Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
File: RQLrIq5cC03NOaD5ZBolcGNEcfk.mft (raw, json)
Hash identifier: iNiJzJp2jn3Z4YaXT6Midup96n56XV7xi+lenSh4CVg=
Subject key identifier: 59:69:57:1D:CD:D3:D7:38:A4:2B:90:95:15:DF:05:8D:73:C6:AC:AE
Authority key identifier: 45:02:EB:22:AE:5C:0B:4D:CD:39:A0:F9:64:1A:25:70:63:44:71:F9
Certificate issuer: /CN=4502eb22ae5c0b4dcd39a0f9641a2570634471f9
Certificate serial: 0197507CC99DCFD21D6D96FD7C1F6205A9DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
Manifest number: 0597
Signing time: Sun 08 Jun 2025 17:00:44 +0000
Manifest this update: Sun 08 Jun 2025 17:00:44 +0000
Manifest next update: Mon 09 Jun 2025 17:00:44 +0000
Files and hashes: 1: RQLrIq5cC03NOaD5ZBolcGNEcfk.crl (hash: aWiL/flBn6QJcESbRH1+W1+d0TrQXsX/983MEmbGHRw=)
2: bEqgtrspfIQ8XBKsdOXgQ2Xyvsk.roa (hash: RpGyhN37kiaHNLFfnHAUkc7DrZnN6EVEiWZPE+rzTPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:7c:c9:9d:cf:d2:1d:6d:96:fd:7c:1f:62:05:a9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4502eb22ae5c0b4dcd39a0f9641a2570634471f9
Validity
Not Before: Jun 8 17:00:44 2025 GMT
Not After : Jun 9 17:00:44 2025 GMT
Subject: CN=5969571dcdd3d738a42b909515df058d73c6acae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0f:59:71:57:aa:5b:30:77:77:4e:2f:ea:27:
21:ad:36:66:fe:47:e4:ac:b9:d6:37:96:5d:a4:15:
48:06:2c:33:95:d8:bf:8c:70:19:4c:52:c3:bc:2f:
ae:a7:e9:b2:83:2a:c6:f0:b7:77:cb:aa:14:05:a8:
dd:51:26:ca:37:d6:5c:4f:63:c6:ae:71:35:c5:cc:
62:45:61:61:52:a2:47:b4:2a:fe:96:d3:78:41:8b:
86:50:fc:4b:76:40:7b:f5:07:7d:a8:a1:74:ad:88:
be:8c:a8:f5:89:c2:cc:ff:e4:c4:0a:4e:54:18:ea:
b6:60:79:d6:de:c1:77:8b:42:98:c1:c4:ff:de:6c:
72:2d:4e:3d:71:20:43:2e:a0:5c:e6:23:9d:fe:26:
7b:83:b2:08:01:2e:1e:4a:48:80:a4:c6:29:9f:47:
bb:ad:b8:ad:07:8d:c5:25:37:dc:8f:f5:98:33:b4:
19:30:68:8e:2e:33:ed:7f:91:02:99:e2:1e:f9:bf:
1d:89:b2:8b:74:9c:c4:26:6f:bc:e2:60:23:de:4c:
ad:e7:85:81:cc:9e:e6:4c:ec:9e:59:09:44:8c:9c:
e5:02:e3:01:df:9f:ab:ab:1e:24:3d:c2:aa:e4:ea:
93:90:c3:cd:11:32:cb:3a:4a:f7:eb:e8:a6:06:6b:
60:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:69:57:1D:CD:D3:D7:38:A4:2B:90:95:15:DF:05:8D:73:C6:AC:AE
X509v3 Authority Key Identifier:
keyid:45:02:EB:22:AE:5C:0B:4D:CD:39:A0:F9:64:1A:25:70:63:44:71:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ff:2a:f8:36:b3:b0:e3:0c:51:65:83:48:35:29:51:d0:48:
dd:12:2f:94:a9:a7:8f:4a:42:86:23:78:f3:19:b6:f2:f4:3f:
b7:c2:99:02:f0:f8:75:9f:bb:ad:66:6f:2a:00:3d:1c:db:15:
2f:85:71:b3:9c:df:3d:a2:ae:53:7d:b5:64:2a:05:2d:4d:8d:
85:4e:f7:65:a7:8a:5a:a0:6f:97:97:31:08:ea:fd:a8:a4:50:
d3:91:40:9c:76:8e:5f:bd:51:e1:07:4c:df:2c:a4:86:52:42:
48:96:3f:49:66:b9:4e:b8:0d:68:f7:0b:5b:9b:ca:d7:3b:d8:
8e:eb:c8:bf:0e:6a:cc:9c:ae:ad:62:4a:39:05:9a:78:fb:0a:
73:58:b5:c4:07:f5:21:2c:7b:81:5a:02:85:1a:9c:de:be:60:
66:f2:f8:74:65:45:5a:e0:20:81:71:b3:f1:47:b1:6b:62:3d:
41:0e:6a:83:9a:3a:0d:0a:c4:de:e9:40:4a:9e:fb:3f:aa:03:
95:15:53:ea:c9:12:df:6d:b8:29:a1:3a:0c:5f:68:fa:93:19:
31:ef:9b:81:d1:eb:7a:88:6e:42:84:ed:24:27:4d:28:fb:f7:
4a:66:88:a8:3f:09:a3:4f:af:98:70:80:1a:1e:19:39:63:b6:
d3:87:1a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:49:36 2025 by rpki-client