Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
File: qDYJyI8427VIofAvif8pu20Yhk4.mft (raw, json)
Hash identifier: Z7dKQGQl1yLOD2tJSRIXKujkpXWDWn5hAX8gQAjb0nQ=
Subject key identifier: 9C:68:06:B0:A3:C8:3A:5C:EC:9B:CA:01:D6:73:1D:76:ED:53:46:C7
Authority key identifier: A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E
Certificate issuer: /CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e
Certificate serial: 01975948B3930D6351711D8DAF977A81838C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
Manifest number: 0315
Signing time: Tue 10 Jun 2025 10:00:26 +0000
Manifest this update: Tue 10 Jun 2025 10:00:26 +0000
Manifest next update: Wed 11 Jun 2025 10:00:26 +0000
Files and hashes: 1: _aJQ6oyDSsBM9CQBM0bENVTAfYk.roa (hash: TGsiDKL9QYKUEyLtO8kxrwWDCHZz/h4CK165UgZMbZA=)
2: qDYJyI8427VIofAvif8pu20Yhk4.crl (hash: 8uvg7wiX5YUKOKjKjzatFRo8PyxwAuuJ9mREaUQihjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:48:b3:93:0d:63:51:71:1d:8d:af:97:7a:81:83:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e
Validity
Not Before: Jun 10 10:00:26 2025 GMT
Not After : Jun 11 10:00:26 2025 GMT
Subject: CN=9c6806b0a3c83a5cec9bca01d6731d76ed5346c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c0:d5:67:ce:f2:21:b0:ea:2a:50:6c:1e:7b:
4d:3b:7a:21:f9:b1:9c:b1:23:0f:47:be:76:fb:31:
7d:a6:fa:68:29:44:30:4f:0c:2a:6c:82:87:45:63:
be:13:b7:3c:44:b3:51:49:1d:7b:10:3a:dd:e9:57:
e3:d9:43:09:56:4c:32:5f:73:8d:c6:b9:29:96:dd:
4b:4d:cf:3c:b7:4d:a9:78:31:70:bd:6c:af:53:10:
5a:87:f5:cb:78:c9:f1:23:44:d0:a1:7d:e8:10:6f:
c7:27:1a:31:cc:ac:09:49:ad:99:c4:84:eb:a4:87:
83:b9:96:2b:59:d1:77:6a:76:48:5c:4e:b1:1a:a7:
9f:90:e4:02:5f:d3:ae:05:54:ee:74:61:d4:40:33:
29:35:b8:b1:b1:7a:0a:46:77:44:51:04:ac:aa:dd:
3a:88:b3:74:42:a5:9e:04:a2:cf:e2:52:7e:31:e0:
02:a8:28:eb:00:c0:1f:d3:d2:e5:62:8a:c3:a8:2c:
a7:33:77:84:a1:c8:27:e2:18:a0:cd:bf:06:20:f4:
0f:d8:c3:5e:75:1f:22:c1:c0:1a:01:84:6a:4e:05:
70:df:cc:6c:72:28:02:9a:3d:e3:61:22:ce:d3:40:
2a:18:27:7d:e1:e4:59:85:2b:f6:72:2b:56:21:3e:
10:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:68:06:B0:A3:C8:3A:5C:EC:9B:CA:01:D6:73:1D:76:ED:53:46:C7
X509v3 Authority Key Identifier:
keyid:A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:79:7b:b1:58:3d:ee:08:8b:79:f0:f4:17:9c:b9:67:cf:9f:
07:e4:0c:8d:ea:30:30:c3:7f:59:fe:99:9c:03:10:f4:5e:6b:
a5:34:5d:b2:a4:95:70:94:9c:01:22:88:db:d4:f6:c6:50:64:
1c:b6:cf:67:eb:ea:83:f6:b1:2a:ae:86:47:72:9c:45:6c:56:
c0:fc:76:b6:41:1e:eb:c4:8b:3b:f5:60:53:d0:2d:85:f8:14:
af:81:95:6b:2a:d9:2e:57:c8:4e:a1:25:a2:48:77:51:53:e2:
24:46:7e:f2:4e:1a:18:02:08:47:ba:ff:67:f7:65:31:f0:de:
49:e9:be:3a:e3:c8:04:51:38:9d:bd:b9:63:e9:18:3f:80:37:
da:61:2d:f0:48:27:18:c9:0e:f9:93:31:cf:ce:9f:12:79:de:
58:56:04:1a:b1:f7:fb:f0:da:c0:1b:64:78:c0:fc:d8:5d:0e:
d1:05:a2:23:a4:69:78:0e:06:b8:3a:ed:ad:28:f8:24:2f:7a:
32:51:50:3e:e9:35:84:61:e3:d7:56:f8:c4:d1:40:1f:34:c2:
ef:b2:08:3c:cf:b3:c9:9c:79:fa:63:1d:13:d5:64:c2:7c:37:
a7:af:a8:de:0b:fd:b5:b3:aa:ca:e6:0e:2c:3e:37:eb:94:ca:
ae:a4:98:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:23:30 2025 by rpki-client