Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
File: qcxE1_HQ3Apavyd2SVth3kgZkl8.mft (raw, json)
Hash identifier: /ThkqwcEgVUEZ3QPkFK7XiZu78826Cp7Oflxpag82VI=
Subject key identifier: C2:87:84:9F:57:FF:21:2E:53:6F:38:97:01:6A:E7:3D:BB:51:41:65
Authority key identifier: A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
Certificate issuer: /CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Certificate serial: 019739F49B519A558A317A85CA525ED18E0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
Manifest number: 1111
Signing time: Wed 04 Jun 2025 08:00:21 +0000
Manifest this update: Wed 04 Jun 2025 08:00:21 +0000
Manifest next update: Thu 05 Jun 2025 08:00:21 +0000
Files and hashes: 1: Jo7QZBDB32wXW0Iw1K7QdXNowZk.roa (hash: K7AhFGZtd/rNskeYTg//KKyYm9N8IOSqZd1eL/nYFI0=)
2: qcxE1_HQ3Apavyd2SVth3kgZkl8.crl (hash: Hl9ud0atxUiXRMrr5mukZlRsnqRxOz6t07+hcZnivr4=)
3: s7SwYsQxw0lQy1OCUyDcPA5nRsQ.roa (hash: oInMskbU1ysq45NZWBKPFPJeOmbD2WauFvK9W3eBwaY=)
4: vFfYVEKCcc2PyT6NhaZHTqsCyRc.roa (hash: IviSD1XdrOD9s0OcxHYtTVilTBOr8uyUO7SjAFCSO3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:f4:9b:51:9a:55:8a:31:7a:85:ca:52:5e:d1:8e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Validity
Not Before: Jun 4 08:00:21 2025 GMT
Not After : Jun 5 08:00:21 2025 GMT
Subject: CN=c287849f57ff212e536f3897016ae73dbb514165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9b:0e:d5:48:5c:ab:1f:47:e9:97:55:44:74:
2b:17:51:4c:ad:c9:07:c6:ba:e2:44:99:f9:ef:b1:
64:ad:d3:21:d6:ea:c6:e9:95:80:52:be:11:1a:b0:
d7:6d:8f:a9:a5:2e:dd:9b:4f:01:1d:6a:79:79:68:
21:17:16:9f:d1:c6:88:21:9b:b6:a2:8b:64:20:48:
23:90:61:7b:90:a8:e0:a5:b7:e9:6f:ec:10:74:02:
3e:0f:f8:45:49:bd:8f:2d:92:2e:ea:5c:ef:eb:15:
3f:c8:5e:42:01:f9:6c:5d:ac:56:99:c2:24:af:70:
eb:1f:04:75:39:6c:97:81:6e:1d:d2:b4:1e:dd:0e:
7f:82:e9:95:88:8b:8e:28:bf:99:3f:b7:a2:71:2e:
99:34:6d:68:a5:39:a8:29:54:8a:aa:78:72:50:29:
8e:10:6e:28:68:73:5e:14:24:b0:d4:d1:68:28:e3:
f2:6a:87:56:d8:20:66:ab:26:cb:a9:5c:a5:c0:62:
0f:a4:86:43:12:97:e3:39:03:f0:36:e8:7b:ff:73:
81:a3:75:0c:62:f3:df:de:df:4c:cc:0a:17:82:cf:
ae:ac:a0:b8:74:8e:31:4d:d1:2d:20:b6:c9:fd:25:
ef:00:c8:af:4a:4e:6e:f8:d0:ac:ec:ed:1f:26:bd:
c6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:87:84:9F:57:FF:21:2E:53:6F:38:97:01:6A:E7:3D:BB:51:41:65
X509v3 Authority Key Identifier:
keyid:A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ab:dd:86:60:fb:91:0b:7d:a3:fb:cd:cd:54:11:d5:9f:5b:
84:a8:7f:96:d0:6e:5d:fb:4f:93:7b:12:b6:e1:a4:fb:90:90:
16:82:8a:c0:57:2c:14:30:72:59:36:36:ee:1e:ab:c8:ea:14:
69:06:b9:f8:1a:14:3e:33:88:b4:6d:91:31:6c:62:47:4f:c0:
44:32:0b:17:4b:4b:0f:6f:da:6f:ce:ef:91:63:53:bc:10:ce:
4a:cc:11:0b:57:24:41:a6:b5:53:85:f6:3c:fa:c9:a0:58:3e:
25:c7:8c:28:98:e6:da:30:4d:3f:73:bc:42:a9:6f:17:16:1f:
03:34:45:91:be:20:56:a7:fa:cd:d0:9f:bb:39:da:9f:2e:01:
5d:73:b8:1b:b1:21:38:f8:f9:7a:c3:6f:92:cc:55:57:6c:f6:
0b:72:b7:06:e8:94:11:fe:e8:ce:36:35:2d:bc:43:dd:a7:47:
6e:88:10:eb:a6:41:92:78:f6:1f:ed:ff:22:81:af:29:ec:fb:
2e:d4:39:e7:e1:07:a3:7f:ee:d8:0f:cf:1c:25:1a:2b:fb:9f:
51:c6:0a:84:80:0c:e2:89:5d:dd:9d:5b:d3:fa:52:c3:da:4d:
0b:32:af:97:bb:5d:71:d2:93:5a:ee:6f:6d:46:00:3a:84:2d:
f5:11:47:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 10:20:05 2025 by rpki-client