Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
File: mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft (raw, json)
Hash identifier: A+ilZuIM2Ml0riO2Wr6GFFnpIFgkt8j6sN2PGMY4Yxk=
Subject key identifier: 26:3D:D6:7C:86:D1:01:46:65:98:F5:7D:D0:86:3A:5B:B2:83:9E:43
Authority key identifier: 99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
Certificate issuer: /CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Certificate serial: 01975EA6595825BCBCAA8164A8684A16EB57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
Manifest number: 1588
Signing time: Wed 11 Jun 2025 11:00:49 +0000
Manifest this update: Wed 11 Jun 2025 11:00:49 +0000
Manifest next update: Thu 12 Jun 2025 11:00:49 +0000
Files and hashes: 1: N_CNkQ4xgCl7xoE5UA_a_QkJVEU.roa (hash: Tpui/v5StmkjsF0FORh913wDyuFXShlf6/KyOzlpFaw=)
2: a9P-AA4M71AoAQl3T5rg8IgqWV8.roa (hash: p+vdBIjmH5hq5HNOBx9P2IYX3IN+k3FDRRTfZzHcnHA=)
3: mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl (hash: qhN2b1lcKYS517+2OBdL+bnIpnvVymvtHBZQdlFLCNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:a6:59:58:25:bc:bc:aa:81:64:a8:68:4a:16:eb:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Validity
Not Before: Jun 11 11:00:49 2025 GMT
Not After : Jun 12 11:00:49 2025 GMT
Subject: CN=263dd67c86d101466598f57dd0863a5bb2839e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d4:da:d0:ec:2e:ae:a9:cf:a1:ba:c7:69:78:
c2:f9:4a:b2:73:06:88:41:b6:ea:fb:74:05:fc:4c:
8b:aa:9f:d7:12:d9:f4:60:13:86:a5:49:60:be:23:
f8:1c:eb:7c:00:45:c3:78:d1:dd:fb:c4:8e:18:10:
a5:b6:bf:a8:fa:69:ca:8d:36:ca:a7:d1:59:54:06:
bb:dc:71:d2:1b:21:17:a0:e4:11:5b:55:e2:b4:55:
96:74:04:7e:71:ee:1e:cc:10:d0:9c:ea:5e:64:c2:
a3:f5:a2:4c:2d:74:75:c9:8e:96:78:de:c0:0b:a8:
7e:5c:45:09:a3:f6:9b:74:ee:c0:c9:48:f3:bc:f1:
64:5a:ff:55:fe:d8:3c:79:9e:72:78:01:09:8b:e3:
61:91:22:37:07:87:a3:26:b4:d6:ba:1f:08:bc:e0:
1d:c2:fa:50:43:cf:49:9b:e9:c7:93:22:33:eb:6f:
f6:79:e1:d3:0b:1f:b2:c2:6e:2c:9c:17:93:91:3a:
4e:2a:b3:92:a4:0e:21:4e:ae:40:2e:39:61:64:61:
10:ef:27:5b:ba:35:8a:89:b9:e7:85:d9:68:ed:9a:
f6:0f:4d:b6:40:0c:62:44:33:3a:2e:47:d7:f9:44:
4a:f1:aa:49:5f:2f:b1:37:35:d2:95:08:dc:71:1d:
57:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3D:D6:7C:86:D1:01:46:65:98:F5:7D:D0:86:3A:5B:B2:83:9E:43
X509v3 Authority Key Identifier:
keyid:99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c9:ad:b8:61:64:57:1c:16:a1:6c:c5:95:bb:64:bf:c0:19:
ac:b8:3b:4a:e1:8b:f6:bf:ee:a8:77:f5:ca:23:e1:15:8a:93:
a1:b4:4f:27:aa:f0:59:a0:42:0e:20:e1:94:7a:c3:a4:c4:d8:
28:c0:99:92:a7:78:f8:6b:c6:ef:8f:58:dc:3c:97:ce:ea:e3:
e0:a7:e0:0f:4e:48:65:cc:ff:df:e3:ad:b7:08:50:b5:43:e7:
1c:f7:6e:c7:75:f6:5e:9f:9e:f3:ab:4c:d7:41:9f:b9:b6:7a:
b0:c8:06:8f:e2:6c:1c:8a:44:84:6f:9a:46:04:5d:d9:13:f3:
5b:d2:e5:34:0b:9b:26:5e:73:9c:1c:22:df:44:15:62:98:cf:
37:60:38:38:c7:13:a3:73:ec:1d:c0:0f:17:e5:de:d9:37:39:
2b:3a:6d:a9:34:f9:f8:67:62:4a:7b:df:58:e3:e2:d8:e8:10:
0e:5d:cf:7d:c6:88:43:ea:4b:c4:80:51:f0:be:b0:b9:f4:37:
02:82:48:76:78:41:c7:bf:b4:86:58:f2:40:33:03:f5:38:6a:
b2:75:5f:f5:84:f0:02:66:5a:ca:fb:f9:71:31:43:e4:b2:ad:
2e:ce:cd:d9:f6:61:85:7c:73:09:1b:4f:38:79:e8:0d:57:c7:
91:77:02:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:23:37 2025 by rpki-client