Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
File: Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft (raw, json)
Hash identifier: wvcHCkQ5y+Fr9PgP4s6T6ziReSacXqaY6UuS6/vAq5I=
Subject key identifier: 2F:83:B4:F9:D5:B0:4D:79:97:C6:CD:67:89:D8:E1:2A:C4:7B:E6:48
Authority key identifier: 43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
Certificate issuer: /CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5
Certificate serial: 019756EC752A3342426A247FE78EF13EA2F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
Manifest number: 04B9
Signing time: Mon 09 Jun 2025 23:00:26 +0000
Manifest this update: Mon 09 Jun 2025 23:00:26 +0000
Manifest next update: Tue 10 Jun 2025 23:00:26 +0000
Files and hashes: 1: Ku3HRyioj0ql8ozTbPCiAHlL8-E.roa (hash: gtf9gLEz02KrYfoccfEAryEzPGbpHsjqTO4FxJ768C8=)
2: Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl (hash: lI4UHwqrAFv4YDJsZiuDs8YiqnzOL6de7CPSn5x5o2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 19:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:ec:75:2a:33:42:42:6a:24:7f:e7:8e:f1:3e:a2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5
Validity
Not Before: Jun 9 23:00:26 2025 GMT
Not After : Jun 10 23:00:26 2025 GMT
Subject: CN=2f83b4f9d5b04d7997c6cd6789d8e12ac47be648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fc:e6:9d:de:43:db:45:20:38:89:c9:9c:5e:
47:49:6c:76:46:59:e1:3f:70:0d:5c:65:f9:d7:e1:
2c:5c:5b:d2:93:eb:97:f1:5c:21:cd:c5:20:df:fa:
2e:86:d6:77:4a:69:cf:14:25:4c:b2:3e:9d:6d:d9:
34:d8:ec:db:86:59:ef:e7:9b:34:23:8b:b2:8d:5f:
a8:03:86:15:38:5b:c8:96:40:46:cf:95:a2:d0:b6:
43:48:0e:7e:90:15:7d:c8:41:0e:ec:6f:58:13:17:
a5:e0:ef:32:78:58:23:07:4f:b8:55:a6:ca:cc:f5:
05:a1:00:38:4a:26:c1:06:2d:38:9f:72:14:be:00:
7a:9e:2b:8b:5c:1e:f8:ba:fd:5d:db:a6:07:16:0d:
61:d2:bf:3f:71:0c:c7:74:af:ff:72:21:83:b3:5b:
5f:8e:80:5a:98:b2:ea:6a:36:6f:24:b6:28:c0:13:
19:2c:7b:0d:c8:04:2b:f2:18:df:39:58:06:b9:e2:
df:0c:30:1d:3c:da:c4:eb:7d:fb:15:b5:66:63:47:
56:47:8b:bb:16:49:aa:8f:81:db:63:4f:10:f7:62:
4f:5e:17:81:4a:4d:5f:a2:6b:37:f6:d3:5e:4d:fc:
e5:58:6e:cf:a7:50:2a:17:ef:9d:77:df:57:0a:fd:
5f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:83:B4:F9:D5:B0:4D:79:97:C6:CD:67:89:D8:E1:2A:C4:7B:E6:48
X509v3 Authority Key Identifier:
keyid:43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:63:fd:7b:d6:7f:7a:b2:28:47:2f:93:85:ca:45:23:da:0d:
9b:72:71:d7:b9:53:cd:05:31:29:da:6b:28:04:49:76:eb:9a:
1c:14:c5:3c:ed:35:2a:43:b6:44:8e:97:2f:44:e5:20:63:c8:
bc:c9:83:64:a7:12:ae:f4:10:2a:e3:50:61:67:24:ff:3f:bd:
2c:75:cb:6b:48:98:ba:74:9d:ed:4d:cc:21:58:1d:8f:ae:ca:
b1:8c:17:36:20:15:4b:e5:40:91:3d:a4:f8:9e:ed:cd:06:34:
30:65:a4:1a:dd:3a:91:26:72:2f:f6:fd:ef:29:9e:c0:f9:9c:
71:cc:a7:9b:92:2e:19:b9:e1:55:74:df:bc:fd:53:ee:3f:05:
3d:96:bb:a7:85:0e:82:b0:ff:73:f9:3e:ee:93:96:13:b0:25:
24:c6:91:34:b7:78:d1:16:07:36:08:e1:e7:37:12:28:7d:bc:
f4:a7:90:97:27:de:3d:c0:51:f3:9c:89:11:d6:30:9d:16:6b:
17:67:fb:d3:e6:d2:23:13:40:8b:e5:dc:97:3b:9d:e6:5a:07:
29:74:bf:3b:e1:ee:e2:b4:db:4b:eb:e1:97:da:63:bd:9c:c0:
34:62:f1:57:6d:84:67:8f:d9:7f:52:01:d6:47:61:f6:87:c1:
70:ca:32:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 05:30:07 2025 by rpki-client