Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
File: qDYJyI8427VIofAvif8pu20Yhk4.mft (raw, json)
Hash identifier: RXq+JZ8aqL5Y2KV6DAQmbm1OzG9s9dGeLV9JxWlcFIw=
Subject key identifier: 3C:41:64:21:BF:25:CA:E2:FD:4A:CC:79:7F:CD:E3:53:4B:F1:7A:84
Authority key identifier: A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E
Certificate issuer: /CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e
Certificate serial: 0197537E2B9B30A341622EDF504D11B9DD74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
Manifest number: 0312
Signing time: Mon 09 Jun 2025 07:01:06 +0000
Manifest this update: Mon 09 Jun 2025 07:01:06 +0000
Manifest next update: Tue 10 Jun 2025 07:01:06 +0000
Files and hashes: 1: _aJQ6oyDSsBM9CQBM0bENVTAfYk.roa (hash: TGsiDKL9QYKUEyLtO8kxrwWDCHZz/h4CK165UgZMbZA=)
2: qDYJyI8427VIofAvif8pu20Yhk4.crl (hash: eAOEcUUFvS5/OzYaPw36zS1lCNU92mvyh74uqv/iLSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:7e:2b:9b:30:a3:41:62:2e:df:50:4d:11:b9:dd:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e
Validity
Not Before: Jun 9 07:01:06 2025 GMT
Not After : Jun 10 07:01:06 2025 GMT
Subject: CN=3c416421bf25cae2fd4acc797fcde3534bf17a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0f:b4:54:cc:90:7e:cc:cc:7c:3b:8f:da:b6:
f5:0d:80:90:61:b4:b4:ff:f6:2c:0d:26:02:cc:87:
ee:44:71:04:b9:62:e7:66:8f:c3:7b:5b:90:68:2b:
a0:18:cd:3a:a0:e5:91:18:b7:75:24:da:03:52:af:
f5:3d:4f:7b:14:0e:54:8b:0a:59:7e:94:11:f0:b3:
d4:d4:f2:96:97:22:da:33:b4:32:73:7a:ea:47:13:
63:6f:8f:97:40:94:a6:ae:56:66:16:07:aa:b9:72:
9b:29:54:b7:a1:35:81:e0:eb:a7:ad:01:04:89:f5:
db:91:89:da:6e:3d:96:ba:73:5d:02:11:89:b8:40:
19:75:11:0c:27:52:66:59:d8:ae:ce:0c:57:aa:d1:
95:79:8f:92:31:c9:84:3c:92:a0:bb:ff:93:aa:9b:
69:ef:c1:1a:96:da:bd:7b:bb:a5:6f:c1:dc:d2:fc:
b0:44:a1:76:78:b2:ae:b2:de:cd:2c:f8:ba:52:e8:
23:04:15:16:dc:4a:a4:01:fd:ba:d6:42:ab:67:a9:
b1:34:86:1c:c9:2d:f8:57:fa:63:3e:ad:44:5f:e7:
90:e0:58:c3:c5:30:19:2c:5d:49:25:f1:4f:e4:56:
3e:5a:56:6b:03:53:4a:03:5a:6e:dd:67:42:b4:e7:
63:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:41:64:21:BF:25:CA:E2:FD:4A:CC:79:7F:CD:E3:53:4B:F1:7A:84
X509v3 Authority Key Identifier:
keyid:A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d5:f5:4e:84:7e:1e:f2:30:5a:1c:70:0f:5f:31:4a:20:f4:
00:16:a6:8a:c6:50:11:43:dc:52:05:f5:67:65:72:77:11:98:
32:4c:e6:4d:bf:83:fd:f3:f8:0e:24:c4:08:90:37:02:cb:78:
a0:96:72:29:57:ee:b8:ae:80:3b:a6:b9:26:31:f9:4c:1e:e2:
f2:93:45:66:e1:7b:6b:ce:ee:b2:da:24:3c:14:fe:64:cf:88:
2a:b4:0c:f2:19:b6:2c:42:39:0f:7a:de:c8:d3:34:6a:e3:5a:
34:a0:f0:e0:37:d1:62:73:0b:d1:c1:43:be:59:0b:77:c7:7f:
88:27:5c:2b:a2:99:d0:79:12:0e:7f:3f:9e:bf:30:7e:53:db:
07:1d:f2:75:11:89:b8:fe:60:a4:07:51:5c:5f:0f:d4:52:e4:
06:08:59:5a:7f:2d:ca:dc:f5:72:9c:ef:df:21:46:02:5d:41:
52:90:ac:21:e5:27:d8:c1:c3:26:02:94:ea:ec:7b:9b:12:f2:
49:f0:db:a3:fc:ef:5d:da:0f:47:f1:ac:9f:5d:e6:09:f1:00:
98:65:64:ba:c1:29:6f:ec:b3:27:a1:25:7f:7c:97:6d:d0:0d:
29:a6:0b:76:c1:2b:1c:00:5b:aa:be:c7:0b:09:0e:cf:fe:7f:
6b:dc:e5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:30:39 2025 by rpki-client