Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
File: Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft (raw, json)
Hash identifier: PH2ocsPji8Su3XwmEFeCH42tMQKCg+d70b9IEevjHZI=
Subject key identifier: 83:AA:F8:F5:78:21:29:4E:D7:83:19:55:34:1A:D6:CE:69:B1:4E:E8
Authority key identifier: 43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
Certificate issuer: /CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5
Certificate serial: 01976A3CA14ADF2BCC646A969C6986CEDA92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
Manifest number: 04C3
Signing time: Fri 13 Jun 2025 17:00:47 +0000
Manifest this update: Fri 13 Jun 2025 17:00:47 +0000
Manifest next update: Sat 14 Jun 2025 17:00:47 +0000
Files and hashes: 1: Ku3HRyioj0ql8ozTbPCiAHlL8-E.roa (hash: gtf9gLEz02KrYfoccfEAryEzPGbpHsjqTO4FxJ768C8=)
2: Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl (hash: zv/eQuRl8wmzGcnikjbv8cvKiR0IJK7YUC4Kzq+NhfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:3c:a1:4a:df:2b:cc:64:6a:96:9c:69:86:ce:da:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5
Validity
Not Before: Jun 13 17:00:47 2025 GMT
Not After : Jun 14 17:00:47 2025 GMT
Subject: CN=83aaf8f57821294ed7831955341ad6ce69b14ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7e:0d:0c:62:78:38:41:6c:b2:b0:10:28:1f:
9f:bc:25:31:66:7e:67:35:41:3d:5c:b2:a5:c2:07:
a0:4c:d0:27:28:35:19:01:fe:79:3e:e4:6b:70:19:
72:ca:a7:a6:bd:00:d3:b8:3d:83:da:68:98:a0:d3:
6e:7e:2a:3b:55:fc:d0:2a:af:ac:fb:f4:c7:5f:f5:
27:15:d0:87:ac:a5:9c:f1:74:73:a3:ab:70:9f:c7:
a8:c8:d9:5b:0c:95:c0:06:6d:7c:13:b0:83:8b:15:
f4:2d:f3:d3:88:13:41:0a:ad:7f:30:2a:f1:b5:52:
d7:ea:00:e6:74:71:8b:e4:63:79:a8:fd:93:cf:44:
2d:af:98:0c:6d:cd:35:7c:e2:60:e2:70:58:e5:0d:
d8:d3:c7:d3:f0:e8:24:2d:78:c2:55:e2:6a:b0:97:
e6:73:9a:11:a1:2f:d6:6a:60:65:ca:43:05:4f:6e:
8a:d1:0b:db:84:8a:cb:7b:60:98:57:10:f9:cc:f4:
e3:1e:01:6a:ec:57:52:af:05:a6:30:c6:03:2b:11:
6c:47:9e:48:7c:ad:40:c4:ea:34:e2:14:8d:c4:1f:
5e:cb:85:63:be:6c:ba:22:29:05:c4:3b:27:59:7b:
5b:93:11:56:12:3f:2e:e2:24:3e:a2:b9:0d:59:cb:
62:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AA:F8:F5:78:21:29:4E:D7:83:19:55:34:1A:D6:CE:69:B1:4E:E8
X509v3 Authority Key Identifier:
keyid:43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:4a:d0:4d:36:29:35:ad:42:1a:85:81:51:ce:5b:57:2e:49:
9a:7c:ff:e9:b2:ad:c6:58:a6:6f:f9:40:6a:42:8f:f0:0e:08:
4d:0d:1b:8c:b9:87:59:68:b0:a2:c1:1f:90:96:71:53:6c:59:
f3:85:f0:13:e1:0a:d1:cd:d6:81:4d:c4:e7:b4:ff:e1:8f:5a:
20:70:d6:bf:73:9f:1e:b8:09:40:26:ef:b9:93:80:f6:e5:2a:
fb:ca:94:76:d7:4a:4b:50:be:d8:65:e7:4d:8c:ca:fe:10:87:
e7:85:20:5e:c3:a5:30:09:1e:f3:3d:2c:79:90:a5:56:80:f4:
ed:ab:71:71:b1:0c:f3:1c:93:93:39:69:8d:ec:17:19:be:81:
6c:c2:89:be:9e:df:ee:d6:7d:a5:12:97:c5:19:33:4f:09:d8:
05:0d:fb:f4:e5:d5:e8:84:f6:a7:44:49:30:7f:a5:3f:15:8e:
07:b7:3e:af:2e:9c:0c:72:11:49:cb:7c:15:1d:e8:44:b3:12:
f7:d8:ad:84:88:1c:ab:1f:91:77:26:f5:93:e5:9b:38:c1:c9:
51:7b:ca:32:56:4a:98:3d:2d:cf:e4:7e:31:e5:a2:95:39:09:
5a:eb:fa:7d:c9:d7:a7:63:b1:8b:cf:06:14:bf:db:33:54:b5:
7c:88:bc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 22:33:13 2025 by rpki-client