Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
File: qDYJyI8427VIofAvif8pu20Yhk4.mft (raw, json)
Hash identifier: P2LLuFUeTUQSL+qAQjJ5OhTU9GsLQtAySCVbWGfIlPY=
Subject key identifier: 30:2E:2A:10:3B:C2:08:85:56:1A:56:1D:7D:42:32:B2:7E:7D:6E:DE
Authority key identifier: A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E
Certificate issuer: /CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e
Certificate serial: 01975F14199B39ADF040F482835749F0E8C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
Manifest number: 0318
Signing time: Wed 11 Jun 2025 13:00:42 +0000
Manifest this update: Wed 11 Jun 2025 13:00:42 +0000
Manifest next update: Thu 12 Jun 2025 13:00:42 +0000
Files and hashes: 1: _aJQ6oyDSsBM9CQBM0bENVTAfYk.roa (hash: TGsiDKL9QYKUEyLtO8kxrwWDCHZz/h4CK165UgZMbZA=)
2: qDYJyI8427VIofAvif8pu20Yhk4.crl (hash: hOKbKDNJ1CBxGos5Av1H9wqFSiFQIyHsx4D/KE016Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:14:19:9b:39:ad:f0:40:f4:82:83:57:49:f0:e8:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e
Validity
Not Before: Jun 11 13:00:42 2025 GMT
Not After : Jun 12 13:00:42 2025 GMT
Subject: CN=302e2a103bc20885561a561d7d4232b27e7d6ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2c:8a:1b:9c:f8:6c:ed:ae:2c:61:ae:d4:39:
7e:fc:af:16:78:79:60:e4:94:86:fc:73:01:2d:f7:
9e:c3:1d:9b:2a:19:0f:03:3b:f7:49:00:5b:fb:f9:
cc:d9:9e:ad:68:60:43:88:78:96:16:0b:e1:5c:17:
74:8d:f3:14:83:43:80:88:78:92:98:cd:be:48:53:
e1:18:79:e9:87:86:27:7f:f6:0d:29:44:e7:8a:96:
f9:63:ba:cb:2c:37:30:fc:8f:30:72:86:45:a0:78:
2c:a5:09:a6:b5:56:2e:6f:66:f9:d8:dc:a2:70:5e:
27:48:47:16:ef:06:c7:86:9f:55:36:c3:6f:3d:9e:
ba:c1:b2:2a:93:4e:b8:4a:0e:bc:72:1c:a0:f0:9a:
84:c6:e1:d1:73:8c:ed:9c:79:35:a1:44:14:d6:f4:
03:4f:97:b7:ea:be:b6:62:a3:cf:f0:6b:c9:e1:f7:
12:21:a3:bd:fb:06:8c:c6:4b:8f:ce:65:d0:20:aa:
fd:06:08:fb:28:66:58:89:30:ea:2f:c7:ed:f9:b7:
4c:31:4f:9f:d9:30:37:99:90:44:f4:33:70:74:d7:
72:d6:6d:d8:4e:07:5c:93:26:81:c3:df:9d:f3:3a:
ea:89:b0:8f:2b:8e:c8:0b:bc:31:a7:e1:ff:77:bf:
65:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2E:2A:10:3B:C2:08:85:56:1A:56:1D:7D:42:32:B2:7E:7D:6E:DE
X509v3 Authority Key Identifier:
keyid:A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:c8:2b:b0:94:51:7a:b6:91:13:34:38:8f:1b:3b:4b:01:78:
f5:80:20:19:15:06:cb:e9:83:85:7e:d2:27:b1:65:a1:29:a4:
12:ce:fc:ab:d2:44:52:0a:de:76:a8:0f:fb:40:1f:25:0f:83:
77:75:8f:11:e4:18:0e:68:bc:a0:64:a2:c9:2a:2a:cb:1b:ac:
17:3d:bc:d4:ec:1a:8e:07:77:7e:4d:c8:97:2f:dc:32:9d:db:
a0:53:a2:e9:2f:39:d3:35:a0:91:3f:9c:81:0c:4b:62:71:d6:
43:ea:54:c9:eb:00:6a:ce:d9:84:06:99:21:bf:d2:6f:6a:c3:
b2:9c:23:42:d1:ab:14:86:78:c9:4d:1c:d7:d2:49:c7:d6:20:
e8:8d:02:6f:6c:8f:47:de:84:df:97:30:66:48:20:1f:6e:2e:
a2:f6:18:48:88:ba:91:6f:ec:d4:a4:91:f3:ab:ac:45:5d:c7:
2c:da:b1:ce:98:4a:8c:2e:4d:5c:eb:ce:f2:69:77:7b:dc:6a:
15:ef:ae:4b:ca:24:e1:3e:50:af:6c:31:91:bf:6a:10:c8:85:
d1:a4:b0:ec:ab:0d:35:3e:23:dd:ba:19:87:d2:ce:aa:66:16:
48:47:f1:39:45:e4:21:02:03:f5:56:2d:bb:8e:d1:3f:ba:0d:
f0:70:7a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:36:02 2025 by rpki-client