Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
File: QiF6LVE6n7D84aHPwrPAXAGL2ME.mft (raw, json)
Hash identifier: eawH5737H9rcyKuDBOma544s4a/7A4r7i0zJgGTOWKs=
Subject key identifier: 0A:08:16:A3:46:04:16:C0:4B:EC:A9:42:EF:0B:44:37:C8:65:D6:6D
Authority key identifier: 42:21:7A:2D:51:3A:9F:B0:FC:E1:A1:CF:C2:B3:C0:5C:01:8B:D8:C1
Certificate issuer: /CN=42217a2d513a9fb0fce1a1cfc2b3c05c018bd8c1
Certificate serial: 0197462FC9CA4C4D08C7B10B253890A90DC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
Manifest number: 0904
Signing time: Fri 06 Jun 2025 17:00:26 +0000
Manifest this update: Fri 06 Jun 2025 17:00:26 +0000
Manifest next update: Sat 07 Jun 2025 17:00:26 +0000
Files and hashes: 1: BF1OaGyaTyDLCWSklyxgYbn9nEs.roa (hash: AVER/BhL6ABrbQlRM/PyN/xXO4yBqy6qEwfqfNZn84A=)
2: QiF6LVE6n7D84aHPwrPAXAGL2ME.crl (hash: AqaBoDFo+QjUZFy7dlgRZfWZJQBhx68plZPYJcVNOP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:2f:c9:ca:4c:4d:08:c7:b1:0b:25:38:90:a9:0d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42217a2d513a9fb0fce1a1cfc2b3c05c018bd8c1
Validity
Not Before: Jun 6 17:00:26 2025 GMT
Not After : Jun 7 17:00:26 2025 GMT
Subject: CN=0a0816a3460416c04beca942ef0b4437c865d66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cf:63:01:02:42:07:37:89:bc:0c:6d:6c:6d:
7d:9f:4f:25:2d:23:ff:e6:ca:71:c2:7f:89:ef:d0:
65:df:22:88:54:a1:01:d0:c4:6e:e3:61:ba:57:d6:
29:d0:4a:b0:0c:ca:6f:e9:bf:5d:1f:95:63:2d:18:
9a:01:a2:19:08:6d:6d:70:f0:a3:9c:8b:55:72:d4:
fb:ef:97:fe:ae:1a:35:aa:95:1c:45:09:7e:73:fc:
43:1d:da:16:1c:09:4d:aa:76:b1:d4:1d:0f:83:d1:
43:4e:ed:5e:43:eb:30:bd:9b:94:f0:71:e1:d7:4b:
88:10:1e:cf:b8:97:af:fd:ce:30:2c:f9:5e:e4:5e:
6d:e4:05:e7:9e:1f:15:8e:4e:d7:8d:c8:3e:a0:c2:
64:48:54:30:0f:59:14:83:15:a9:7e:8f:64:69:fc:
29:05:0b:13:5d:46:d3:13:2b:cd:72:4f:4e:4f:27:
16:00:20:6f:ea:78:54:b1:7d:f0:6d:eb:8e:b7:98:
8d:7e:31:5f:8b:f9:d8:3d:8e:38:d0:ab:a9:bf:45:
87:ee:6e:97:9c:df:e3:f8:9a:e6:22:be:13:0d:4e:
4d:cc:7b:ae:2a:79:20:b0:35:30:93:aa:13:56:0c:
be:44:20:68:44:9c:a6:c7:ac:a1:29:51:ab:81:96:
27:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:08:16:A3:46:04:16:C0:4B:EC:A9:42:EF:0B:44:37:C8:65:D6:6D
X509v3 Authority Key Identifier:
keyid:42:21:7A:2D:51:3A:9F:B0:FC:E1:A1:CF:C2:B3:C0:5C:01:8B:D8:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:21:c9:d6:aa:97:c5:20:dc:ea:63:0e:03:0a:b2:20:0d:78:
73:6c:13:50:e5:8e:a0:f7:8d:2a:fd:0e:32:de:54:47:ca:6a:
38:cf:7d:7b:b0:0a:dd:2c:c9:c5:26:01:b1:fa:f5:e5:7b:69:
72:8f:1c:42:01:f3:63:88:8f:f0:a3:73:17:93:df:c1:ab:7b:
34:94:3b:fa:b3:51:96:de:7e:7e:e2:d1:09:ff:3b:14:05:6e:
bc:f6:16:ab:11:fe:18:9a:48:9f:98:c0:fe:4e:bc:a8:ae:3a:
ea:f0:80:51:ba:90:9a:a8:9e:72:67:c4:61:4c:6f:69:9c:a3:
7d:ae:c9:9d:1a:e5:27:aa:3f:3f:82:91:8f:f8:1d:47:44:4c:
74:c4:ec:8a:55:d9:f7:de:3e:07:f7:3a:17:59:b3:11:be:33:
f9:51:a9:9d:ee:f7:90:e7:a6:d9:16:73:a1:22:ef:86:39:b6:
ad:f7:ab:fc:1e:fb:22:11:b3:fa:8f:1b:5e:b8:ba:83:44:f1:
ef:26:65:60:46:66:24:e2:e5:76:2d:46:8c:b0:64:41:f6:01:
08:fa:c9:a2:75:fd:79:33:44:e1:d9:58:c6:12:55:dc:af:75:
e9:53:6e:48:22:a4:f9:e2:0d:e2:52:f5:91:f4:97:b1:da:1d:
43:de:97:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:24:17 2025 by rpki-client