Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
File: QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft (raw, json)
Hash identifier: DCBvtGdCxWPnPP5M6g0X59AAIk2rJAFZAtGkKgo7nSM=
Subject key identifier: 4F:21:04:4F:DF:33:BD:25:9C:1C:A2:0E:2E:24:2A:F2:D5:1E:CD:86
Authority key identifier: 42:B4:C7:9A:22:A3:FE:98:7E:F3:19:08:CD:44:FF:81:E9:B1:AC:F4
Certificate issuer: /CN=42b4c79a22a3fe987ef31908cd44ff81e9b1acf4
Certificate serial: 01974F33685E6A46F57898505C1763F3FAE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 11:00:58 +0000
Manifest this update: Sun 08 Jun 2025 11:00:58 +0000
Manifest next update: Mon 09 Jun 2025 11:00:58 +0000
Files and hashes: 1: QrTHmiKj_ph-8xkIzUT_gemxrPQ.crl (hash: ZPF6qqLXipRZnz6cKYpyc9lJtt6fwV8xiUmMp7bQkUk=)
2: YAyk3zFlveiyrktJmuMDObuicGM.roa (hash: X7im5gEfQxzJ+2uFiNxaGzJ0zO2RD2TZsOAKFKiJMJs=)
3: umFBgs224fvHmv7UVIkmk-cu2a0.roa (hash: LWAYsABtQECbCV3sDGlu7B0OwEh6Yr4LZp65O/U8FCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:33:68:5e:6a:46:f5:78:98:50:5c:17:63:f3:fa:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42b4c79a22a3fe987ef31908cd44ff81e9b1acf4
Validity
Not Before: Jun 8 11:00:58 2025 GMT
Not After : Jun 9 11:00:58 2025 GMT
Subject: CN=4f21044fdf33bd259c1ca20e2e242af2d51ecd86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:83:d3:10:26:10:b0:6f:a3:0b:70:61:c2:2e:
cd:9e:f3:17:4a:51:45:7c:8a:02:39:7f:0e:9f:3d:
d0:79:f6:ce:a2:28:36:b7:f7:bc:6c:92:9b:18:8e:
a4:cd:b1:61:16:92:39:4b:e3:47:62:a2:47:93:b9:
6d:6f:d5:f7:2d:03:6e:0b:b9:c9:a7:e1:63:37:2f:
74:52:08:d8:8e:78:db:72:1e:cb:5b:b6:b2:91:ab:
ab:89:96:9f:f7:c1:ab:d3:52:43:7e:1f:49:86:6b:
c5:7b:52:26:d2:9b:fc:d2:57:56:53:97:10:28:db:
88:28:34:66:42:41:59:e4:79:0d:3f:40:96:aa:7a:
3f:f7:78:96:e6:81:11:79:d3:3d:1c:bc:6c:61:95:
41:4b:38:b4:31:02:8c:dc:84:ce:36:68:37:2b:8f:
5b:ce:eb:18:e4:dc:df:c7:c3:ee:00:b1:45:6d:45:
82:ef:c1:2a:19:29:ad:eb:b9:60:16:a2:34:07:96:
d3:56:6b:28:52:30:6a:39:cb:56:72:ff:17:b9:65:
56:e2:e4:a2:36:57:db:1e:88:2a:83:7d:54:d0:60:
12:d9:19:26:9d:84:34:fb:43:36:e5:88:76:e6:4a:
d7:5e:a0:58:d0:2f:5e:02:c5:5f:4e:71:30:50:2c:
82:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:21:04:4F:DF:33:BD:25:9C:1C:A2:0E:2E:24:2A:F2:D5:1E:CD:86
X509v3 Authority Key Identifier:
keyid:42:B4:C7:9A:22:A3:FE:98:7E:F3:19:08:CD:44:FF:81:E9:B1:AC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:1b:f4:95:96:c3:43:fa:c4:79:88:fe:eb:39:86:56:b1:d3:
c0:f3:ad:70:20:5e:a8:85:ae:1a:3b:50:66:64:37:6c:50:47:
7b:05:7a:a3:f8:79:2d:e1:cd:22:c1:43:6b:cd:9f:c9:c9:0e:
f3:be:7a:9b:88:ad:3d:2f:c4:f9:76:f4:c1:51:59:e5:a6:af:
4d:e0:2a:cf:e1:c0:99:f9:74:9d:89:88:bb:ee:85:6f:96:45:
f7:3a:cd:99:0e:d7:00:54:08:82:91:c9:f7:1d:f8:a8:65:96:
79:86:d6:cf:2a:92:bd:0b:06:9a:f6:b5:e8:4e:70:0a:66:56:
74:03:2d:30:4a:6f:4c:88:f0:6f:a0:d8:77:82:f5:23:e1:7c:
ad:d8:99:a2:03:12:9b:ac:12:cb:56:1e:e7:b2:94:8a:43:65:
dd:3f:bf:c6:fa:d7:a0:7c:c3:5f:b0:66:dc:da:9a:4f:5c:64:
fa:b0:3d:1e:9f:aa:fb:20:66:af:59:84:a0:f8:25:5b:81:06:
06:d1:90:39:2f:10:27:8e:bc:54:6c:a0:8b:de:7a:6f:bc:89:
3f:62:34:38:32:32:f3:92:35:8e:5f:ac:fc:11:26:39:b2:2d:
73:d4:5e:fa:7a:8d:33:35:41:68:1d:2f:a7:ce:06:fe:8d:e2:
50:c1:cc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:10:02 2025 by rpki-client