Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.mft
File: qV9jiGJSm22v1EDhcqIvASCwmuo.mft (raw, json)
Hash identifier: KVIbKb0de198QFEfdJVxZReX8RGxhfkc6xoEkHb9BLM=
Subject key identifier: E8:74:99:4F:D1:27:2E:9F:39:84:B1:AA:48:39:99:61:37:49:41:09
Authority key identifier: A9:5F:63:88:62:52:9B:6D:AF:D4:40:E1:72:A2:2F:01:20:B0:9A:EA
Certificate issuer: /CN=a95f638862529b6dafd440e172a22f0120b09aea
Certificate serial: 019747B0A198C02758EE26E995953B01E61C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qV9jiGJSm22v1EDhcqIvASCwmuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 00:00:47 +0000
Manifest this update: Sat 07 Jun 2025 00:00:47 +0000
Manifest next update: Sun 08 Jun 2025 00:00:47 +0000
Files and hashes: 1: 5LFA7pu9BAuW9Zs8wziojRaCNSk.roa (hash: UzC92ONklOjy0NiAl9iqdlk8UfZjfzE3sfwqDQwnG80=)
2: qV9jiGJSm22v1EDhcqIvASCwmuo.crl (hash: jx+zRXAW9os2L9rS7JVs+HPiof0SV58MUOvWmzbAbIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qV9jiGJSm22v1EDhcqIvASCwmuo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:a1:98:c0:27:58:ee:26:e9:95:95:3b:01:e6:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a95f638862529b6dafd440e172a22f0120b09aea
Validity
Not Before: Jun 7 00:00:47 2025 GMT
Not After : Jun 8 00:00:47 2025 GMT
Subject: CN=e874994fd1272e9f3984b1aa4839996137494109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3e:5a:57:33:3d:b4:c6:0a:86:68:b9:76:de:
00:97:b5:33:46:d5:72:71:a1:30:40:87:52:eb:3d:
ad:75:e0:6f:09:77:ee:87:01:c5:82:e5:9d:d0:99:
a1:0f:9f:cc:d2:d4:ac:1a:87:87:73:9a:0f:56:50:
ea:b7:00:12:ff:a2:e4:b9:28:d4:7d:f4:cd:bd:d7:
fd:8c:0c:26:2b:15:a3:91:da:d5:61:65:dd:7a:a5:
79:e2:16:3e:7e:c9:ee:63:c9:0c:fc:53:0d:52:66:
86:65:fc:6c:b4:ab:5c:b8:7e:2b:37:ce:6c:7a:de:
5f:9e:2d:35:df:ed:ef:9c:7d:03:43:1f:03:19:44:
0c:c3:f4:57:52:de:9c:14:f6:0c:16:bd:36:d7:65:
3c:6c:63:ca:c3:6f:2e:f3:09:36:4a:07:70:43:54:
b2:67:e1:d8:7e:2e:7f:30:99:d3:b3:02:e8:c3:fd:
2d:57:81:4a:c5:8d:69:1d:7c:ab:f3:f1:12:74:42:
38:57:fc:39:88:6d:6b:b7:88:78:f2:99:62:0d:c4:
6b:cf:b3:67:9b:96:7c:db:e8:57:be:54:4a:33:27:
28:d0:e1:0c:18:e4:54:84:a3:2b:83:3e:7d:6b:4f:
1d:e4:4d:07:db:be:5b:1d:75:26:de:c8:a4:db:8c:
bb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:74:99:4F:D1:27:2E:9F:39:84:B1:AA:48:39:99:61:37:49:41:09
X509v3 Authority Key Identifier:
keyid:A9:5F:63:88:62:52:9B:6D:AF:D4:40:E1:72:A2:2F:01:20:B0:9A:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qV9jiGJSm22v1EDhcqIvASCwmuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e8:db:24:79:02:53:88:75:19:c9:7c:f9:aa:ea:58:88:ef:
56:78:d9:a2:4a:67:e7:83:73:74:60:fd:92:75:25:91:6c:39:
de:61:00:36:9e:4a:a2:63:58:95:3c:e1:7f:06:78:59:a6:f8:
86:38:3f:3a:a4:84:3c:48:d2:f2:3f:e7:62:c0:77:c9:e1:24:
d9:51:86:7e:c8:8e:ce:03:81:87:85:26:98:b6:c0:58:5f:d4:
b5:e4:ad:95:f7:d2:8b:58:fe:a1:14:11:f3:09:dd:51:e5:1a:
9f:43:2a:f9:15:d6:ef:b2:32:33:af:de:79:b8:2f:38:51:83:
50:0d:f4:e5:a7:11:5d:09:bc:af:05:4d:17:2f:c3:0b:14:22:
43:a7:31:0b:85:48:63:72:7c:a9:26:fc:50:34:f7:c7:60:a6:
0c:9f:4c:36:c7:1a:a9:0e:81:dd:65:ec:af:b7:9b:11:d9:32:
bf:81:c1:e8:f3:6e:02:0d:5b:c3:b1:a8:53:dd:47:75:ad:6f:
aa:b1:e8:89:76:0f:05:a0:fd:a9:0b:bd:fc:34:c1:e2:29:1f:
42:42:80:19:5d:78:8b:64:44:ff:39:0f:4e:68:0e:58:1f:ff:
9b:d6:93:f7:61:24:bc:93:ae:f3:57:e1:53:fa:c2:51:5f:d2:
ca:29:30:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:02:56 2025 by rpki-client