Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
File: q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft (raw, json)
Hash identifier: nw1YFIQivtneFLvZNvyMCOGh1ByxkpyHUVxaaO4gjHM=
Subject key identifier: 97:C8:B6:0A:56:A7:D9:E6:2E:B6:C6:E5:5A:C2:16:30:29:75:DA:BC
Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
Certificate issuer: /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Certificate serial: 01974A7AD89296E1CCF11E82154A4B8DA66B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
Manifest number: 159A
Signing time: Sat 07 Jun 2025 13:00:54 +0000
Manifest this update: Sat 07 Jun 2025 13:00:54 +0000
Manifest next update: Sun 08 Jun 2025 13:00:54 +0000
Files and hashes: 1: F9Xe_7jgOYvdTNT9YC7uc1m7clw.roa (hash: dbf14IPOhGmAOgdUCZzI8fhPd/ppi3DXyc8q1YDOSJo=)
2: HncO7o0Hx6kmO3BNCUVPbF42-m8.roa (hash: /pA5z2SwqwvGDpyWUHOM2Fy+nufCkYimVU2as7hvZq8=)
3: NiqjOlNTXM20fr7bb_Hu7fNVpnk.roa (hash: WMjXZpt8cy+IOzVtTivSuKAcQFZieAhNSlute/PEdJQ=)
4: VUze8_1n74uVa_uD6F7A6AioYKM.roa (hash: ugq/e8QeF0wIWa9W8bf0Wvpu26TSdCjGX0yCM4f1o1k=)
5: _PaUGjvJShI2nma6rn1q_5nZsbw.roa (hash: IISCWbKH8fVMYSEIH2kdkWijGfyVlaENW4tYYQwgOus=)
6: f7reVcrHhHE-i0os8pjDmr_KSH4.roa (hash: jXh5JkKzxulogW8DJqArisPnpXo5ZeSQOy/vsvzYL7E=)
7: jJkmu95ExwTShGBJvsJR7aBhoPU.roa (hash: nz14VG6Wmam+OFYqgavV7ACmkDO4KpLptIyk8PePgL8=)
8: q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl (hash: HgPAG6tTVfePbIFqCdFjHnQS0gUXe43nu8h0YumzFnQ=)
9: vJ-NNcH9s58i_6pVtY2137W58sA.roa (hash: gaXJVcSt6ugw0X061/2eBl5dxytqTi7AFjDEgazcu8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:d8:92:96:e1:cc:f1:1e:82:15:4a:4b:8d:a6:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Validity
Not Before: Jun 7 13:00:54 2025 GMT
Not After : Jun 8 13:00:54 2025 GMT
Subject: CN=97c8b60a56a7d9e62eb6c6e55ac216302975dabc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:44:23:94:fc:87:4d:e2:ed:66:47:9d:dc:19:
c6:a4:77:f9:b0:9d:3e:17:b0:49:df:85:6b:52:4d:
6a:92:3d:6e:df:13:ed:3f:94:20:fa:be:b9:d7:c6:
78:6b:20:58:0a:f4:00:b3:05:5a:3b:63:8a:56:7f:
48:2f:9c:2f:96:77:c1:0e:45:5b:e3:36:61:94:b1:
23:0a:62:45:33:4f:01:6e:34:7c:10:93:35:85:eb:
4b:07:3a:e7:06:d6:ee:7b:13:66:5f:80:c7:cb:a4:
4e:00:24:99:79:1d:1e:d3:e2:ee:ce:94:36:49:3d:
a8:7e:56:4c:77:f1:c6:12:b8:f3:c3:93:2b:e3:70:
9b:5c:a6:ef:73:cf:1c:f7:b9:f9:8a:a7:b3:54:04:
bd:17:28:27:fd:fd:36:6a:15:ce:86:ab:ae:99:43:
e8:1a:6e:6e:76:e1:9f:64:e0:0e:4a:df:2e:c7:e5:
8a:e0:20:85:81:7f:d5:ff:6f:94:85:70:1d:39:8e:
1c:f2:0a:66:60:bd:36:ae:55:83:aa:60:46:1e:89:
73:f6:12:ab:0e:b4:1c:3c:8e:6c:af:22:12:ef:ca:
37:02:57:90:91:3a:d0:83:c6:5d:71:8a:f5:bb:87:
6e:ee:76:30:50:dc:82:30:36:cd:e4:7b:8f:6e:cc:
b1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C8:B6:0A:56:A7:D9:E6:2E:B6:C6:E5:5A:C2:16:30:29:75:DA:BC
X509v3 Authority Key Identifier:
keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:08:31:06:48:b2:f6:02:54:bd:b1:c3:fd:d9:1b:11:11:3a:
8e:7f:84:9c:1f:66:a8:6b:70:d3:74:16:b2:d5:99:d9:3f:a2:
5f:7d:08:c6:90:3c:d9:4f:74:bb:07:69:7a:77:07:a9:15:9a:
4f:56:68:6b:d9:47:e8:e1:32:fd:c9:15:93:05:1f:b1:b7:0f:
69:fe:a3:b0:68:2d:0c:05:f6:7d:9b:fb:76:b0:4b:63:16:cc:
a8:53:ad:c4:bc:62:52:dd:75:cc:5c:00:b2:55:30:a6:92:3c:
a8:82:f9:4c:f4:cd:80:03:1f:6b:d5:bf:4b:3e:14:a8:4c:51:
09:79:d2:eb:56:25:0b:85:b7:31:88:9c:f0:05:54:d2:b3:6d:
37:99:5f:87:3b:5d:36:37:7e:a9:63:91:f1:e6:db:6b:19:77:
9d:c0:bd:1a:be:83:dd:d1:67:0d:74:91:21:8b:fb:6e:82:48:
84:f4:ac:97:67:37:e2:75:28:2a:0a:9f:d6:b1:47:c1:40:5a:
c0:91:8a:a7:54:b5:63:50:81:93:00:55:77:d9:e8:78:8f:62:
bb:90:03:5e:a5:96:40:1e:00:95:ec:a2:ff:c8:c8:9d:f5:d6:
3b:ef:18:84:c2:71:65:2f:39:35:53:cb:5e:9b:c7:70:2b:b4:
41:a1:8e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:49:11 2025 by rpki-client