Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c34c99-18c8-41a2-874b-390b85394beb/1/QiW1cPRt5cbosrZO0JCtE4XatzE.mft
File: QiW1cPRt5cbosrZO0JCtE4XatzE.mft (raw, json)
Hash identifier: 9G38IUnoGLGlpbCYZL2Cisq8VY2k6UQQHrpYwyIE2Us=
Subject key identifier: 63:3A:6D:ED:F2:25:A2:6A:50:7D:29:44:F5:DB:4C:18:65:6A:E8:08
Authority key identifier: 42:25:B5:70:F4:6D:E5:C6:E8:B2:B6:4E:D0:90:AD:13:85:DA:B7:31
Certificate issuer: /CN=4225b570f46de5c6e8b2b64ed090ad1385dab731
Certificate serial: 0197477A0F3327D4C1D5E9DD2D2C32EAE81A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiW1cPRt5cbosrZO0JCtE4XatzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c34c99-18c8-41a2-874b-390b85394beb/1/QiW1cPRt5cbosrZO0JCtE4XatzE.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 23:01:10 +0000
Manifest this update: Fri 06 Jun 2025 23:01:10 +0000
Manifest next update: Sat 07 Jun 2025 23:01:10 +0000
Files and hashes: 1: Ad__4Mw9qH40aKjCCd6U7wn1LE8.roa (hash: XmUspE3wSTnFZCF/0+RPTjtSL/Xtm1GMKSxL+nI/8po=)
2: QiW1cPRt5cbosrZO0JCtE4XatzE.crl (hash: kwCXOIvI3SvDy6oUmluXmynMQVWdZOmLFsQOUfij3l8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/c34c99-18c8-41a2-874b-390b85394beb/1/QiW1cPRt5cbosrZO0JCtE4XatzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/c34c99-18c8-41a2-874b-390b85394beb/1/QiW1cPRt5cbosrZO0JCtE4XatzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiW1cPRt5cbosrZO0JCtE4XatzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:7a:0f:33:27:d4:c1:d5:e9:dd:2d:2c:32:ea:e8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4225b570f46de5c6e8b2b64ed090ad1385dab731
Validity
Not Before: Jun 6 23:01:10 2025 GMT
Not After : Jun 7 23:01:10 2025 GMT
Subject: CN=633a6dedf225a26a507d2944f5db4c18656ae808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a2:f7:6f:e4:d2:f8:80:e3:dc:22:c5:79:44:
72:52:86:35:ab:70:a6:75:c0:08:5c:57:96:81:a1:
25:6a:78:0d:51:51:aa:05:e7:02:20:91:65:8a:b5:
fe:94:9a:ed:85:f8:8e:2f:ba:4b:14:72:04:ee:c5:
46:58:d1:57:28:ce:8e:39:99:ac:24:e9:82:39:3a:
be:67:ca:e7:2d:f8:30:15:5d:39:a7:84:34:09:d9:
db:0a:6f:e0:90:d6:df:ce:31:43:98:a3:5a:99:dd:
fe:11:63:aa:35:0c:f2:c9:c3:68:ab:a5:5b:3d:7c:
89:82:ee:bc:99:72:55:aa:65:10:52:3e:64:e2:e6:
02:30:13:f7:6b:43:0f:d8:11:c5:ff:a3:ab:34:51:
b4:a1:78:1f:f5:92:6d:38:36:e6:40:bf:f5:79:26:
96:71:a2:f6:cd:56:43:3c:c7:9c:ff:b2:a1:32:d8:
1d:29:ce:21:d1:24:e6:8c:8a:81:32:b5:9f:e0:94:
06:2a:d2:a3:32:ac:a7:3f:3c:47:30:de:1e:63:cd:
80:f0:25:26:5e:7f:5d:ce:96:03:40:ca:ae:49:9e:
df:42:a0:c3:ee:77:01:d2:a9:e7:4a:9b:cc:e8:da:
8b:fd:1c:e3:4c:4f:8d:c3:3d:b4:9c:0a:5d:4e:82:
ac:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3A:6D:ED:F2:25:A2:6A:50:7D:29:44:F5:DB:4C:18:65:6A:E8:08
X509v3 Authority Key Identifier:
keyid:42:25:B5:70:F4:6D:E5:C6:E8:B2:B6:4E:D0:90:AD:13:85:DA:B7:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiW1cPRt5cbosrZO0JCtE4XatzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c34c99-18c8-41a2-874b-390b85394beb/1/QiW1cPRt5cbosrZO0JCtE4XatzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c34c99-18c8-41a2-874b-390b85394beb/1/QiW1cPRt5cbosrZO0JCtE4XatzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:dd:18:5c:ba:f3:16:cf:7e:d1:e3:ee:b4:a8:26:f8:bd:07:
4a:f9:52:0e:1d:74:14:fb:dd:c2:6e:36:2c:d4:1e:57:7f:18:
2a:fe:5b:dd:30:f0:c0:92:aa:8e:8b:67:fe:ad:c1:39:d7:a0:
93:19:e2:55:12:ee:68:f8:dc:2d:cb:32:d5:cb:0a:25:53:7e:
16:39:92:22:17:d7:f2:55:70:39:69:bd:32:fc:20:4c:53:bc:
58:d1:6a:64:10:e5:58:a3:cd:5d:94:4c:9d:2c:a0:44:23:62:
5a:fd:ea:20:21:09:22:23:14:a5:14:28:33:4d:a7:21:07:68:
7d:3e:85:7a:b1:af:51:76:1d:7e:b9:58:8e:94:b2:28:21:86:
c7:6d:58:0a:33:51:23:86:64:f8:65:bf:49:52:fc:3b:9e:e5:
8d:00:6a:f6:22:81:58:de:05:a4:1e:64:7c:f7:8a:58:f5:45:
b5:da:8c:8b:82:e7:8c:22:11:f3:3a:18:ea:13:1d:81:df:47:
8d:d9:a7:d8:f9:cb:fe:09:dd:d3:d1:e7:cd:6f:7a:76:26:d9:
82:4c:94:b7:40:c6:e3:26:40:5f:3f:d2:9e:85:af:84:df:08:
4f:de:36:7b:56:f3:ba:e8:e5:c6:54:1f:ac:be:4f:61:2c:f4:
dc:14:fd:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:10:15 2025 by rpki-client