Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
File: qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft (raw, json)
Hash identifier: OoMBzyIBYSdqOn/uvO9JOIlDarjnMq4DMtmFfdJpAbg=
Subject key identifier: D1:34:B2:C0:01:BF:9F:87:85:9E:F4:6F:2A:E4:11:7F:B6:A8:7A:31
Authority key identifier: A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
Certificate issuer: /CN=a9480cf18fd7859df9ad997940013a99b8dee374
Certificate serial: 01975D5CFE9840A18A82ADF6C536DCA09BDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
Manifest number: 1585
Signing time: Wed 11 Jun 2025 05:01:04 +0000
Manifest this update: Wed 11 Jun 2025 05:01:04 +0000
Manifest next update: Thu 12 Jun 2025 05:01:04 +0000
Files and hashes: 1: 1-498Z7vh8fq99O9xScVcy6k-waA.roa (hash: 5X65ydohKF6qHxzYtE3Ac9naZbToLy0QuSQ9mwUuJtg=)
2: YCaC2D8L5OtL6F6domigXArqF2c.roa (hash: 3VcxChRnU4HThrx+KUbxRb/2EVyI8+silVMvgGd2Xn0=)
3: qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl (hash: DUemmrhhkc4CzmeMim9LOxDkhIeHHsvzXlsGoRWMVrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:5c:fe:98:40:a1:8a:82:ad:f6:c5:36:dc:a0:9b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9480cf18fd7859df9ad997940013a99b8dee374
Validity
Not Before: Jun 11 05:01:04 2025 GMT
Not After : Jun 12 05:01:04 2025 GMT
Subject: CN=d134b2c001bf9f87859ef46f2ae4117fb6a87a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a1:e4:63:35:7a:e0:84:ff:0d:db:d3:05:78:
85:a5:5b:05:b6:3c:cf:1c:f0:40:03:b0:07:8a:b7:
4b:e9:4e:6b:ba:db:b1:f1:4f:69:02:b0:e5:60:97:
0c:a0:e0:ce:8c:88:13:46:e7:93:d7:5f:e7:37:e6:
71:b4:2c:46:53:b1:2c:01:8f:40:d9:a1:60:3a:08:
4b:81:6b:bf:57:95:aa:17:2d:cd:7c:06:0a:dc:6e:
dc:e1:99:d4:cb:59:25:41:e9:fb:67:39:bf:2d:5a:
e2:e7:07:f2:32:b8:9d:a6:9a:ff:7c:0c:a8:a6:77:
df:31:af:17:65:dc:cc:47:c1:2e:6e:76:1d:58:9a:
33:18:33:ac:89:64:db:d8:6b:8b:eb:ce:7a:47:a5:
78:84:9b:27:b0:f4:d0:b8:c4:09:ac:b7:96:5a:ba:
32:0c:22:b8:6b:ee:20:29:ce:16:2f:0f:a8:f2:84:
a7:d6:5e:32:cd:c3:d0:5a:ef:a8:00:16:25:ba:ba:
2a:c5:cf:82:6c:72:43:fd:31:d7:3e:37:a4:62:a4:
ff:ee:eb:46:30:89:56:d4:18:3c:1a:65:c6:a6:63:
d1:3a:57:57:7d:4c:e2:08:6c:1b:46:a0:88:0c:eb:
3e:a9:d6:d9:d6:fc:75:38:db:ae:f2:75:a9:13:54:
31:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:34:B2:C0:01:BF:9F:87:85:9E:F4:6F:2A:E4:11:7F:B6:A8:7A:31
X509v3 Authority Key Identifier:
keyid:A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:20:5e:1e:0a:2b:cd:4c:09:08:8d:12:43:43:a4:9a:bd:59:
6d:1e:84:83:fa:64:f4:fc:21:7b:94:14:54:90:09:4c:50:a0:
6c:90:c4:52:16:73:9f:ac:7b:2f:83:36:11:1f:0e:8a:5e:1e:
ad:4c:91:6c:e9:95:d0:84:7b:ed:5c:53:16:61:1d:91:ae:34:
aa:44:84:23:f7:3b:19:ce:d8:1c:aa:78:17:80:67:e4:d0:d2:
6f:32:93:20:f4:5f:39:5c:01:c4:22:3a:b7:f3:53:82:fb:6a:
35:aa:89:e6:61:e3:2b:7d:f6:d9:02:46:3c:ad:49:32:01:c3:
4a:9e:c7:2c:92:e8:1d:63:34:e2:6f:bc:a7:25:ed:ee:4b:46:
a4:30:89:6f:66:1a:32:2f:1f:0e:1b:ba:ae:f6:5f:ab:11:26:
52:69:21:59:3f:b3:02:97:16:6e:8f:17:4a:84:c1:d2:f7:9c:
63:6a:7f:70:39:ae:cd:65:fb:d0:4b:e3:80:da:ab:6a:b6:51:
8b:7f:89:84:a2:a4:9d:b4:db:69:53:a3:88:0e:a8:76:9b:60:
09:c4:ac:8c:7a:38:85:2f:a1:9a:0e:fe:34:ca:e8:27:98:65:
22:56:07:a2:c9:4b:ef:4d:fb:6b:57:1a:56:a0:3c:0c:ea:d2:
45:0e:60:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 06:51:42 2025 by rpki-client