Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
File: qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft (raw, json)
Hash identifier: z+nVb6I0pm+ksYGcFgNiJHRyuoCDFXeu9XxbksLCsRI=
Subject key identifier: E6:AC:66:2E:50:C2:40:75:CA:2D:E6:1F:74:9E:56:5C:1E:5D:44:A6
Authority key identifier: A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
Certificate issuer: /CN=a9480cf18fd7859df9ad997940013a99b8dee374
Certificate serial: 01975F4AD239365B5258F17348789DFB1EF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
Manifest number: 1586
Signing time: Wed 11 Jun 2025 14:00:28 +0000
Manifest this update: Wed 11 Jun 2025 14:00:28 +0000
Manifest next update: Thu 12 Jun 2025 14:00:28 +0000
Files and hashes: 1: 1-498Z7vh8fq99O9xScVcy6k-waA.roa (hash: 5X65ydohKF6qHxzYtE3Ac9naZbToLy0QuSQ9mwUuJtg=)
2: YCaC2D8L5OtL6F6domigXArqF2c.roa (hash: 3VcxChRnU4HThrx+KUbxRb/2EVyI8+silVMvgGd2Xn0=)
3: qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl (hash: 8Jxumv7A+dA12DEzAjIYMn/AweUhCvOQv+h6xomPc6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:4a:d2:39:36:5b:52:58:f1:73:48:78:9d:fb:1e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9480cf18fd7859df9ad997940013a99b8dee374
Validity
Not Before: Jun 11 14:00:28 2025 GMT
Not After : Jun 12 14:00:28 2025 GMT
Subject: CN=e6ac662e50c24075ca2de61f749e565c1e5d44a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:30:d1:07:07:64:d8:ca:e1:e3:67:bf:1f:1e:
e2:d8:93:b0:ba:24:ed:e1:90:6d:60:25:e3:0c:1e:
6e:7c:ea:55:4e:dd:aa:82:45:8f:a2:81:e9:83:36:
73:8e:a1:17:27:c8:a3:07:e2:83:92:c1:0d:97:c4:
64:11:ba:4d:13:ba:2f:7d:7e:34:24:24:55:7f:57:
7e:bf:80:c3:8e:16:dd:a5:4b:5b:9e:92:4d:c8:fc:
3f:74:7f:22:5e:6c:eb:89:14:1d:c7:56:28:be:d2:
7f:df:0e:d4:56:a9:77:44:b1:2a:29:6d:67:51:27:
e2:ef:cf:30:e6:ba:75:66:85:f0:93:6c:27:2b:05:
f0:b0:d0:0a:e1:5e:42:94:fe:54:d7:83:bd:f5:90:
a4:bc:e3:17:04:32:7e:5d:bb:09:4b:f4:70:a3:ed:
fe:af:e1:b7:19:9e:c8:aa:9a:6b:88:a8:6e:55:9d:
a7:02:70:05:c0:ae:87:53:39:0d:83:d3:03:ef:5e:
5f:63:9f:2c:17:91:9f:c1:00:16:33:f8:94:c9:1f:
98:48:e3:32:af:10:1c:77:9c:db:d8:26:aa:fc:6d:
40:4f:47:c9:cd:fd:6e:f3:fa:a1:96:f8:77:f6:f8:
5c:e7:61:60:1c:1b:49:e2:15:b5:3f:bf:cb:12:6e:
b5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AC:66:2E:50:C2:40:75:CA:2D:E6:1F:74:9E:56:5C:1E:5D:44:A6
X509v3 Authority Key Identifier:
keyid:A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b8:88:2a:09:48:bf:78:c4:5c:90:70:3e:90:d1:24:f5:17:
ff:d5:63:d5:dc:76:34:1b:06:f8:9f:5c:c0:88:80:3b:92:fd:
d1:28:e2:e8:fe:39:df:de:84:71:98:ea:09:f6:6d:74:c4:88:
59:75:5d:0b:3f:71:60:9f:26:75:59:66:fe:83:ae:e9:34:06:
66:dc:2c:a3:17:fa:b1:d3:57:5c:b0:b2:8d:e4:a9:68:75:ca:
27:56:e8:74:2f:00:28:02:76:5a:bf:0a:e3:6c:79:1d:5e:73:
a8:a1:e4:cc:31:f2:66:27:44:90:12:6b:47:8d:e1:a4:7b:b9:
0d:9c:7f:ce:52:dd:46:6f:cd:79:58:d3:0e:2c:40:7e:e2:65:
9b:3a:22:ec:bc:e2:09:7e:0c:7b:61:36:b8:7a:a4:91:63:ce:
6b:72:c7:2b:42:68:cc:96:2b:8d:44:34:5a:93:d1:ee:b6:94:
6e:6d:13:a3:c2:3c:20:e3:68:05:3c:b7:5b:38:5b:88:1c:ec:
37:01:69:d9:f9:27:80:cc:96:2f:34:7f:77:c9:1c:fa:c7:fc:
fe:ce:13:a0:27:ff:9b:e0:d6:a7:d4:21:ba:0a:91:f9:fa:5f:
ae:c4:3f:cd:8c:39:1d:6d:91:9f:7a:af:a2:82:fa:bb:fb:54:
dc:68:64:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 22:07:44 2025 by rpki-client