b2:f0:62:1a:68:c1:af:e6:49:66:64:6c:
2c:fd:5a:91:e5:a3:e3:e8:fa:58:69:90:29:b8:b6:
1d:ae:92:ec:4f:ab:3e:70:01:d7:19:a4:36:93:a7:
37:3a:e8:0d:58:b4:b4:1f:e9:fa:7e:08:9e:da:37:
f5:24:22:ec:38:4f:3b:8d:7a:e9:e0:74:7f:5d:f4:
d5:c3:97:2e:d3:ef:38:d5:9c:75:06:91:c6:ce:49:
c8:de:bc:2f:e2:b3:e3:16:b7:f0:00:70:97:a5:d8:
80:8d:0d:ac:92:d7:96:42:f1:08:eb:5a:26:bc:54:
2f:5d:75:d3:70:39:16:35:e1:98:5e:b7:59:0d:94:
b5:c9:6c:06:c7:ea:4c:ff:a9:a8:b4:5b:44:00:fd:
85:d8:23:41:c2:5c:d4:ab:96:ea:33:22:29:33:82:
09:0f:ef:0a:76:d5:23:60:b4:f9:e1:a1:0b:5c:17:
91:7e:1d:95:dc:33:73:65:5d:fd:6f:cf:d4:13:c5:
ce:16:c7:bd:87:d4:6e:0c:df:32:ff:a5:de:5a:93:
a4:11:d6:7d:a4:58:24:8e:90:05:2a:a2:4a:e5:5d:
ee:04:ce:2d:60:6a:c2:70:4e:ee:b2:ef:e4:78:8c:
33:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:56:6F:00:77:7F:BB:DA:49:44:3B:C6:D6:4F:CD:CA:F3:49:29:E4
X509v3 Authority Key Identifier:
keyid:D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:f2:ac:c8:e1:07:73:b9:e6:69:0d:b3:ec:00:15:f6:d3:4e:
b6:4f:33:96:6e:04:d0:e7:dd:8f:2f:74:bd:e9:81:19:61:89:
e1:26:4b:f0:96:39:cb:ac:7e:0a:c3:0f:e9:d8:fa:8c:d2:11:
99:84:70:18:2c:32:58:c8:69:56:9a:ef:58:12:2d:88:a2:ea:
38:19:d6:60:1a:91:43:3a:75:ec:5e:a7:f8:2e:67:dd:00:d2:
7b:9e:e3:40:67:15:67:37:df:28:93:37:89:eb:61:1e:0a:4a:
bd:0c:9d:d8:1e:58:f3:18:eb:81:04:5b:ad:89:b7:72:f9:f9:
de:e9:df:88:ca:26:f7:f3:57:d2:95:cb:ff:9e:fa:5d:7e:97:
5a:d7:1b:1d:dc:3a:0b:fe:31:9a:4e:70:8b:9e:c0:2f:ac:99:
48:a0:e5:6b:19:73:62:a9:3f:40:eb:c6:d8:99:97:28:c2:3d:
ce:38:8a:ba:c6:4b:f1:8d:31:34:78:ac:ed:1e:0d:2a:9c:37:
ca:0c:81:14:94:24:e0:39:fb:29:df:8a:6e:11:39:93:8c:8f:
fc:6d:84:29:3e:3d:c3:d1:57:8a:4d:32:c0:79:ff:c5:46:e8:
34:e8:3f:b1:d3:f7:91:55:c1:69:bb:e6:12:3d:01:40:e3:3d:
bb:5a:cc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:43:18 2025 by rpki-client