Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
File: QiYpIEOCMfMh47gQEIiyD5DAjUY.mft (raw, json)
Hash identifier: SFp3pMaMceej1hqctic9tScC1oTX45OzpaWa5vzLYbg=
Subject key identifier: 15:4F:0A:78:78:3B:D0:7C:9A:D0:44:81:E4:87:F3:DE:4B:5A:06:3D
Authority key identifier: 42:26:29:20:43:82:31:F3:21:E3:B8:10:10:88:B2:0F:90:C0:8D:46
Certificate issuer: /CN=42262920438231f321e3b8101088b20f90c08d46
Certificate serial: 0197526B829CBECF140C80DE33D749879016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiYpIEOCMfMh47gQEIiyD5DAjUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
Manifest number: 04E3
Signing time: Mon 09 Jun 2025 02:01:06 +0000
Manifest this update: Mon 09 Jun 2025 02:01:06 +0000
Manifest next update: Tue 10 Jun 2025 02:01:06 +0000
Files and hashes: 1: QiYpIEOCMfMh47gQEIiyD5DAjUY.crl (hash: SHOkAsH6kdqjFRCBiFW58zZjgGnwKnwLQBpU0XKsy8g=)
2: vzK0GcfKIhsh5S1UL0NdOS-MO04.roa (hash: tbZrlZm8dX+O2bKlUBHktkojMJRjyTWeZk1UwYb3Lj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiYpIEOCMfMh47gQEIiyD5DAjUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:6b:82:9c:be:cf:14:0c:80:de:33:d7:49:87:90:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42262920438231f321e3b8101088b20f90c08d46
Validity
Not Before: Jun 9 02:01:06 2025 GMT
Not After : Jun 10 02:01:06 2025 GMT
Subject: CN=154f0a78783bd07c9ad04481e487f3de4b5a063d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:da:b5:7e:92:4b:80:ab:58:21:f3:36:65:e6:
a7:a4:47:97:b3:24:78:4f:cb:28:8a:0c:74:bc:a0:
67:e5:07:0b:11:75:87:2b:4a:5a:99:fd:d1:7a:1d:
b1:02:fc:ac:03:ac:79:ff:f9:5c:89:4c:bc:f5:e7:
bb:62:0a:ec:7d:5e:6e:50:33:ae:83:2c:4b:39:90:
c7:42:a8:ba:f2:7e:6b:b1:5e:c7:66:33:09:dc:96:
fb:01:3a:62:fa:fb:d0:72:fe:a3:a8:62:4b:7e:46:
18:db:db:d7:0a:ac:b8:1e:9a:49:5c:32:3b:05:f3:
ed:c8:19:35:d9:1f:83:33:38:96:d8:66:db:a1:9a:
07:55:68:dc:c4:ae:63:21:8b:d2:97:3f:c7:f4:ce:
67:b2:9d:ad:bc:71:65:24:ff:f1:d1:d6:a8:3e:ab:
c5:f8:5d:9d:a5:f1:49:cb:53:ef:92:b7:e5:88:bb:
32:68:e6:1a:1f:e0:88:b4:f9:a6:31:66:99:93:4f:
f1:6f:27:bf:1e:6f:eb:25:b5:74:9a:68:0a:cc:cc:
19:ed:1f:1a:98:70:5d:cb:ca:86:25:3c:9a:0b:f6:
b1:7e:bf:fb:60:7b:80:2f:68:e7:82:11:36:d8:01:
ab:8e:8e:63:13:f2:74:81:1f:e1:94:08:01:7e:f4:
46:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4F:0A:78:78:3B:D0:7C:9A:D0:44:81:E4:87:F3:DE:4B:5A:06:3D
X509v3 Authority Key Identifier:
keyid:42:26:29:20:43:82:31:F3:21:E3:B8:10:10:88:B2:0F:90:C0:8D:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiYpIEOCMfMh47gQEIiyD5DAjUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ae:ec:94:bb:ce:83:07:56:54:06:c3:2f:2e:ba:93:9f:e9:
a6:81:0e:52:33:55:2e:82:cd:f7:58:f5:ee:64:c6:5f:56:26:
07:25:36:02:96:95:07:dc:00:48:db:0f:22:5d:58:e8:7f:b5:
c8:3f:88:cc:b2:c2:f1:89:2d:e1:69:22:57:c5:36:ad:ae:2f:
b2:44:c8:ec:9c:1e:48:02:16:70:1c:45:50:71:95:a2:d1:1d:
23:ac:99:e8:ad:f3:2e:96:af:9f:0c:ed:3b:37:9a:da:fa:65:
de:cc:fd:49:f7:ba:62:f9:01:38:4b:ce:c6:65:32:27:2b:77:
a5:d5:55:c4:e3:c8:5e:01:e3:6e:b9:58:77:02:aa:07:fc:17:
58:1e:1d:01:3f:59:f8:bb:e9:fa:22:c1:3e:49:5b:dc:0a:13:
b7:0a:74:f8:9d:8d:6a:ae:5d:e3:6a:c2:c6:94:5b:ef:c3:32:
1f:70:a6:e9:02:0c:b5:40:cc:0d:9e:e1:df:cb:6a:7d:ac:96:
8c:14:d3:35:7e:b7:bb:91:05:eb:9f:ce:8e:93:8f:e8:a8:a3:
1a:37:33:dd:90:10:bd:d7:c9:99:22:20:72:67:01:96:da:64:
0d:c6:53:35:52:14:80:07:e4:66:f6:ec:fa:de:b1:1e:a9:0c:
ae:ac:b7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:38:34 2025 by rpki-client