Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
File: Q9CWU4TcREh6gxcabV0FqUpq1nw.mft (raw, json)
Hash identifier: 05txHCeT6rOdv5CzLj+HqoxNnqX03ZduA09XD1cJMOM=
Subject key identifier: 7C:0E:09:33:8D:21:8F:BB:91:A8:AA:F4:7A:54:87:1B:7B:B5:F1:FF
Authority key identifier: 43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C
Certificate issuer: /CN=43d0965384dc44487a83171a6d5d05a94a6ad67c
Certificate serial: 01974C321392C48594C3E5B526AF275E1236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
Manifest number: 1E
Signing time: Sat 07 Jun 2025 21:00:39 +0000
Manifest this update: Sat 07 Jun 2025 21:00:39 +0000
Manifest next update: Sun 08 Jun 2025 21:00:39 +0000
Files and hashes: 1: Q9CWU4TcREh6gxcabV0FqUpq1nw.crl (hash: TUk1+CD6j8BkI9yeKmzfkCPVFVeluGlKNuEDBuyq4Xs=)
2: is8rJFkIshJvtMPQsNBVoFxTKBY.roa (hash: eXPJhyZn1FuLC+ECVYIsChabU+UtFgCuyBkgvqoFbIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:13:92:c4:85:94:c3:e5:b5:26:af:27:5e:12:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d0965384dc44487a83171a6d5d05a94a6ad67c
Validity
Not Before: Jun 7 21:00:39 2025 GMT
Not After : Jun 8 21:00:39 2025 GMT
Subject: CN=7c0e09338d218fbb91a8aaf47a54871b7bb5f1ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:33:37:68:64:09:87:7a:1d:14:16:73:0d:56:
e7:75:2c:b6:7e:af:df:fd:a4:99:d0:8b:b0:b2:d2:
b1:26:70:02:b9:36:0a:30:93:4c:4a:31:f6:66:f7:
e9:6a:db:e1:ee:97:99:bc:4e:46:91:a4:a0:3f:f1:
50:06:b1:d4:84:4b:83:62:dd:7c:f5:d2:f9:e7:f1:
d3:42:66:e5:3c:23:3a:ea:57:ee:1c:9a:e6:a0:fc:
c5:8c:d2:57:4b:d5:0b:53:39:40:24:4e:b6:73:33:
9a:ef:6e:67:27:a4:59:d6:9e:7e:32:85:77:dc:42:
2c:ad:05:0f:60:97:4f:8e:b4:3a:38:15:3b:f4:3c:
bf:47:6c:af:48:4c:0a:b4:ef:37:97:c7:1b:8a:28:
23:05:37:3f:da:a5:a6:f3:03:e6:bb:d4:f1:17:3c:
91:92:44:8d:d2:61:68:71:a1:e6:e7:45:ed:aa:70:
a3:5d:48:b8:93:55:27:f0:0d:3a:40:05:06:65:2d:
06:10:6a:7a:df:08:76:c5:a2:ee:4b:e4:3f:42:38:
4c:2c:f6:e6:06:95:59:ce:cb:c4:f1:47:45:64:4e:
8d:a3:6a:aa:76:aa:52:e4:51:ab:ed:aa:dd:d9:06:
20:26:c1:9c:3b:4b:80:9e:10:d3:72:f2:07:e6:03:
f4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0E:09:33:8D:21:8F:BB:91:A8:AA:F4:7A:54:87:1B:7B:B5:F1:FF
X509v3 Authority Key Identifier:
keyid:43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:f4:07:5c:83:d5:34:04:44:98:1d:8c:c3:14:05:b0:76:21:
7f:71:63:2d:6d:3f:a0:7f:5a:55:03:6f:25:03:f7:cb:2f:f0:
4b:d9:4a:f5:07:fd:ca:d1:da:49:ec:34:ee:fa:5c:f9:e1:b0:
48:38:eb:14:ef:ec:69:80:c2:b3:9f:4c:06:cf:6e:87:11:33:
b9:a8:d8:44:02:bf:88:83:17:42:32:9d:82:0b:33:5e:83:43:
a0:fc:cc:4a:69:43:5a:91:f2:ff:ef:4d:31:6e:cd:07:d3:05:
bc:6a:af:e4:61:f8:cc:35:99:7a:56:6c:47:2d:f7:f8:40:15:
fb:fe:d4:ef:1f:83:61:da:be:76:91:35:d4:26:db:d4:16:b6:
22:a8:eb:fc:60:e6:1f:1f:00:96:71:c5:df:29:4e:bf:34:60:
05:30:b6:14:0c:d0:c0:ab:f0:da:55:f2:7e:b3:41:57:b2:f6:
e2:44:91:ef:dd:ec:71:f0:e1:45:ad:cb:92:e7:e7:fb:3f:cf:
ca:e4:10:7d:cd:5c:94:a9:06:6f:e6:39:3a:ab:9d:e4:c6:3d:
a5:c9:87:a0:8d:5e:da:4c:76:56:67:be:a0:3c:a6:57:72:ad:
13:b1:0f:4e:43:a7:25:b9:2e:d1:68:87:26:65:1f:54:97:4f:
c5:23:4b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:02:26 2025 by rpki-client