Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.mft
File: q5ddtDeN_KfClTuG07GNyLIY7Gs.mft (raw, json)
Hash identifier: dQJ9SOdpcnG2eLoVw39kkc+9bAY/jOFwimNcVE+Cgw4=
Subject key identifier: 69:CD:9F:63:4E:58:65:C4:9E:6C:2F:D6:C2:3F:A0:DD:E2:4C:43:BE
Authority key identifier: AB:97:5D:B4:37:8D:FC:A7:C2:95:3B:86:D3:B1:8D:C8:B2:18:EC:6B
Certificate issuer: /CN=ab975db4378dfca7c2953b86d3b18dc8b218ec6b
Certificate serial: 01974F338A042B6C6B995AD92ECB3F4F7C30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.mft
Manifest number: 0D04
Signing time: Sun 08 Jun 2025 11:01:07 +0000
Manifest this update: Sun 08 Jun 2025 11:01:07 +0000
Manifest next update: Mon 09 Jun 2025 11:01:07 +0000
Files and hashes: 1: RbouPlrvjxMByw-unVzRP4nNXJw.roa (hash: XJEjUdWYmJvOBDOP+ovs4X9aLXbBgk9gR+EZ+bBT2d8=)
2: f1kmm1viP1JpShChN2T-8khwmCE.roa (hash: oA16peDdFaNYYVYRr7l06EBaQutaxn0Ux8cCt1MZLyc=)
3: q5ddtDeN_KfClTuG07GNyLIY7Gs.crl (hash: LoN9s0lXmRiaVjynApx+l2S47ESp6E0+YxcFIEK+Y8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:33:8a:04:2b:6c:6b:99:5a:d9:2e:cb:3f:4f:7c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab975db4378dfca7c2953b86d3b18dc8b218ec6b
Validity
Not Before: Jun 8 11:01:07 2025 GMT
Not After : Jun 9 11:01:07 2025 GMT
Subject: CN=69cd9f634e5865c49e6c2fd6c23fa0dde24c43be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:55:0d:e7:b7:d3:70:70:0b:69:b8:9a:3a:96:
9c:dd:b3:5a:f6:d2:87:7d:9b:bb:9f:79:c7:14:51:
c5:f4:9f:3b:72:67:ff:8c:7b:a0:87:ad:fd:0c:27:
17:40:b3:65:ec:d5:37:4e:26:2a:84:e9:da:e3:f3:
cd:8d:24:22:1c:e7:cc:a5:e9:a7:f0:7c:ca:8f:4f:
fb:57:a2:4b:22:eb:d4:60:53:70:c3:e7:5f:c3:67:
bb:ff:5c:56:8b:73:c2:10:6d:34:60:e4:f8:f9:42:
a2:46:11:f8:67:96:56:71:11:35:ff:01:51:2e:0c:
f3:33:42:d9:e5:77:63:e6:4e:5c:0d:b1:08:67:a4:
fa:09:59:9f:a0:d0:be:10:66:f6:e8:57:41:fd:20:
e7:89:fd:bb:31:a5:bc:fd:8a:6f:35:26:a8:f3:b4:
1e:ff:43:a3:db:fd:8f:28:c4:e3:d6:8c:ef:6f:cf:
27:c0:b0:59:20:ea:f4:91:c0:c8:f5:14:23:28:02:
88:92:e7:7d:8a:d9:d7:f5:5b:39:e8:ca:26:ab:2b:
0b:80:ae:7b:ca:80:c3:22:dc:0b:9c:64:4e:31:28:
06:af:a8:a4:1c:3c:a7:13:cc:2f:37:5b:3f:61:40:
6c:88:f2:44:74:5d:68:4c:af:71:67:4d:1a:fb:9b:
35:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CD:9F:63:4E:58:65:C4:9E:6C:2F:D6:C2:3F:A0:DD:E2:4C:43:BE
X509v3 Authority Key Identifier:
keyid:AB:97:5D:B4:37:8D:FC:A7:C2:95:3B:86:D3:B1:8D:C8:B2:18:EC:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:35:3b:fa:a5:07:00:c3:71:3b:82:e8:7c:3f:60:04:8b:d2:
a0:49:1c:6d:24:41:00:a7:a1:60:6a:26:0d:04:f2:04:a1:f5:
7b:a8:79:50:14:a2:d1:97:c0:21:6e:cc:8d:69:d7:15:43:d6:
7a:82:28:14:da:84:31:fd:e0:49:c2:89:2b:15:09:34:57:16:
79:95:d8:cd:0e:22:5f:11:8e:b4:98:24:9a:8b:66:ce:c4:1c:
08:73:b8:8b:dc:87:0d:b7:d1:51:09:c8:73:27:af:87:bd:c2:
92:dc:63:28:f6:33:67:9e:ed:dc:58:e0:e6:41:6c:27:6a:bf:
4b:55:3d:b5:ec:2a:19:cb:71:81:81:96:9b:c8:c5:26:7b:4c:
9c:84:d5:0f:b2:8d:be:28:2d:93:69:00:b0:6c:40:27:49:97:
08:0b:b6:08:61:d1:59:e8:85:b1:90:a0:5d:42:a1:37:67:5e:
57:8d:60:0f:4f:19:22:fd:6a:a1:ec:5f:b8:a7:01:2e:dc:ad:
c2:83:ce:56:f3:31:a7:c8:13:f5:e1:5e:5e:f9:f2:92:b2:2a:
0b:3d:4d:18:2f:e0:49:5a:09:9b:bd:b9:27:76:96:d5:7a:af:
89:68:ff:19:e8:4a:57:65:51:ff:bd:9e:88:3b:b0:7d:de:72:
fa:d7:98:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:23:57 2025 by rpki-client