Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
File: QWUyQgoh5CuK0w2iTr9DR96V7zU.mft (raw, json)
Hash identifier: 8t5qkbKW8/A4jDoFtsnL3paVwQ9sifBYvDq2sTdMRWQ=
Subject key identifier: 34:6B:79:A2:F0:A4:B4:97:D0:5A:01:61:5F:60:90:27:B6:4E:5D:C0
Authority key identifier: 41:65:32:42:0A:21:E4:2B:8A:D3:0D:A2:4E:BF:43:47:DE:95:EF:35
Certificate issuer: /CN=416532420a21e42b8ad30da24ebf4347de95ef35
Certificate serial: 01974FD7BEA8A0DD04D3D8DA0E8414732E7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWUyQgoh5CuK0w2iTr9DR96V7zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
Manifest number: 1088
Signing time: Sun 08 Jun 2025 14:00:28 +0000
Manifest this update: Sun 08 Jun 2025 14:00:28 +0000
Manifest next update: Mon 09 Jun 2025 14:00:28 +0000
Files and hashes: 1: QWUyQgoh5CuK0w2iTr9DR96V7zU.crl (hash: qiKq/uq9hpS3AFFHaRQzR1CPRgjdnOmFEtTNxGN1G2E=)
2: eV_HY0yWE8mOE1MRDnB0YcYTccg.roa (hash: 5xM8UD0IporPo6ojXDnvNcFP3vOdI9fe0xTb6m2cal0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWUyQgoh5CuK0w2iTr9DR96V7zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d7:be:a8:a0:dd:04:d3:d8:da:0e:84:14:73:2e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416532420a21e42b8ad30da24ebf4347de95ef35
Validity
Not Before: Jun 8 14:00:28 2025 GMT
Not After : Jun 9 14:00:28 2025 GMT
Subject: CN=346b79a2f0a4b497d05a01615f609027b64e5dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:80:b5:c9:a6:99:53:48:cb:df:cd:80:e9:f7:
e6:60:20:39:49:2e:89:21:94:df:59:a4:88:2b:e4:
4d:34:be:a9:32:e6:71:02:3e:a2:48:4b:3d:98:e2:
a3:c3:d3:15:28:ce:4b:87:7c:5d:aa:35:6b:07:77:
2e:b3:a0:a9:4e:48:b1:bc:ce:b7:f4:04:4d:9c:6b:
85:95:db:82:91:0f:bb:75:f7:42:79:bb:e4:df:b8:
dd:65:1d:17:38:eb:d3:c4:65:65:c4:4e:df:c4:e8:
d1:49:e2:44:c0:4f:fd:4c:6c:82:a3:c3:51:74:b4:
b6:88:4c:45:40:49:f4:1f:ea:c3:a8:cf:4a:db:a3:
f5:37:e4:45:48:6c:f2:67:06:25:3d:f9:fd:13:ff:
c3:89:a4:c9:92:f1:a0:4a:b6:d5:c5:d8:da:8b:02:
71:20:22:a4:91:01:5c:01:9a:cb:a6:eb:fc:fb:36:
ca:e8:10:f2:b1:49:df:9e:bd:06:6d:26:e1:2f:ec:
d6:3c:f0:27:fd:0d:d7:70:17:c6:a1:f9:3f:a6:32:
ef:9e:f4:4f:f5:36:65:2d:87:1b:a5:27:1f:e1:3c:
25:bd:1c:d4:37:b4:03:27:e4:82:a6:1c:72:dc:4a:
1d:81:78:24:af:52:8a:ee:d3:dd:da:16:3e:8b:3e:
19:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6B:79:A2:F0:A4:B4:97:D0:5A:01:61:5F:60:90:27:B6:4E:5D:C0
X509v3 Authority Key Identifier:
keyid:41:65:32:42:0A:21:E4:2B:8A:D3:0D:A2:4E:BF:43:47:DE:95:EF:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWUyQgoh5CuK0w2iTr9DR96V7zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1c:7a:f2:42:3e:85:d2:0e:c3:58:4d:e0:28:30:1d:00:61:
e3:ca:e5:44:10:2c:a7:92:de:cf:12:af:9c:7f:55:a4:48:36:
70:41:f3:40:16:c1:5f:05:97:ea:ee:e2:1d:c8:26:29:2a:7f:
3a:0d:5d:75:3b:b8:52:13:31:eb:48:6b:ea:b7:07:69:32:50:
56:a0:b6:46:61:06:38:8f:b3:fa:5f:8d:71:c5:48:d9:25:a9:
3e:97:9c:d0:76:87:08:e8:79:49:c8:b2:d3:f9:08:90:e5:78:
3c:3e:f9:ee:c8:66:18:e3:ea:b2:59:ce:03:6b:8d:97:5d:8a:
88:25:b3:bb:fd:fa:9f:e7:4e:a8:9e:64:dc:2a:db:68:99:cf:
dd:85:40:2f:db:47:a9:d1:7c:ff:e6:16:ee:b2:f4:68:66:7f:
d8:94:f3:14:2b:fe:9f:7e:b8:4c:0d:f8:b5:e1:67:52:5a:8e:
54:1c:cc:35:30:86:67:30:57:6d:ad:48:51:af:87:c5:2e:98:
d8:dd:48:80:8a:60:d1:18:35:ed:c6:c2:69:0a:be:09:65:f3:
58:73:64:d2:94:41:fd:1b:ec:11:00:c8:ef:36:9a:ae:e0:3b:
01:43:6a:a0:d6:da:d5:6a:52:e5:10:79:b6:ae:ff:7b:3c:51:
8a:ef:d5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:45:49 2025 by rpki-client