Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
File: QvUa6vd0tjOkf5YKcImxWzWxpMs.mft (raw, json)
Hash identifier: yp+GgVUrACvOzpotDzpcWDot7eIyVq+3IHiHieyRQp0=
Subject key identifier: 50:5F:5E:6D:EF:DF:E5:C3:C1:CA:84:92:2A:3A:6C:0F:CB:10:93:B4
Authority key identifier: 42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB
Certificate issuer: /CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
Certificate serial: 019748F9C9490052FA85B3AB3B38F778525F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
Manifest number: 0642
Signing time: Sat 07 Jun 2025 06:00:18 +0000
Manifest this update: Sat 07 Jun 2025 06:00:18 +0000
Manifest next update: Sun 08 Jun 2025 06:00:18 +0000
Files and hashes: 1: QvUa6vd0tjOkf5YKcImxWzWxpMs.crl (hash: URsdLgrzCh70oYVwlMFcQGf1qCqMJpBKHSA7GhWvvkM=)
2: t9VupHYPOlXRe5J5x5F4CIePTBk.roa (hash: Fm6IUpzI362dwSd1jnTljFQdqkkno6k0hmV6iA3oMoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:c9:49:00:52:fa:85:b3:ab:3b:38:f7:78:52:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
Validity
Not Before: Jun 7 06:00:18 2025 GMT
Not After : Jun 8 06:00:18 2025 GMT
Subject: CN=505f5e6defdfe5c3c1ca84922a3a6c0fcb1093b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d5:57:79:0f:6c:a8:2f:6c:07:ff:fd:c4:62:
69:75:7c:71:4e:c2:32:c0:b9:86:94:9c:13:5c:ce:
7a:b9:e9:9b:ec:b0:4a:69:d6:cb:b7:8a:14:05:7f:
41:ea:25:ae:79:76:8c:70:0b:f5:7c:56:b7:84:c3:
2a:6b:ac:c6:4f:c4:2a:ae:32:46:d9:3a:e9:58:36:
77:2d:0e:b7:63:88:92:af:38:26:a5:dc:a8:11:ba:
1a:58:47:40:88:b2:f3:ea:85:a9:ed:79:74:e4:87:
88:44:f5:3e:95:ee:77:65:94:ce:1f:33:05:bd:e7:
d5:f1:5d:1e:cf:fc:74:9a:f8:af:52:e5:3d:f3:a6:
a6:4b:43:bd:6e:21:2b:33:1f:32:16:c0:b2:62:78:
7c:25:8b:2b:c7:8d:ed:70:7a:7b:b6:a4:40:7e:d9:
78:19:27:bf:28:8d:4b:93:8c:99:4c:8b:53:c8:d2:
4f:c7:95:a8:cd:77:9f:92:29:4a:97:44:ff:63:21:
57:db:36:8a:9d:fc:ad:15:12:80:6f:68:07:5f:0b:
75:23:8b:ad:cd:f4:ae:39:30:2b:a3:7b:30:08:d8:
cb:b8:0c:74:bb:d2:20:40:c6:ee:af:b1:53:fd:91:
0a:89:65:96:1a:9c:62:fa:dc:35:42:db:fb:6d:ba:
b0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5F:5E:6D:EF:DF:E5:C3:C1:CA:84:92:2A:3A:6C:0F:CB:10:93:B4
X509v3 Authority Key Identifier:
keyid:42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:96:8c:08:fb:09:ee:b7:2d:c0:e3:39:71:29:e0:b2:3d:7c:
5f:58:1f:36:a8:4c:e4:28:13:1d:46:96:43:28:7b:19:c2:7a:
76:2a:51:77:6f:d4:ce:96:a5:0e:67:a1:8d:c6:3a:4e:29:45:
c9:97:4f:df:a9:d5:e1:7f:a9:e5:b0:e4:60:c7:36:31:62:02:
6c:b4:c0:b6:86:fc:99:fb:59:2a:6c:5d:10:53:33:ca:98:a1:
d7:8b:58:0a:a8:84:db:1f:32:c8:1b:90:a7:40:68:f1:4f:19:
e7:ba:5d:97:b4:45:8d:4f:90:3a:70:b2:6e:69:49:b9:d3:60:
2e:ac:17:73:9f:1a:e9:71:be:a8:1a:b4:e2:dd:9a:c2:5e:6a:
73:45:1e:59:a4:13:9f:03:58:41:9a:6c:55:17:ce:d6:1a:f6:
50:85:61:4f:35:b8:d9:fd:2b:f1:78:70:9b:a2:56:3f:00:87:
80:1e:3c:a6:42:fb:26:a4:06:c6:41:0c:4e:a5:96:08:b7:86:
40:4b:08:4c:7f:2c:50:24:ed:13:a5:82:74:90:83:f2:05:5b:
f2:a9:57:15:89:75:a4:9b:62:00:17:b1:78:52:04:f2:c3:cb:
86:52:05:6d:ee:45:e7:29:d3:38:98:ce:1c:0d:b1:ed:ab:69:
f3:df:18:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:43:32 2025 by rpki-client