Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
File: qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft (raw, json)
Hash identifier: R4xJeO4YiLCw629qcvyCEazNYOYNbKoi68PVBACFQRU=
Subject key identifier: 07:E7:5B:30:07:ED:D7:30:11:FB:6B:69:66:5B:07:55:FD:30:86:83
Authority key identifier: A8:F1:E0:5B:D7:B3:F8:CA:9B:4A:BD:0F:89:99:12:17:9B:56:6D:F7
Certificate issuer: /CN=a8f1e05bd7b3f8ca9b4abd0f899912179b566df7
Certificate serial: 01974A0CD09CE3E9E10319DED0CEC9B64941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
Manifest number: 0C72
Signing time: Sat 07 Jun 2025 11:00:43 +0000
Manifest this update: Sat 07 Jun 2025 11:00:43 +0000
Manifest next update: Sun 08 Jun 2025 11:00:43 +0000
Files and hashes: 1: qPHgW9ez-MqbSr0PiZkSF5tWbfc.crl (hash: 1mNibrDGxBLEH7vL9irmXzBDA5Yf4DPgZzC2RlF/EWM=)
2: qqQQvs9nXt1HjpZfeqvOvwFytUQ.roa (hash: 63Z1XFDv2thWE6305aK6hjX0RMocIGGlkCydM7bw3MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:d0:9c:e3:e9:e1:03:19:de:d0:ce:c9:b6:49:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f1e05bd7b3f8ca9b4abd0f899912179b566df7
Validity
Not Before: Jun 7 11:00:43 2025 GMT
Not After : Jun 8 11:00:43 2025 GMT
Subject: CN=07e75b3007edd73011fb6b69665b0755fd308683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:61:26:a1:6e:cb:5c:ee:8f:9f:b3:90:67:26:
6b:ce:1c:3d:1b:ac:8a:d1:cb:31:b6:bf:14:12:b2:
dc:8e:79:c2:30:b9:eb:c4:09:32:8c:48:93:7a:3e:
5b:ce:97:dd:60:6a:36:fc:04:8a:33:b7:e1:61:d7:
9d:a1:e0:97:53:a8:16:2c:8b:1b:73:6e:4b:89:0a:
23:40:51:4e:96:65:25:9d:34:6e:f3:e9:af:8a:27:
1c:b4:2e:95:62:2b:fe:bc:7f:9b:e6:c3:3a:79:83:
99:b5:63:c5:99:57:b7:24:fa:59:10:f0:93:f7:90:
59:25:0b:74:a0:02:dc:20:9a:a4:d9:3d:f4:e0:21:
be:26:c5:76:1f:e3:ec:70:1c:69:e9:5d:06:7e:19:
f0:e2:ea:7f:0a:71:15:ad:8c:35:26:8d:f2:e4:28:
17:e4:82:2f:71:67:fa:50:02:79:68:e4:96:eb:eb:
51:69:47:2c:b1:b3:26:e6:05:a1:d5:14:3e:8c:57:
4e:c3:9e:54:66:cc:1f:a2:64:fd:fb:2a:75:df:3e:
1d:33:04:28:bb:80:66:cd:57:7b:cf:e1:14:46:79:
b4:2e:78:3f:5c:0b:1b:91:4d:e4:34:c9:05:72:06:
af:3b:f5:37:d7:26:ce:41:e7:ce:ca:93:0b:04:4b:
a1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E7:5B:30:07:ED:D7:30:11:FB:6B:69:66:5B:07:55:FD:30:86:83
X509v3 Authority Key Identifier:
keyid:A8:F1:E0:5B:D7:B3:F8:CA:9B:4A:BD:0F:89:99:12:17:9B:56:6D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:9f:12:54:14:2f:f7:b4:eb:e5:45:f2:a0:9b:0e:34:04:6c:
91:fb:47:5d:e5:60:37:d7:9e:7a:fe:4a:c0:be:8a:0e:ee:36:
7f:2a:a4:21:39:f0:04:9b:90:b2:cd:17:75:63:37:d7:52:04:
14:9f:3c:f9:aa:07:df:46:e6:b9:ac:52:46:69:1a:ee:25:21:
8b:18:91:5e:fe:cd:08:25:03:21:78:80:6b:b8:52:98:e6:a8:
4a:dc:98:61:f2:26:6c:f3:99:c4:80:d0:db:e0:b3:4f:b2:e1:
33:f1:c9:71:c9:74:89:67:7a:c1:ac:2c:72:56:e7:03:e6:b3:
43:ea:9b:af:b3:5d:bb:d9:c6:b4:a9:78:9b:a0:da:84:c0:2f:
61:4c:16:da:4f:89:d0:02:07:f4:4d:b0:c2:65:10:58:fa:6f:
07:c6:c7:7e:d6:55:2c:ac:77:56:5f:17:3d:52:6b:19:da:69:
ff:ae:c9:4e:a0:73:4e:ab:48:81:20:8b:8d:69:79:d1:fb:17:
30:c9:cb:4b:08:52:ab:9e:a7:90:96:5d:a1:d4:41:68:d7:9c:
0b:e5:ea:32:1e:a1:f8:70:8e:64:86:36:40:8c:23:06:48:37:
0d:50:b4:51:73:e4:14:20:cd:d2:1a:65:84:b1:24:b4:89:b9:
79:64:5f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:48:39 2025 by rpki-client