Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
File: qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft (raw, json)
Hash identifier: v13j0x3k307Ua0YIZQPdra9rPdxoeSSv71hKdx4VnUg=
Subject key identifier: 79:07:42:B5:E9:B5:29:97:E1:CC:23:13:24:01:67:13:B0:C8:C9:40
Authority key identifier: A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
Certificate issuer: /CN=a9480cf18fd7859df9ad997940013a99b8dee374
Certificate serial: 01975791B6C6327690EC599F8B5A54D2491C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
Manifest number: 1582
Signing time: Tue 10 Jun 2025 02:00:56 +0000
Manifest this update: Tue 10 Jun 2025 02:00:56 +0000
Manifest next update: Wed 11 Jun 2025 02:00:56 +0000
Files and hashes: 1: 1-498Z7vh8fq99O9xScVcy6k-waA.roa (hash: 5X65ydohKF6qHxzYtE3Ac9naZbToLy0QuSQ9mwUuJtg=)
2: YCaC2D8L5OtL6F6domigXArqF2c.roa (hash: 3VcxChRnU4HThrx+KUbxRb/2EVyI8+silVMvgGd2Xn0=)
3: qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl (hash: iOFnJVxwgg1+U10Gmzp3jMv2a9sX7tyzxMk1AGTP+AI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:91:b6:c6:32:76:90:ec:59:9f:8b:5a:54:d2:49:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9480cf18fd7859df9ad997940013a99b8dee374
Validity
Not Before: Jun 10 02:00:56 2025 GMT
Not After : Jun 11 02:00:56 2025 GMT
Subject: CN=790742b5e9b52997e1cc231324016713b0c8c940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8f:fe:19:3b:ad:ad:78:6c:b3:7c:db:2b:da:
db:05:b4:4b:9f:71:fb:7e:03:ee:38:ee:59:b4:c3:
ef:b9:a8:c8:89:d7:de:09:a4:ac:84:47:49:8e:32:
45:ae:0b:17:6e:8a:af:e3:4e:fd:65:d7:39:78:e4:
6b:24:a5:34:e7:28:0b:5c:e4:6f:2c:f7:c2:96:69:
92:99:f2:c5:d7:45:bb:c9:72:f3:52:74:83:2c:2a:
2e:e7:8d:4c:f5:fc:c4:a4:71:66:f4:32:de:94:2b:
e7:52:36:a8:48:26:44:91:ee:40:13:a9:00:43:aa:
11:c8:73:50:dd:01:79:ae:01:86:2c:2b:a9:0b:e5:
39:13:42:42:da:39:c2:97:39:33:cd:62:65:6f:05:
1f:4d:5a:b1:42:c0:04:25:d3:0d:77:15:05:4f:70:
b8:d3:55:b8:99:ed:8c:96:cf:c3:d3:c1:e2:1f:6b:
8a:ad:dc:a2:83:f0:38:85:af:49:95:b2:a9:8c:50:
a5:20:43:c8:f2:55:8e:e6:93:99:78:c3:21:14:4f:
97:7c:72:b1:f9:7a:78:3a:d0:47:48:90:dd:51:01:
19:d3:fa:0d:d7:74:ca:30:42:50:6c:05:d0:ea:76:
4f:ff:d7:e1:46:a2:22:19:3e:bc:4e:36:a6:fb:9b:
64:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:07:42:B5:E9:B5:29:97:E1:CC:23:13:24:01:67:13:B0:C8:C9:40
X509v3 Authority Key Identifier:
keyid:A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:80:b0:8d:41:5e:54:b1:07:43:d0:4c:73:c5:26:04:4c:6c:
5d:47:6d:91:ec:e4:f6:41:b6:43:14:92:39:92:a5:1b:cc:19:
b5:79:2e:8c:79:7e:76:3c:e9:cf:52:17:84:f1:7b:be:41:4f:
09:b2:56:ab:50:9e:82:5f:cb:2f:2f:56:89:01:e1:7e:47:6b:
64:e4:15:6c:a3:18:8f:21:5f:4b:f3:c7:92:e5:0c:f3:5c:85:
e7:76:85:33:fb:74:e0:dd:b6:ee:1d:c0:47:9b:8f:64:5d:cd:
77:cb:2a:88:07:47:a8:ca:7c:63:80:b1:21:f6:45:2c:c0:06:
11:04:28:a8:04:95:fe:9b:c4:77:13:9e:11:07:d9:58:d7:b2:
bc:72:0c:eb:40:f1:97:9c:63:b4:3d:56:ec:8b:45:55:01:8e:
9e:2d:a6:a9:38:6e:7d:03:6c:54:88:ce:51:8a:02:45:4c:69:
82:55:7e:8a:34:29:32:27:3c:8f:b4:ca:3c:21:27:a7:fc:4c:
02:ca:0a:ca:6a:9d:da:b9:53:65:a7:70:90:dc:d1:f3:e6:99:
39:c5:ab:cd:09:cc:34:1b:f5:ed:fd:7d:df:78:d7:7f:f7:22:
92:6e:f0:2c:dd:a9:50:f2:ab:59:62:43:1b:8d:1b:74:a8:0b:
66:17:be:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 07:29:59 2025 by rpki-client